[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.118058][ T25] audit: type=1800 audit(1571753716.599:25): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 34.152005][ T25] audit: type=1800 audit(1571753716.599:26): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 34.179457][ T25] audit: type=1800 audit(1571753716.599:27): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. 2019/10/22 14:15:28 fuzzer started 2019/10/22 14:15:29 dialing manager at 10.128.0.105:33369 2019/10/22 14:15:29 syscalls: 2524 2019/10/22 14:15:29 code coverage: enabled 2019/10/22 14:15:29 comparison tracing: enabled 2019/10/22 14:15:29 extra coverage: extra coverage is not supported by the kernel 2019/10/22 14:15:29 setuid sandbox: enabled 2019/10/22 14:15:29 namespace sandbox: enabled 2019/10/22 14:15:29 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 14:15:29 fault injection: enabled 2019/10/22 14:15:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 14:15:29 net packet injection: enabled 2019/10/22 14:15:29 net device setup: enabled 2019/10/22 14:15:29 concurrency sanitizer: enabled 14:15:31 executing program 0: prctl$PR_GET_PDEATHSIG(0x1c, &(0x7f0000000000)) 14:15:31 executing program 1: r0 = open(&(0x7f0000000180)='./file1\x00', 0x1490c0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000002d00), 0x1) syzkaller login: [ 49.148187][ T7181] IPVS: ftp: loaded support on port[0] = 21 [ 49.283889][ T7183] IPVS: ftp: loaded support on port[0] = 21 [ 49.305511][ T7181] chnl_net:caif_netlink_parms(): no params data found 14:15:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000c40)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x3}) [ 49.379394][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.387420][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.402855][ T7181] device bridge_slave_0 entered promiscuous mode [ 49.420738][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.442286][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.461050][ T7181] device bridge_slave_1 entered promiscuous mode [ 49.509661][ T7181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.541913][ T7181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.591952][ T7181] team0: Port device team_slave_0 added [ 49.594225][ T7187] IPVS: ftp: loaded support on port[0] = 21 [ 49.610558][ T7181] team0: Port device team_slave_1 added [ 49.645107][ T7183] chnl_net:caif_netlink_parms(): no params data found 14:15:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6, 0x0, 0x408776f6}) open(0x0, 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 49.794096][ T7181] device hsr_slave_0 entered promiscuous mode [ 49.901958][ T7181] device hsr_slave_1 entered promiscuous mode 14:15:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket(0x40000000015, 0x5, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 50.023890][ T7189] IPVS: ftp: loaded support on port[0] = 21 [ 50.034885][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.046307][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.071935][ T7183] device bridge_slave_0 entered promiscuous mode [ 50.081797][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.088834][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.113545][ T7183] device bridge_slave_1 entered promiscuous mode [ 50.139352][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.146443][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.153770][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.160873][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.206682][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.218091][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.244008][ T7191] IPVS: ftp: loaded support on port[0] = 21 [ 50.269151][ T7187] chnl_net:caif_netlink_parms(): no params data found [ 50.311959][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.330369][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.359480][ T7187] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.366575][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.374953][ T7187] device bridge_slave_0 entered promiscuous mode [ 50.383507][ T7183] team0: Port device team_slave_0 added [ 50.389212][ T7187] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.396663][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.405898][ T7187] device bridge_slave_1 entered promiscuous mode [ 50.434672][ T7183] team0: Port device team_slave_1 added 14:15:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x400000001, 0x48, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x4, 0xae1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf2, 0x0, 0x0) [ 50.553921][ T7183] device hsr_slave_0 entered promiscuous mode [ 50.621373][ T7183] device hsr_slave_1 entered promiscuous mode [ 50.661059][ T7183] debugfs: Directory 'hsr0' with parent '/' already present! [ 50.676621][ T7187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.688428][ T7187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.709791][ T7195] IPVS: ftp: loaded support on port[0] = 21 [ 50.717738][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.766770][ T7187] team0: Port device team_slave_0 added [ 50.780432][ T7187] team0: Port device team_slave_1 added [ 50.799115][ T7181] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.813696][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.821533][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.923840][ T7187] device hsr_slave_0 entered promiscuous mode [ 50.961388][ T7187] device hsr_slave_1 entered promiscuous mode [ 51.021092][ T7187] debugfs: Directory 'hsr0' with parent '/' already present! [ 51.053337][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 51.071931][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.080998][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.089688][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.096781][ T2831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.104995][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.113703][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.122060][ T2831] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.129068][ T2831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.167611][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.176645][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.222777][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.232216][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.247429][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.284743][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.291846][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.299448][ T7189] device bridge_slave_0 entered promiscuous mode [ 51.324023][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.331932][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.338983][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.348722][ T7189] device bridge_slave_1 entered promiscuous mode [ 51.356233][ T7191] chnl_net:caif_netlink_parms(): no params data found [ 51.366427][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.375256][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.384146][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.392470][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.400612][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.409158][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.425585][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.446438][ T7195] chnl_net:caif_netlink_parms(): no params data found [ 51.475018][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.507228][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.529374][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.536531][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.544442][ T7191] device bridge_slave_0 entered promiscuous mode [ 51.566332][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.573413][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.581323][ T7195] device bridge_slave_0 entered promiscuous mode [ 51.594122][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.601985][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.617215][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.624175][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.631625][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.639304][ T7191] device bridge_slave_1 entered promiscuous mode [ 51.662185][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.669225][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.677584][ T7195] device bridge_slave_1 entered promiscuous mode [ 51.685405][ T7189] team0: Port device team_slave_0 added [ 51.692763][ T7189] team0: Port device team_slave_1 added [ 51.703557][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.716202][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.762907][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.773983][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.782882][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.791536][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.798594][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.806771][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.823990][ T7191] team0: Port device team_slave_0 added [ 51.864099][ T7189] device hsr_slave_0 entered promiscuous mode [ 51.911294][ T7189] device hsr_slave_1 entered promiscuous mode [ 51.951060][ T7189] debugfs: Directory 'hsr0' with parent '/' already present! [ 51.959954][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.974921][ T7187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.985014][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.994550][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.003270][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.010281][ T7193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.018988][ T7191] team0: Port device team_slave_1 added [ 52.042762][ T7181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.060141][ T7183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.071036][ T7183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.123260][ T7191] device hsr_slave_0 entered promiscuous mode [ 52.171530][ T7191] device hsr_slave_1 entered promiscuous mode [ 52.231112][ T7191] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.241330][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.250268][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.259381][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.268109][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.277026][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.285804][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.294936][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.303595][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.312359][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.320851][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.329436][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.337978][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.346162][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.354756][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.364630][ T7187] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.379578][ T7195] team0: Port device team_slave_0 added [ 52.407141][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.431010][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.440071][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.449195][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.456277][ T2831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.465372][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.474356][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.483080][ T2831] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.490091][ T2831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.498097][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.512385][ T7195] team0: Port device team_slave_1 added [ 52.539209][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.548065][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.562762][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.572005][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.581551][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.590201][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.599245][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.607883][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.616632][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.625291][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.633787][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.684521][ T7195] device hsr_slave_0 entered promiscuous mode [ 52.721676][ T7195] device hsr_slave_1 entered promiscuous mode [ 52.761174][ T7195] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.769331][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.803581][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.815418][ T7187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.828255][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.846018][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.869486][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.899925][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.935749][ T7191] 8021q: adding VLAN 0 to HW filter on device team0 14:15:35 executing program 0: prctl$PR_GET_PDEATHSIG(0x1c, &(0x7f0000000000)) [ 52.990494][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.999545][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.022509][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 14:15:35 executing program 1: r0 = open(&(0x7f0000000180)='./file1\x00', 0x1490c0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000002d00), 0x1) [ 53.052293][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.070423][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.077508][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.091149][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.099931][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.113821][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.120862][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.129545][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 14:15:35 executing program 0: prctl$PR_GET_PDEATHSIG(0x1c, &(0x7f0000000000)) [ 53.159420][ T7189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.170906][ T7189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.198691][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.231283][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.239380][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.253340][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 14:15:35 executing program 1: r0 = open(&(0x7f0000000180)='./file1\x00', 0x1490c0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000002d00), 0x1) [ 53.274589][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.297911][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 14:15:35 executing program 0: prctl$PR_GET_PDEATHSIG(0x1c, &(0x7f0000000000)) [ 53.326266][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.335556][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.349594][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.358752][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.376917][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.389883][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.399582][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.426640][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.433796][ T2831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.466688][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:15:36 executing program 1: r0 = open(&(0x7f0000000180)='./file1\x00', 0x1490c0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000002d00), 0x1) [ 53.480588][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.489159][ T2831] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.496230][ T2831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.512532][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.525665][ T2831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 14:15:36 executing program 0: r0 = open(&(0x7f0000000180)='./file1\x00', 0x1490c0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000002d00), 0x1) [ 53.559512][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.578344][ T7195] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.615628][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.638967][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.648602][ T4178] ================================================================== [ 53.656700][ T4178] BUG: KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor [ 53.664403][ T4178] [ 53.666725][ T4178] write to 0xffffffff86146f08 of 8 bytes by task 7241 on cpu 0: [ 53.674348][ T4178] tomoyo_supervisor+0x1ec/0xd20 [ 53.679277][ T4178] tomoyo_path_permission+0x121/0x160 [ 53.684644][ T4178] tomoyo_path_perm+0x23e/0x390 [ 53.689492][ T4178] tomoyo_inode_getattr+0x26/0x40 [ 53.694513][ T4178] security_inode_getattr+0x9b/0xd0 [ 53.699708][ T4178] vfs_getattr+0x2e/0x70 [ 53.703948][ T4178] vfs_statx+0x102/0x190 [ 53.708187][ T4178] __do_sys_newstat+0x51/0xb0 [ 53.712860][ T4178] __x64_sys_newstat+0x3a/0x50 [ 53.717619][ T4178] do_syscall_64+0xcc/0x370 [ 53.722117][ T4178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.727989][ T4178] [ 53.730306][ T4178] write to 0xffffffff86146f08 of 8 bytes by task 4178 on cpu 1: [ 53.738037][ T4178] tomoyo_supervisor+0x1ec/0xd20 [ 53.742966][ T4178] tomoyo_path_permission+0x121/0x160 [ 53.748326][ T4178] tomoyo_path_perm+0x23e/0x390 [ 53.753165][ T4178] tomoyo_inode_getattr+0x26/0x40 [ 53.758184][ T4178] security_inode_getattr+0x9b/0xd0 14:15:36 executing program 0: r0 = open(&(0x7f0000000180)='./file1\x00', 0x1490c0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000002d00), 0x1) [ 53.763375][ T4178] vfs_getattr+0x2e/0x70 [ 53.767609][ T4178] vfs_statx+0x102/0x190 [ 53.771849][ T4178] __do_sys_newlstat+0x51/0xb0 [ 53.776603][ T4178] __x64_sys_newlstat+0x3a/0x50 [ 53.781446][ T4178] do_syscall_64+0xcc/0x370 [ 53.785947][ T4178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.791824][ T4178] [ 53.794135][ T4178] Reported by Kernel Concurrency Sanitizer on: [ 53.800455][ T4178] CPU: 1 PID: 4178 Comm: udevd Not tainted 5.4.0-rc3+ #0 [ 53.807466][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.817514][ T4178] ================================================================== [ 53.825569][ T4178] Kernel panic - not syncing: panic_on_warn set ... [ 53.832152][ T4178] CPU: 1 PID: 4178 Comm: udevd Not tainted 5.4.0-rc3+ #0 [ 53.839160][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.849213][ T4178] Call Trace: [ 53.852503][ T4178] dump_stack+0xf5/0x159 [ 53.856746][ T4178] panic+0x210/0x640 [ 53.860639][ T4178] ? __x64_sys_newlstat+0x3a/0x50 [ 53.865659][ T4178] ? vprintk_func+0x8d/0x140 [ 53.870248][ T4178] kcsan_report.cold+0xc/0x10 [ 53.874925][ T4178] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 53.880468][ T4178] __tsan_write8+0x32/0x40 [ 53.884882][ T4178] tomoyo_supervisor+0x1ec/0xd20 [ 53.889819][ T4178] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 53.895451][ T4178] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 53.901080][ T4178] ? __tsan_write1+0x32/0x40 [ 53.905671][ T4178] ? tomoyo_compare_name_union+0xa0/0xa0 [ 53.911305][ T4178] tomoyo_path_permission+0x121/0x160 [ 53.916680][ T4178] tomoyo_path_perm+0x23e/0x390 [ 53.921540][ T4178] tomoyo_inode_getattr+0x26/0x40 [ 53.926558][ T4178] security_inode_getattr+0x9b/0xd0 [ 53.931747][ T4178] vfs_getattr+0x2e/0x70 [ 53.935980][ T4178] vfs_statx+0x102/0x190 [ 53.940220][ T4178] __do_sys_newlstat+0x51/0xb0 [ 53.944975][ T4178] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 53.950599][ T4178] ? do_utimes+0x1b7/0x2c0 [ 53.955010][ T4178] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 53.960637][ T4178] ? __kcsan_setup_watchpoint+0x6b/0x4a0 14:15:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000c40)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x3}) [ 53.966260][ T4178] ? __tsan_read8+0x2c/0x30 [ 53.970775][ T4178] __x64_sys_newlstat+0x3a/0x50 [ 53.975663][ T4178] do_syscall_64+0xcc/0x370 [ 53.980163][ T4178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.986050][ T4178] RIP: 0033:0x7fdfbe4fad05 [ 53.990466][ T4178] Code: f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 90 90 83 ff 01 48 89 f0 77 18 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 17 f3 c3 90 48 8b 05 01 51 2b 00 64 c7 00 16 [ 54.010058][ T4178] RSP: 002b:00007fff248fb9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 54.018457][ T4178] RAX: ffffffffffffffda RBX: 0000000001b32250 RCX: 00007fdfbe4fad05 [ 54.026416][ T4178] RDX: 00007fff248fba00 RSI: 00007fff248fba00 RDI: 00007fff248fc3c0 [ 54.034381][ T4178] RBP: 00007fff248fc3c0 R08: 0000000001b50625 R09: 00007fdfbe5513d0 [ 54.042341][ T4178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001b50620 [ 54.050306][ T4178] R13: 00000000ffffffea R14: 00007fff248fbb20 R15: 00007fff248fc3cf [ 54.059645][ T4178] Kernel Offset: disabled [ 54.063960][ T4178] Rebooting in 86400 seconds..