Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2019/12/04 15:11:57 fuzzer started 2019/12/04 15:11:59 dialing manager at 10.128.0.105:44241 2019/12/04 15:12:01 syscalls: 2684 2019/12/04 15:12:01 code coverage: enabled 2019/12/04 15:12:01 comparison tracing: enabled 2019/12/04 15:12:01 extra coverage: extra coverage is not supported by the kernel 2019/12/04 15:12:01 setuid sandbox: enabled 2019/12/04 15:12:01 namespace sandbox: enabled 2019/12/04 15:12:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 15:12:01 fault injection: enabled 2019/12/04 15:12:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 15:12:01 net packet injection: enabled 2019/12/04 15:12:01 net device setup: enabled 2019/12/04 15:12:01 concurrency sanitizer: enabled 2019/12/04 15:12:01 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 59.903854][ T7727] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/04 15:12:08 adding functions to KCSAN blacklist: 'blk_mq_dispatch_rq_list' 'ext4_has_free_clusters' 'ext4_free_inodes_count' 'poll_schedule_timeout' 'blk_mq_get_request' '__writeback_single_inode' '__ext4_new_inode' 'wbt_done' 'taskstats_exit' 'copy_process' 'do_nanosleep' '__rb_insert_augmented' '__filemap_fdatawrite_range' 'generic_fillattr' 'generic_write_end' 'find_get_pages_range_tag' 'ext4_free_inode' 'do_exit' 'tick_nohz_idle_stop_tick' 'futex_wait_queue_me' 'run_timer_softirq' 'page_counter_try_charge' 'pipe_poll' 'tick_sched_do_timer' '__splice_from_pipe' 'dd_has_work' 'ext4_nonda_switch' 'sctp_assoc_migrate' 'tomoyo_check_path_acl' 'audit_log_start' 'add_timer' 'tcp_add_backlog' 'n_tty_receive_buf_common' 'find_next_bit' 'mod_timer' 'blk_mq_run_hw_queue' '__hrtimer_run_queues' 'ep_poll' 'rcu_gp_fqs_check_wake' 'pid_update_inode' 'tick_do_update_jiffies64' 'fprop_fraction_percpu' 'lruvec_lru_size' 'tomoyo_supervisor' 15:12:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) clock_gettime(0x0, &(0x7f0000000400)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 15:12:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x17b, 0x11, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 113.358269][ T7731] IPVS: ftp: loaded support on port[0] = 21 [ 113.459422][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 113.516772][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.542980][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.550664][ T7731] device bridge_slave_0 entered promiscuous mode [ 113.561839][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.569208][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.576929][ T7731] device bridge_slave_1 entered promiscuous mode [ 113.595153][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.608262][ T7734] IPVS: ftp: loaded support on port[0] = 21 15:12:56 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1d4c, 0x0, 0xfffffffffffffed7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x200001000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") [ 113.616063][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.635495][ T7731] team0: Port device team_slave_0 added [ 113.646184][ T7731] team0: Port device team_slave_1 added [ 113.775713][ T7731] device hsr_slave_0 entered promiscuous mode 15:12:56 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000300)=0x5000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) listen(r2, 0x893) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) accept4$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0x48, 0x800) socket(0x0, 0x0, 0x8) [ 113.883312][ T7731] device hsr_slave_1 entered promiscuous mode [ 113.997695][ T7736] IPVS: ftp: loaded support on port[0] = 21 [ 114.014332][ T7734] chnl_net:caif_netlink_parms(): no params data found [ 114.064886][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.072142][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.079606][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.086693][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.189220][ T7741] IPVS: ftp: loaded support on port[0] = 21 15:12:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port1\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x20000000000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 114.291305][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.322987][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.353680][ T7734] device bridge_slave_0 entered promiscuous mode [ 114.435531][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.443233][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.474241][ T7734] device bridge_slave_1 entered promiscuous mode [ 114.484755][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.514045][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.534187][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.564338][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 114.652471][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.693630][ T7734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.745889][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.763369][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.827398][ T7734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.884796][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.903455][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.912769][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.920680][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.983302][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.014603][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.054385][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.061757][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.093371][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.102567][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 15:12:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) sendmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)='v', 0x8ec0}], 0x2, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14}}], 0x38}, 0x0) [ 115.150727][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.189980][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.233951][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.263184][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.314361][ T7767] IPVS: ftp: loaded support on port[0] = 21 [ 115.355299][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.365323][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.394153][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.448583][ T7734] team0: Port device team_slave_0 added [ 115.478665][ T7731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.505505][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.556963][ T7734] team0: Port device team_slave_1 added [ 115.562756][ T7741] chnl_net:caif_netlink_parms(): no params data found [ 115.589155][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.606664][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.636429][ T7736] chnl_net:caif_netlink_parms(): no params data found [ 115.687107][ T7774] IPVS: ftp: loaded support on port[0] = 21 [ 115.764661][ T7734] device hsr_slave_0 entered promiscuous mode [ 115.813276][ T7734] device hsr_slave_1 entered promiscuous mode [ 115.882983][ T7734] debugfs: Directory 'hsr0' with parent '/' already present! [ 115.899125][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.906637][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.927466][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.934724][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.942704][ T7741] device bridge_slave_0 entered promiscuous mode [ 115.954133][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.961342][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.978378][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.988099][ T7741] device bridge_slave_1 entered promiscuous mode [ 116.004768][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.011890][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.025960][ T7736] device bridge_slave_0 entered promiscuous mode [ 116.045245][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.052492][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.063512][ T7736] device bridge_slave_1 entered promiscuous mode [ 116.098900][ T7741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.166193][ T7736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.196056][ T7736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.219810][ T7741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.389569][ T7736] team0: Port device team_slave_0 added [ 116.396518][ T7741] team0: Port device team_slave_0 added [ 116.480241][ T7736] team0: Port device team_slave_1 added [ 116.486942][ T7741] team0: Port device team_slave_1 added [ 116.495792][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.520196][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 116.598342][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.618402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.674306][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 116.779629][ T7741] device hsr_slave_0 entered promiscuous mode [ 116.845170][ T7741] device hsr_slave_1 entered promiscuous mode [ 116.865110][ T7741] debugfs: Directory 'hsr0' with parent '/' already present! [ 116.925227][ T7736] device hsr_slave_0 entered promiscuous mode [ 116.963172][ T7736] device hsr_slave_1 entered promiscuous mode [ 117.012925][ T7736] debugfs: Directory 'hsr0' with parent '/' already present! [ 117.032098][ T7734] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.089308][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.112971][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.127466][ T7767] device bridge_slave_0 entered promiscuous mode [ 117.135449][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.147377][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.156204][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.163293][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.207154][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.223105][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.230923][ T7767] device bridge_slave_1 entered promiscuous mode [ 117.301073][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.309425][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.384784][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 15:13:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) clock_gettime(0x0, &(0x7f0000000400)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 117.429514][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.436648][ T7763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.486224][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.513944][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.556981][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.582430][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.623873][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.661782][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.784086][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.827588][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.908276][ T7734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.949543][ T7734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.995557][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.018296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.057317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.172064][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.204196][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.235047][ T7774] device bridge_slave_0 entered promiscuous mode [ 118.283214][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.322581][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.393598][ T7774] device bridge_slave_1 entered promiscuous mode 15:13:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) clock_gettime(0x0, &(0x7f0000000400)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 118.436740][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.528835][ T7734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.586949][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.602392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.653965][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.780731][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.911067][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.022901][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.102615][ T7767] team0: Port device team_slave_0 added [ 119.117901][ T7774] team0: Port device team_slave_0 added [ 119.145924][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.157616][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.183681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.238188][ T7741] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.256994][ T7767] team0: Port device team_slave_1 added [ 119.264400][ T7774] team0: Port device team_slave_1 added [ 119.285256][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.295428][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.315007][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 15:13:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) clock_gettime(0x0, &(0x7f0000000400)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 119.416822][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.438744][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.515998][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.523108][ T7763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.618842][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 15:13:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x17b, 0x11, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 119.679886][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.768260][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.775382][ T7763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.870604][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.917748][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.981181][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 15:13:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x17b, 0x11, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 120.036674][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.049303][ T7825] ================================================================== [ 120.057477][ T7825] BUG: KCSAN: data-race in pipe_wait / put_pipe_info [ 120.064140][ T7825] [ 120.066465][ T7825] read to 0xffff8880b87ad40c of 4 bytes by task 7826 on cpu 1: [ 120.074027][ T7825] pipe_wait+0xd7/0x140 [ 120.078222][ T7825] pipe_read+0x3b1/0x5e0 [ 120.082494][ T7825] new_sync_read+0x389/0x4f0 [ 120.087064][ T7825] __vfs_read+0xb1/0xc0 [ 120.091198][ T7825] vfs_read+0x143/0x2c0 [ 120.095369][ T7825] ksys_read+0xd5/0x1b0 [ 120.099522][ T7825] __x64_sys_read+0x4c/0x60 [ 120.104017][ T7825] do_syscall_64+0xcc/0x370 [ 120.108513][ T7825] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 120.114403][ T7825] [ 120.116748][ T7825] write to 0xffff8880b87ad40c of 4 bytes by task 7825 on cpu 0: [ 120.124373][ T7825] put_pipe_info+0x4d/0xb0 [ 120.128914][ T7825] pipe_release+0x152/0x1b0 [ 120.133406][ T7825] __fput+0x1e1/0x520 [ 120.137368][ T7825] ____fput+0x1f/0x30 [ 120.141347][ T7825] task_work_run+0xf6/0x130 [ 120.145835][ T7825] exit_to_usermode_loop+0x2b4/0x2c0 [ 120.151101][ T7825] do_syscall_64+0x353/0x370 [ 120.155675][ T7825] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 120.161543][ T7825] [ 120.163849][ T7825] Reported by Kernel Concurrency Sanitizer on: [ 120.169987][ T7825] CPU: 0 PID: 7825 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 120.177159][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.187368][ T7825] ================================================================== [ 120.195423][ T7825] Kernel panic - not syncing: panic_on_warn set ... [ 120.202014][ T7825] CPU: 0 PID: 7825 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 120.209337][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.219522][ T7825] Call Trace: [ 120.222838][ T7825] dump_stack+0x11d/0x181 [ 120.227162][ T7825] panic+0x210/0x640 [ 120.231054][ T7825] ? vprintk_func+0x8d/0x140 [ 120.235649][ T7825] kcsan_report.cold+0xc/0xd [ 120.240318][ T7825] kcsan_setup_watchpoint+0x3fe/0x460 [ 120.245716][ T7825] __tsan_unaligned_write4+0xc4/0x100 [ 120.251098][ T7825] put_pipe_info+0x4d/0xb0 [ 120.255525][ T7825] pipe_release+0x152/0x1b0 [ 120.260031][ T7825] __fput+0x1e1/0x520 [ 120.263999][ T7825] ? put_pipe_info+0xb0/0xb0 [ 120.268578][ T7825] ____fput+0x1f/0x30 [ 120.272559][ T7825] task_work_run+0xf6/0x130 [ 120.277060][ T7825] exit_to_usermode_loop+0x2b4/0x2c0 [ 120.282330][ T7825] do_syscall_64+0x353/0x370 [ 120.286909][ T7825] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 120.292782][ T7825] RIP: 0033:0x7fd9e16242b0 [ 120.297193][ T7825] Code: 40 75 0b 31 c0 48 83 c4 08 e9 0c ff ff ff 48 8d 3d c5 32 08 00 e8 c0 07 02 00 83 3d 45 a3 2b 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ce 8a 01 00 48 89 04 24 [ 120.316938][ T7825] RSP: 002b:00007fff43c9a558 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 120.325372][ T7825] RAX: 0000000000000000 RBX: 00007fd9e18d97a0 RCX: 00007fd9e16242b0 [ 120.333477][ T7825] RDX: 00007fd9e18dadf0 RSI: 0000000000000001 RDI: 0000000000000001 [ 120.342217][ T7825] RBP: 0000000000000000 R08: 00007fd9e1d1d700 R09: 00007fd9e1d1d700 [ 120.350259][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 120.358572][ T7825] R13: 0000000000000001 R14: 000000000115d160 R15: 0000000000000000 [ 120.368944][ T7825] Kernel Offset: disabled [ 120.373300][ T7825] Rebooting in 86400 seconds..