[info] Using makefile-style concurrent boot in runlevel 2. [ 40.806711][ T26] audit: type=1800 audit(1575467920.403:21): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 40.855711][ T26] audit: type=1800 audit(1575467920.403:22): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. 2019/12/04 13:58:51 fuzzer started 2019/12/04 13:58:53 dialing manager at 10.128.0.105:44241 2019/12/04 13:58:53 syscalls: 2684 2019/12/04 13:58:53 code coverage: enabled 2019/12/04 13:58:53 comparison tracing: enabled 2019/12/04 13:58:53 extra coverage: extra coverage is not supported by the kernel 2019/12/04 13:58:53 setuid sandbox: enabled 2019/12/04 13:58:53 namespace sandbox: enabled 2019/12/04 13:58:53 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 13:58:53 fault injection: enabled 2019/12/04 13:58:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 13:58:53 net packet injection: enabled 2019/12/04 13:58:53 net device setup: enabled 2019/12/04 13:58:53 concurrency sanitizer: enabled 2019/12/04 13:58:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/12/04 13:58:54 adding functions to KCSAN blacklist: 'rcu_gp_fqs_check_wake' 'tick_sched_do_timer' 'generic_fillattr' 'tomoyo_supervisor' '__hrtimer_run_queues' 'find_next_bit' 'ep_poll' 'tcp_add_backlog' '__ext4_new_inode' 13:58:58 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f00000000c0)={@empty, 0x6}, 0x20) 13:58:58 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[]], 0x1, 0x0) msgctl$IPC_RMID(r0, 0x0) syzkaller login: [ 59.300164][ T7632] IPVS: ftp: loaded support on port[0] = 21 [ 59.380935][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 59.431383][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.455687][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.473942][ T7632] device bridge_slave_0 entered promiscuous mode [ 59.481406][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.489322][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.497183][ T7632] device bridge_slave_1 entered promiscuous mode [ 59.514825][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 13:58:59 executing program 2: r0 = socket(0x2b, 0x1, 0x1) getsockname$packet(r0, 0x0, &(0x7f0000000380)) [ 59.525226][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.539896][ T7635] IPVS: ftp: loaded support on port[0] = 21 [ 59.545307][ T7632] team0: Port device team_slave_0 added [ 59.552827][ T7632] team0: Port device team_slave_1 added [ 59.618105][ T7632] device hsr_slave_0 entered promiscuous mode [ 59.696025][ T7632] device hsr_slave_1 entered promiscuous mode 13:58:59 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x2001000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = socket(0x2, 0x2000080003, 0x2) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffff5, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c0000001500cbf870598f08060c040002ff0f02007d06a6bd7c493889b53eca5ed08a562ad6e74703c48f93b82a03000000461eb886a5e54e8ff5314461281a87aa60883e0523de2a160bd3", 0x4c}], 0x1}, 0x0) [ 59.791239][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.798437][ T7632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.805781][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.812797][ T7632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.971492][ T7637] IPVS: ftp: loaded support on port[0] = 21 [ 60.179385][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.181445][ T7663] IPVS: ftp: loaded support on port[0] = 21 [ 60.219960][ T7635] chnl_net:caif_netlink_parms(): no params data found [ 60.292385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.306627][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.345865][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.386758][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.419740][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.491031][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.516592][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.536659][ T7635] device bridge_slave_0 entered promiscuous mode [ 60.596554][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.617140][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.636015][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.643080][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state 13:59:00 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4d304}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000700000025000000000100009500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0xae01, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x12c, &(0x7f0000000140)='cgroup.stat\x00'}, 0x30) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0)="f7d1985a4ce45f65042e222c3b636e55d593fba5114d71038a58feeacb701d8693fa870988ac085ab437062c3c64215d8fc990bc151de69fdeb69d128c6b35a6bf34dc68bb5e59745fef0dd8796aa4f5fd3855d5cd137514c4e9949500ca42aa2a8e898676ab898a2f40a87ce27e3a0e07bbd16bea399fc9b68eedaa7a000e5df4d3d4004e8a4438071d6f425306862176d8dc3ccd3ed05ddbe7701aa110f95e4a7a3ce9689b7a32b775943ba8d0739da3f8bcf0e4048baab8b8add28c88a6cf8728c6d06dbe2dd5f92ce2ee093876fb5b68c422d2117fb1b0ee76f38425e968d441cd34962e85e990ed81028b", 0xed, r0}, 0x68) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000040), 0xab) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000007c0)={0x3, 0x4bc, 0x4c, &(0x7f0000000740)="87c40d9fe740a3a612f7cbbeb631c74c9e3c797e6917f1c26baadd46b21566905770d636a4d68119027ac784c42b8cc687cc5c02ce6b3df6a3ad2ee128afdde2a7b4415499b6cbd80b45efb8"}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000040)=r4, 0xab) clone3(&(0x7f0000000540)={0x10000, &(0x7f0000000180), &(0x7f0000000340)=0x0, &(0x7f0000000380), 0x38, 0x0, &(0x7f0000000480)=""/147, 0x93, &(0x7f00000003c0)=""/20}, 0x40) write$cgroup_pid(r4, &(0x7f0000000580)=r6, 0x12) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) [ 60.686110][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.694051][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.729836][ T7635] device bridge_slave_1 entered promiscuous mode [ 60.818947][ T7635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.859707][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.896331][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.946878][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.953929][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.008922][ T7635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.035825][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 61.071242][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.097442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.136397][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.167859][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.197110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.226179][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.256489][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.276181][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.324721][ T7669] IPVS: ftp: loaded support on port[0] = 21 [ 61.326285][ T7635] team0: Port device team_slave_0 added [ 61.344525][ T7632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.358565][ T7632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.368018][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 13:59:01 executing program 5: setreuid(0x0, 0xee00) geteuid() setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$setstatus(r0, 0x4, 0x3800) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) r3 = dup2(r2, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000600)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00', 0x6}, 0x0, 0x4, 0x7c, r1, 0x2, 0x3f, 'syz1\x00', &(0x7f0000000280)=['(\x00', '/dev/qat_adf_ctl\x00'], 0x13, [], [0x46, 0x7f, 0x0, 0x3ff]}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, [], 0x6}, {0x4, 0x0, 0x7}, {}, {0x5, 0x0, 0x9, [], 0xffffffffffffffff}, {0x5, 0x0, 0x3, [], 0x8}, {0x3, 0x0, 0x0, [], 0x4}, {0x80000001, 0x7, 0x0, [], 0x42a}, {0x5, 0x0, 0x3}, {0x0, 0x0, 0x0, [], 0x7ba}, {0x0, 0x0, 0x6, [], 0x3657e047}, {}, {0x0, 0x0, 0x0, [], 0x8}, {}, {0x0, 0x0, 0x6}, {0x7}]}}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000440)=ANY=[@ANYRES16]) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) [ 61.378861][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.388040][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.429055][ T7635] team0: Port device team_slave_1 added [ 61.443819][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.458388][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.467668][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.484596][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 61.587539][ T7635] device hsr_slave_0 entered promiscuous mode [ 61.616038][ T7635] device hsr_slave_1 entered promiscuous mode [ 61.655757][ T7635] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.667675][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.674737][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.682641][ T7637] device bridge_slave_0 entered promiscuous mode [ 61.694036][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.701154][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.709238][ T7637] device bridge_slave_1 entered promiscuous mode [ 61.739900][ T7683] IPVS: ftp: loaded support on port[0] = 21 [ 61.753017][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.760602][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.783205][ T7663] device bridge_slave_0 entered promiscuous mode [ 61.795447][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.814080][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.828472][ T7663] device bridge_slave_1 entered promiscuous mode [ 61.840742][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.950146][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.978983][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 62.000461][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.033843][ T7637] team0: Port device team_slave_0 added [ 62.108659][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.161083][ T7637] team0: Port device team_slave_1 added [ 62.251794][ T7663] team0: Port device team_slave_0 added 13:59:01 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f00000000c0)={@empty, 0x6}, 0x20) [ 62.328057][ T7637] device hsr_slave_0 entered promiscuous mode [ 62.351897][ T7637] device hsr_slave_1 entered promiscuous mode [ 62.438240][ T7637] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.471632][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.481982][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.498519][ T7669] device bridge_slave_0 entered promiscuous mode [ 62.519566][ T7663] team0: Port device team_slave_1 added [ 62.527338][ T7635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.580408][ T7683] chnl_net:caif_netlink_parms(): no params data found [ 62.610490][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.625836][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state 13:59:02 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f00000000c0)={@empty, 0x6}, 0x20) [ 62.678886][ T7669] device bridge_slave_1 entered promiscuous mode [ 62.769957][ T7635] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.857818][ T7663] device hsr_slave_0 entered promiscuous mode [ 62.876028][ T7663] device hsr_slave_1 entered promiscuous mode [ 62.955686][ T7663] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.980373][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.995828][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:59:02 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f00000000c0)={@empty, 0x6}, 0x20) [ 63.197542][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.273653][ T7635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.404538][ T7635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.460979][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.482066][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.533928][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.541094][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.627348][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.679050][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.736182][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.743406][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.848036][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.896228][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.940338][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.988467][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.032228][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.076118][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.121200][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.166717][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.208938][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.252310][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.297865][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.304940][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.380080][ T7683] device bridge_slave_0 entered promiscuous mode [ 64.421251][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 13:59:04 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f00000000c0)={@empty, 0x6}, 0x20) [ 64.484439][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.503363][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.583524][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.631901][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.655437][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.665672][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.673349][ T7683] device bridge_slave_1 entered promiscuous mode [ 64.683243][ T7731] ================================================================== [ 64.691356][ T7731] BUG: KCSAN: data-race in pid_update_inode / pid_update_inode [ 64.698879][ T7731] [ 64.701207][ T7731] read to 0xffff88812889e048 of 2 bytes by task 7727 on cpu 0: [ 64.712827][ T7731] pid_update_inode+0x25/0x70 [ 64.717499][ T7731] pid_revalidate+0x91/0xd0 [ 64.722135][ T7731] lookup_fast+0x618/0x700 [ 64.726554][ T7731] path_openat+0x2ac/0x36e0 [ 64.731055][ T7731] do_filp_open+0x11e/0x1b0 [ 64.735555][ T7731] do_sys_open+0x3b3/0x4f0 [ 64.739984][ T7731] __x64_sys_open+0x55/0x70 [ 64.744494][ T7731] do_syscall_64+0xcc/0x370 [ 64.749015][ T7731] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.754891][ T7731] [ 64.757223][ T7731] write to 0xffff88812889e048 of 2 bytes by task 7731 on cpu 1: [ 64.764855][ T7731] pid_update_inode+0x51/0x70 [ 64.769535][ T7731] pid_revalidate+0x91/0xd0 [ 64.774038][ T7731] lookup_fast+0x618/0x700 [ 64.778476][ T7731] path_openat+0x2ac/0x36e0 [ 64.784111][ T7731] do_filp_open+0x11e/0x1b0 [ 64.788614][ T7731] do_sys_open+0x3b3/0x4f0 [ 64.793060][ T7731] __x64_sys_open+0x55/0x70 [ 64.797565][ T7731] do_syscall_64+0xcc/0x370 [ 64.802084][ T7731] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.806379][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.807970][ T7731] [ 64.819337][ T7731] Reported by Kernel Concurrency Sanitizer on: [ 64.825482][ T7731] CPU: 1 PID: 7731 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 64.832665][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.842717][ T7731] ================================================================== [ 64.850781][ T7731] Kernel panic - not syncing: panic_on_warn set ... [ 64.857369][ T7731] CPU: 1 PID: 7731 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 64.864555][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.874603][ T7731] Call Trace: [ 64.877905][ T7731] dump_stack+0x11d/0x181 [ 64.882249][ T7731] panic+0x210/0x640 [ 64.886148][ T7731] ? vprintk_func+0x8d/0x140 [ 64.890745][ T7731] kcsan_report.cold+0xc/0xd [ 64.895338][ T7731] kcsan_setup_watchpoint+0x3fe/0x460 [ 64.900718][ T7731] __tsan_unaligned_write2+0xc4/0x100 [ 64.901214][ T7669] team0: Port device team_slave_0 added [ 64.906085][ T7731] pid_update_inode+0x51/0x70 [ 64.906103][ T7731] pid_revalidate+0x91/0xd0 [ 64.906130][ T7731] lookup_fast+0x618/0x700 [ 64.925261][ T7731] path_openat+0x2ac/0x36e0 [ 64.929777][ T7731] ? proc_pid_status+0xee1/0x1000 [ 64.934902][ T7731] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 64.941235][ T7731] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 64.947127][ T7731] ? __read_once_size+0x41/0xe0 [ 64.951979][ T7731] do_filp_open+0x11e/0x1b0 [ 64.956485][ T7731] ? __alloc_fd+0x2ef/0x3b0 [ 64.957048][ T7669] team0: Port device team_slave_1 added [ 64.961044][ T7731] do_sys_open+0x3b3/0x4f0 [ 64.970971][ T7731] __x64_sys_open+0x55/0x70 [ 64.975489][ T7731] do_syscall_64+0xcc/0x370 [ 64.979991][ T7731] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.985872][ T7731] RIP: 0033:0x7f55f0605120 [ 64.990283][ T7731] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 65.009878][ T7731] RSP: 002b:00007ffcf3a37e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 65.018288][ T7731] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f55f0605120 [ 65.026266][ T7731] RDX: 00007ffcf3a37ec2 RSI: 0000000000000000 RDI: 00007ffcf3a37eb0 [ 65.034233][ T7731] RBP: 0000000000020000 R08: 0000000000000000 R09: 00007f55f08cd55f [ 65.042200][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000024e6220 [ 65.050164][ T7731] R13: 0000000000000020 R14: 00007f55f0cba010 R15: 0000000000000000 [ 65.059575][ T7731] Kernel Offset: disabled [ 65.063902][ T7731] Rebooting in 86400 seconds..