[info] Using makefile-style concurrent boot in runlevel 2. [ 43.863158][ T26] audit: type=1800 audit(1574870555.867:21): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 43.912859][ T26] audit: type=1800 audit(1574870555.877:22): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. 2019/11/27 16:02:44 fuzzer started 2019/11/27 16:02:46 dialing manager at 10.128.0.105:36065 2019/11/27 16:02:46 checking machine... 2019/11/27 16:02:46 checking revisions... 2019/11/27 16:02:46 testing simple program... syzkaller login: [ 54.570955][ T7548] IPVS: ftp: loaded support on port[0] = 21 2019/11/27 16:02:46 building call list... executing program [ 57.552422][ T7532] can: request_module (can-proto-0) failed. [ 57.563980][ T7532] can: request_module (can-proto-0) failed. [ 57.575420][ T7532] can: request_module (can-proto-0) failed. 2019/11/27 16:02:53 syscalls: 2567 2019/11/27 16:02:53 code coverage: enabled 2019/11/27 16:02:53 comparison tracing: enabled 2019/11/27 16:02:53 extra coverage: extra coverage is not supported by the kernel 2019/11/27 16:02:53 setuid sandbox: enabled 2019/11/27 16:02:53 namespace sandbox: enabled 2019/11/27 16:02:53 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/27 16:02:53 fault injection: enabled 2019/11/27 16:02:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/27 16:02:53 net packet injection: enabled 2019/11/27 16:02:53 net device setup: enabled 2019/11/27 16:02:53 concurrency sanitizer: enabled 2019/11/27 16:02:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 16:02:54 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000021002551075c0165ff0ffc020200010000100f0007e100ea0700020016000000", 0x24) [ 62.685720][ T7592] IPVS: ftp: loaded support on port[0] = 21 16:02:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x30a, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x480c0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x2080) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) write(r2, &(0x7f0000000000)="b6", 0xfffffe7e) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r3, 0x5609, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) lstat(&(0x7f0000000180)='./bus\x00', &(0x7f00000002c0)) socket$inet6(0xa, 0x49c68e0740a3058b, 0x4) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000400)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x3, 0x0, 0x8, 0x3, 0x12, 0x1, 0xff, 0x0, 0x1, 0x0, 0x6, 0x1}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 62.755392][ T7592] chnl_net:caif_netlink_parms(): no params data found [ 62.803276][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.823824][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.831435][ T7592] device bridge_slave_0 entered promiscuous mode [ 62.854929][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.862000][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.894397][ T7592] device bridge_slave_1 entered promiscuous mode [ 62.910676][ T7592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.928743][ T7595] IPVS: ftp: loaded support on port[0] = 21 [ 62.936378][ T7592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.969988][ T7592] team0: Port device team_slave_0 added [ 62.986814][ T7592] team0: Port device team_slave_1 added 16:02:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$TUNSETGROUP(r0, 0x54e3, 0x0) [ 63.076192][ T7592] device hsr_slave_0 entered promiscuous mode [ 63.124441][ T7592] device hsr_slave_1 entered promiscuous mode [ 63.219443][ T7597] IPVS: ftp: loaded support on port[0] = 21 16:02:55 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$kcm(0xa, 0x2, 0x11) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11, 0x65, 0x0, 0x71a000) [ 63.266411][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.273479][ T7592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.280786][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.287837][ T7592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.434524][ T7595] chnl_net:caif_netlink_parms(): no params data found [ 63.555786][ T7592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.567369][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.604139][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.633829][ T7595] device bridge_slave_0 entered promiscuous mode [ 63.674502][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.693812][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.701760][ T7595] device bridge_slave_1 entered promiscuous mode [ 63.740564][ T7592] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.801023][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.815069][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.853960][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.895281][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.941835][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.023801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.032609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.043107][ T7623] IPVS: ftp: loaded support on port[0] = 21 [ 64.095223][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.102277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.135379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.165131][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 16:02:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000040), 0x4) flock(r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=unix,posixacl,loose,obj_user={\\mime_tySe\\,cpusetprocvboxnet0,seclabel,fsname=md5sum,pcr=00000000000000000007,p']) [ 64.194001][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.201071][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.232643][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.267870][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.314795][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.323486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.376792][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.404499][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.415857][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.475461][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.490392][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.525186][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.549906][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.574548][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.609627][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.650856][ T7630] IPVS: ftp: loaded support on port[0] = 21 [ 64.657849][ T7595] team0: Port device team_slave_0 added [ 64.664921][ T7595] team0: Port device team_slave_1 added [ 64.673638][ T7597] chnl_net:caif_netlink_parms(): no params data found [ 64.721797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.730428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 16:02:56 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000400)=""/4096, 0x1000) [ 64.817003][ T7595] device hsr_slave_0 entered promiscuous mode [ 64.855509][ T7595] device hsr_slave_1 entered promiscuous mode [ 64.893817][ T7595] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.912582][ T7592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.928488][ T7638] IPVS: ftp: loaded support on port[0] = 21 [ 65.039534][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.049043][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.066692][ T7597] device bridge_slave_0 entered promiscuous mode [ 65.112586][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.134035][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.155690][ T7597] device bridge_slave_1 entered promiscuous mode [ 65.197131][ T7623] chnl_net:caif_netlink_parms(): no params data found [ 65.233350][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.377139][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.394436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.422120][ T7595] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.436303][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.479427][ T7630] chnl_net:caif_netlink_parms(): no params data found [ 65.504188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.518505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 16:02:57 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000021002551075c0165ff0ffc020200010000100f0007e100ea0700020016000000", 0x24) [ 65.544417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.551506][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.618872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.639740][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.658161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.665314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.704209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.730581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.759620][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.786545][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.812876][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.821493][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.840690][ T7623] device bridge_slave_0 entered promiscuous mode [ 65.866048][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.897076][ T7595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.933054][ T7595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.966447][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 16:02:58 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000021002551075c0165ff0ffc020200010000100f0007e100ea0700020016000000", 0x24) [ 66.007707][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.039617][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.088316][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.114643][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.122975][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.157998][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.185962][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.201839][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.211182][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.229807][ T7623] device bridge_slave_1 entered promiscuous mode [ 66.248145][ T7638] chnl_net:caif_netlink_parms(): no params data found [ 66.297113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:02:58 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000021002551075c0165ff0ffc020200010000100f0007e100ea0700020016000000", 0x24) [ 66.345841][ T7597] team0: Port device team_slave_0 added [ 66.378455][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.422109][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.444808][ T7630] device bridge_slave_0 entered promiscuous mode [ 66.452504][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.473776][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.481594][ T7630] device bridge_slave_1 entered promiscuous mode [ 66.501638][ T7623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.517438][ T7597] team0: Port device team_slave_1 added 16:02:58 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000021002551075c0165ff0ffc020200010000100f0007e100ea0700020016000000", 0x24) [ 66.561086][ T7623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.587263][ T7623] team0: Port device team_slave_0 added [ 66.601173][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.621500][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.632567][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.643204][ T7630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.661932][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.669481][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.677199][ T7638] device bridge_slave_0 entered promiscuous mode [ 66.689583][ T7623] team0: Port device team_slave_1 added [ 66.699493][ T7630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.713019][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state 16:02:58 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000021002551075c0165ff0ffc020200010000100f0007e100ea0700020016000000", 0x24) [ 66.722979][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.730915][ T7638] device bridge_slave_1 entered promiscuous mode [ 66.755113][ T7630] team0: Port device team_slave_0 added [ 66.761811][ T7630] team0: Port device team_slave_1 added [ 66.790181][ T7638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.828416][ T7597] device hsr_slave_0 entered promiscuous mode [ 66.884150][ T7597] device hsr_slave_1 entered promiscuous mode [ 66.923808][ T7597] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.986036][ T7623] device hsr_slave_0 entered promiscuous mode [ 67.024221][ T7623] device hsr_slave_1 entered promiscuous mode 16:02:59 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000021002551075c0165ff0ffc020200010000100f0007e100ea0700020016000000", 0x24) [ 67.063796][ T7623] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.072603][ T7638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.177818][ T7630] device hsr_slave_0 entered promiscuous mode [ 67.236065][ T7630] device hsr_slave_1 entered promiscuous mode [ 67.274885][ T7630] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.428687][ T7638] team0: Port device team_slave_0 added 16:02:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@datasec={0x7, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x2}], "0a4d06"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "b8"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/255, 0x49, 0xff, 0x1}, 0x20) [ 67.494725][ T7638] team0: Port device team_slave_1 added [ 67.875817][ T7638] device hsr_slave_0 entered promiscuous mode [ 67.934379][ T7638] device hsr_slave_1 entered promiscuous mode [ 67.983826][ T7638] debugfs: Directory 'hsr0' with parent '/' already present! [ 68.213355][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.420587][ T7623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.548681][ T7597] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.624834][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.634490][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.642043][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.759596][ T7623] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.840354][ T7630] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.905052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.912803][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.008224][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 16:03:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@datasec={0x7, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x2}], "0a4d06"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "b8"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/255, 0x49, 0xff, 0x1}, 0x20) [ 69.097970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.194677][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.279092][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.373268][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.380370][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.686266][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.747997][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.834205][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.842547][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.849602][ T7691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.044410][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.053007][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.196739][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.203881][ T7691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.334281][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.343105][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.504853][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.513339][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.674779][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.683476][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.820238][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.827328][ T7691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.990580][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.064412][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.164168][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.171232][ T7691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.314306][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.407355][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.497800][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.584641][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.647580][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.744602][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.753297][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.914215][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.922570][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.929665][ T7691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.127605][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.224795][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.233580][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.374488][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.383206][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.544533][ T7691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.558473][ T7623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.657317][ T7623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.778458][ T7630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.876952][ T7630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.977796][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.019150][ T7597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.133833][ T7597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.218636][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.244436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.252442][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.384403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.424833][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.477394][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.557331][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.604710][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.652555][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.753416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.794275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.804136][ T7535] ================================================================== [ 73.812250][ T7535] BUG: KCSAN: data-race in tcp_add_backlog / tcp_recvmsg [ 73.819260][ T7535] [ 73.821587][ T7535] write to 0xffff888122451338 of 8 bytes by interrupt on cpu 0: [ 73.829323][ T7535] tcp_add_backlog+0x476/0xce0 [ 73.834096][ T7535] tcp_v4_rcv+0x1a70/0x1bd0 [ 73.838604][ T7535] ip_protocol_deliver_rcu+0x4d/0x420 [ 73.843972][ T7535] ip_local_deliver_finish+0x110/0x140 [ 73.849435][ T7535] ip_local_deliver+0x133/0x210 [ 73.854285][ T7535] ip_rcv_finish+0x121/0x160 [ 73.858869][ T7535] ip_rcv+0x18f/0x1a0 [ 73.862851][ T7535] __netif_receive_skb_one_core+0xa7/0xe0 [ 73.868563][ T7535] __netif_receive_skb+0x37/0xf0 [ 73.873494][ T7535] netif_receive_skb_internal+0x59/0x190 [ 73.879117][ T7535] napi_gro_receive+0x28f/0x330 [ 73.883970][ T7535] receive_buf+0x284/0x30b0 [ 73.888473][ T7535] virtnet_poll+0x436/0x7d0 [ 73.892974][ T7535] net_rx_action+0x3ae/0xa90 [ 73.897566][ T7535] __do_softirq+0x115/0x33f [ 73.902066][ T7535] irq_exit+0xbb/0xe0 [ 73.906040][ T7535] do_IRQ+0x81/0x130 [ 73.909924][ T7535] ret_from_intr+0x0/0x19 [ 73.914244][ T7535] __tsan_read4+0x8a/0x100 [ 73.918662][ T7535] tomoyo_path_matches_pattern+0x109/0x160 [ 73.924468][ T7535] tomoyo_compare_name_union+0x71/0xa0 [ 73.929930][ T7535] tomoyo_check_path_acl+0x85/0xa0 [ 73.935041][ T7535] tomoyo_check_acl+0xf6/0x270 [ 73.939804][ T7535] tomoyo_path_permission+0xe3/0x160 [ 73.945091][ T7535] tomoyo_path_perm+0x23e/0x390 [ 73.949937][ T7535] tomoyo_inode_getattr+0x26/0x40 [ 73.954959][ T7535] security_inode_getattr+0x9b/0xd0 [ 73.960155][ T7535] vfs_getattr+0x2e/0x70 [ 73.964401][ T7535] vfs_statx+0x102/0x190 [ 73.968647][ T7535] __do_sys_newstat+0x51/0xb0 [ 73.973322][ T7535] __x64_sys_newstat+0x3a/0x50 [ 73.978092][ T7535] do_syscall_64+0xcc/0x370 [ 73.982597][ T7535] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 73.988471][ T7535] [ 73.990798][ T7535] read to 0xffff888122451338 of 8 bytes by task 7535 on cpu 1: [ 73.998341][ T7535] tcp_recvmsg+0x46e/0x1b40 [ 74.002849][ T7535] inet_recvmsg+0xbb/0x250 [ 74.007263][ T7535] sock_recvmsg+0x92/0xb0 [ 74.011588][ T7535] sock_read_iter+0x15f/0x1e0 [ 74.016258][ T7535] new_sync_read+0x389/0x4f0 [ 74.020850][ T7535] __vfs_read+0xb1/0xc0 [ 74.024998][ T7535] vfs_read+0x143/0x2c0 [ 74.029153][ T7535] ksys_read+0xd5/0x1b0 [ 74.033304][ T7535] __x64_sys_read+0x4c/0x60 [ 74.037817][ T7535] do_syscall_64+0xcc/0x370 [ 74.042322][ T7535] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 74.048200][ T7535] [ 74.050518][ T7535] Reported by Kernel Concurrency Sanitizer on: [ 74.056669][ T7535] CPU: 1 PID: 7535 Comm: syz-fuzzer Not tainted 5.4.0-syzkaller #0 [ 74.064550][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.074596][ T7535] ================================================================== [ 74.082651][ T7535] Kernel panic - not syncing: panic_on_warn set ... [ 74.089236][ T7535] CPU: 1 PID: 7535 Comm: syz-fuzzer Not tainted 5.4.0-syzkaller #0 [ 74.097100][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.107134][ T7535] Call Trace: [ 74.110408][ T7535] dump_stack+0x11d/0x181 [ 74.114722][ T7535] panic+0x210/0x640 [ 74.118597][ T7535] ? vprintk_func+0x8d/0x140 [ 74.123173][ T7535] kcsan_report.cold+0xc/0xd [ 74.127786][ T7535] kcsan_setup_watchpoint+0x3fe/0x460 [ 74.133145][ T7535] __tsan_read8+0xc6/0x100 [ 74.137541][ T7535] tcp_recvmsg+0x46e/0x1b40 [ 74.142046][ T7535] inet_recvmsg+0xbb/0x250 [ 74.146454][ T7535] ? apparmor_socket_recvmsg+0x3b/0x50 [ 74.151975][ T7535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 74.158202][ T7535] ? security_socket_recvmsg+0x92/0xb0 [ 74.163689][ T7535] ? inet_sendpage+0x100/0x100 [ 74.168433][ T7535] sock_recvmsg+0x92/0xb0 [ 74.172749][ T7535] sock_read_iter+0x15f/0x1e0 [ 74.177423][ T7535] new_sync_read+0x389/0x4f0 [ 74.182000][ T7535] __vfs_read+0xb1/0xc0 [ 74.186158][ T7535] vfs_read+0x143/0x2c0 [ 74.190301][ T7535] ksys_read+0xd5/0x1b0 [ 74.194438][ T7535] __x64_sys_read+0x4c/0x60 [ 74.198923][ T7535] do_syscall_64+0xcc/0x370 [ 74.203415][ T7535] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 74.209283][ T7535] RIP: 0033:0x47c530 [ 74.213159][ T7535] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 74.232750][ T7535] RSP: 002b:000000c4203f9810 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 74.241139][ T7535] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 74.249088][ T7535] RDX: 0000000000001000 RSI: 000000c4203d4000 RDI: 0000000000000003 [ 74.257045][ T7535] RBP: 000000c4203f9868 R08: 0000000000000000 R09: 0000000000000000 [ 74.265002][ T7535] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000001f1 [ 74.272961][ T7535] R13: 00000000000001f0 R14: 0000000000000200 R15: 0000000000000080 [ 74.282143][ T7535] Kernel Offset: disabled [ 74.286466][ T7535] Rebooting in 86400 seconds..