[info] Using makefile-style concurrent boot in runlevel 2. [ 42.090224][ T26] audit: type=1800 audit(1573825913.592:21): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 42.129115][ T26] audit: type=1800 audit(1573825913.592:22): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. 2019/11/15 13:52:04 fuzzer started 2019/11/15 13:52:05 dialing manager at 10.128.0.105:44219 2019/11/15 13:52:05 syscalls: 2566 2019/11/15 13:52:05 code coverage: enabled 2019/11/15 13:52:05 comparison tracing: enabled 2019/11/15 13:52:05 extra coverage: extra coverage is not supported by the kernel 2019/11/15 13:52:05 setuid sandbox: enabled 2019/11/15 13:52:05 namespace sandbox: enabled 2019/11/15 13:52:05 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/15 13:52:05 fault injection: enabled 2019/11/15 13:52:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/15 13:52:05 net packet injection: enabled 2019/11/15 13:52:05 net device setup: enabled 2019/11/15 13:52:05 concurrency sanitizer: enabled 2019/11/15 13:52:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/11/15 13:52:08 adding functions to KCSAN blacklist: 'generic_permission' 'tcp_add_backlog' 'alloc_empty_file' 'tick_sched_do_timer' 'tick_do_update_jiffies64' 'find_next_bit' 'add_timer' '__rb_rotate_set_parents' 'pipe_wait' 'pcpu_alloc' 'rcu_gp_fqs_check_wake' '__hrtimer_run_queues' 'pid_update_inode' 'ep_insert' 'vm_area_dup' 'pipe_poll' 'do_syslog' 'tomoyo_supervisor' 'run_timer_softirq' '__rb_insert_augmented' 'timer_clear_idle' 'ep_poll' 'mod_timer' 13:52:09 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2b, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @local}}]}, 0x110) 13:52:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) io_setup(0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r1, 0xfffffffffffffffe) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) creat(0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syzkaller login: [ 58.324163][ T7540] IPVS: ftp: loaded support on port[0] = 21 [ 58.414039][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 58.479379][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.480482][ T7543] IPVS: ftp: loaded support on port[0] = 21 [ 58.497007][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.504960][ T7540] device bridge_slave_0 entered promiscuous mode [ 58.530191][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.537260][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.545179][ T7540] device bridge_slave_1 entered promiscuous mode [ 58.579630][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.607510][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 13:52:10 executing program 2: io_setup(0xc, &(0x7f0000000100)=0x0) r1 = socket$kcm(0x2b, 0x200000000000001, 0x0) r2 = dup(r1) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x5, 0x0, r2, 0x0}]) [ 58.627375][ T7543] chnl_net:caif_netlink_parms(): no params data found [ 58.667565][ T7540] team0: Port device team_slave_0 added [ 58.679772][ T7540] team0: Port device team_slave_1 added [ 58.707540][ T7543] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.728656][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.736539][ T7543] device bridge_slave_0 entered promiscuous mode [ 58.769151][ T7543] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.776250][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.784357][ T7543] device bridge_slave_1 entered promiscuous mode [ 58.830836][ T7540] device hsr_slave_0 entered promiscuous mode 13:52:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000001000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) [ 58.888895][ T7540] device hsr_slave_1 entered promiscuous mode [ 59.023476][ T7546] IPVS: ftp: loaded support on port[0] = 21 [ 59.061970][ T7548] IPVS: ftp: loaded support on port[0] = 21 [ 59.093983][ T7543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.170383][ T7543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.280581][ T7543] team0: Port device team_slave_0 added [ 59.311665][ T7543] team0: Port device team_slave_1 added 13:52:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 59.491086][ T7543] device hsr_slave_0 entered promiscuous mode [ 59.538858][ T7543] device hsr_slave_1 entered promiscuous mode [ 59.588693][ T7543] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.604973][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 59.706921][ T7548] chnl_net:caif_netlink_parms(): no params data found [ 59.884675][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.911126][ T7580] IPVS: ftp: loaded support on port[0] = 21 [ 59.970338][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.029608][ T7546] device bridge_slave_0 entered promiscuous mode [ 60.096840][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.139877][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.180082][ T7546] device bridge_slave_1 entered promiscuous mode [ 60.241370][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.248436][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.289930][ T7548] device bridge_slave_0 entered promiscuous mode [ 60.357531][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.399960][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.439969][ T7548] device bridge_slave_1 entered promiscuous mode [ 60.513891][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.602229][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.652166][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.710616][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.751789][ T7583] ================================================================== [ 60.759951][ T7583] BUG: KCSAN: data-race in common_perm_cond / task_dump_owner [ 60.767514][ T7583] [ 60.769844][ T7583] read to 0xffff88812567c2ec of 4 bytes by task 7592 on cpu 0: [ 60.777390][ T7583] common_perm_cond+0x65/0x110 [ 60.782185][ T7583] apparmor_inode_getattr+0x2b/0x40 [ 60.787674][ T7583] security_inode_getattr+0x9b/0xd0 [ 60.792890][ T7583] vfs_getattr+0x2e/0x70 [ 60.797148][ T7583] vfs_statx+0x102/0x190 [ 60.801502][ T7583] __do_sys_newstat+0x51/0xb0 [ 60.806182][ T7583] __x64_sys_newstat+0x3a/0x50 [ 60.810968][ T7583] do_syscall_64+0xcc/0x370 [ 60.815477][ T7583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 60.821365][ T7583] [ 60.823696][ T7583] write to 0xffff88812567c2ec of 4 bytes by task 7583 on cpu 1: [ 60.831325][ T7583] task_dump_owner+0x237/0x260 [ 60.836088][ T7583] pid_update_inode+0x3c/0x70 [ 60.840760][ T7583] pid_revalidate+0x91/0xd0 [ 60.845260][ T7583] lookup_fast+0x6f2/0x700 13:52:12 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000640)) r0 = gettid() r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/151, 0x97}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fstat(r2, &(0x7f0000000040)) tkill(r0, 0x15) [ 60.849676][ T7583] walk_component+0x6d/0xe70 [ 60.854263][ T7583] link_path_walk.part.0+0x5d3/0xa90 [ 60.859549][ T7583] path_openat+0x14f/0x36e0 [ 60.864061][ T7583] do_filp_open+0x11e/0x1b0 [ 60.868576][ T7583] do_sys_open+0x3b3/0x4f0 [ 60.872989][ T7583] __x64_sys_open+0x55/0x70 [ 60.877487][ T7583] do_syscall_64+0xcc/0x370 [ 60.881988][ T7583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 60.887864][ T7583] [ 60.890178][ T7583] Reported by Kernel Concurrency Sanitizer on: [ 60.896327][ T7583] CPU: 1 PID: 7583 Comm: ps Not tainted 5.4.0-rc7+ #0 [ 60.903082][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.913132][ T7583] ================================================================== [ 60.921184][ T7583] Kernel panic - not syncing: panic_on_warn set ... [ 60.927773][ T7583] CPU: 1 PID: 7583 Comm: ps Not tainted 5.4.0-rc7+ #0 [ 60.934522][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.944567][ T7583] Call Trace: [ 60.947858][ T7583] dump_stack+0x11d/0x181 [ 60.952196][ T7583] panic+0x210/0x640 [ 60.956090][ T7583] ? vprintk_func+0x8d/0x140 [ 60.960701][ T7583] kcsan_report.cold+0xc/0xd [ 60.965317][ T7583] kcsan_setup_watchpoint+0x3fe/0x460 [ 60.970699][ T7583] __tsan_unaligned_write4+0xc4/0x100 [ 60.976079][ T7583] task_dump_owner+0x237/0x260 [ 60.980842][ T7583] ? __rcu_read_unlock+0x66/0x3c0 [ 60.985871][ T7583] pid_update_inode+0x3c/0x70 [ 60.990553][ T7583] pid_revalidate+0x91/0xd0 [ 60.995067][ T7583] lookup_fast+0x6f2/0x700 [ 60.999500][ T7583] walk_component+0x6d/0xe70 [ 61.004092][ T7583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.010423][ T7583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.016678][ T7583] ? security_inode_permission+0xa5/0xc0 [ 61.022312][ T7583] ? inode_permission+0xa0/0x3c0 [ 61.027256][ T7583] link_path_walk.part.0+0x5d3/0xa90 [ 61.032556][ T7583] path_openat+0x14f/0x36e0 [ 61.037072][ T7583] ? __read_once_size.constprop.0+0x12/0x20 [ 61.042974][ T7583] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 61.049217][ T7583] ? __virt_addr_valid+0x126/0x190 [ 61.054332][ T7583] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 61.060574][ T7583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.066816][ T7583] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 61.072705][ T7583] ? __read_once_size+0x41/0xe0 [ 61.077561][ T7583] do_filp_open+0x11e/0x1b0 [ 61.082073][ T7583] ? __alloc_fd+0x2ef/0x3b0 [ 61.086589][ T7583] do_sys_open+0x3b3/0x4f0 [ 61.091015][ T7583] __x64_sys_open+0x55/0x70 [ 61.095526][ T7583] do_syscall_64+0xcc/0x370 [ 61.100040][ T7583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 61.105930][ T7583] RIP: 0033:0x7f290edc0120 [ 61.110350][ T7583] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 61.129955][ T7583] RSP: 002b:00007fff0fd55658 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 61.138391][ T7583] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f290edc0120 [ 61.146358][ T7583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f290f28ed00 [ 61.154326][ T7583] RBP: 0000000000001000 R08: 0000000000000000 R09: 00007f290f08857b [ 61.162288][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f290f28dd00 [ 61.170251][ T7583] R13: 0000000000000020 R14: 0000000000000005 R15: 0000000000000000 [ 61.179712][ T7583] Kernel Offset: disabled [ 61.184036][ T7583] Rebooting in 86400 seconds..