[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. 2020/05/04 19:22:37 fuzzer started 2020/05/04 19:22:37 dialing manager at 10.128.0.105:33141 2020/05/04 19:22:38 syscalls: 2965 2020/05/04 19:22:38 code coverage: enabled 2020/05/04 19:22:38 comparison tracing: enabled 2020/05/04 19:22:38 extra coverage: enabled 2020/05/04 19:22:38 setuid sandbox: enabled 2020/05/04 19:22:38 namespace sandbox: enabled 2020/05/04 19:22:38 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/04 19:22:38 fault injection: enabled 2020/05/04 19:22:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/04 19:22:38 net packet injection: enabled 2020/05/04 19:22:38 net device setup: enabled 2020/05/04 19:22:38 concurrency sanitizer: enabled 2020/05/04 19:22:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/04 19:22:38 USB emulation: /dev/raw-gadget does not exist syzkaller login: [ 45.516616][ T6735] KCSAN: could not find function: '_find_next_bit' 2020/05/04 19:22:39 adding functions to KCSAN blacklist: 'tick_nohz_idle_stop_tick' 'mod_timer' 'page_counter_charge' 'ep_poll' '_find_next_bit' '__ext4_new_inode' 'do_signal_stop' 'dd_has_work' 19:22:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000006f40)=[{{&(0x7f00000000c0)=@hci, 0x80, 0x0}}, {{&(0x7f0000001340)=@hci, 0x80, 0x0}}], 0x568, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) [ 56.771891][ T6737] IPVS: ftp: loaded support on port[0] = 21 19:22:50 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3309, 0x0) [ 56.868752][ T6737] chnl_net:caif_netlink_parms(): no params data found [ 57.003578][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.010689][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.019962][ T6737] device bridge_slave_0 entered promiscuous mode [ 57.028676][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.042057][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.058517][ T6737] device bridge_slave_1 entered promiscuous mode [ 57.078170][ T6861] IPVS: ftp: loaded support on port[0] = 21 [ 57.097949][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.123565][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 19:22:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105882) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x100}) [ 57.167933][ T6737] team0: Port device team_slave_0 added [ 57.188641][ T6737] team0: Port device team_slave_1 added [ 57.259654][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.282765][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.310049][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.338223][ T6948] IPVS: ftp: loaded support on port[0] = 21 [ 57.351373][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.366906][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.396477][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.408050][ T6861] chnl_net:caif_netlink_parms(): no params data found 19:22:51 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1641, 0x0, 0x0, 0x20000000000000) clock_gettime(0x0, &(0x7f0000000380)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x3b) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r1, &(0x7f0000002800)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b1c0400000000000092290a7e4555a763c15ceda085f276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d33e129933dd93f99f"], 0x5f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 57.544541][ T6737] device hsr_slave_0 entered promiscuous mode [ 57.602212][ T6737] device hsr_slave_1 entered promiscuous mode [ 57.689677][ T7031] IPVS: ftp: loaded support on port[0] = 21 19:22:51 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='squashfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 57.790736][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.808776][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.822076][ T6861] device bridge_slave_0 entered promiscuous mode [ 57.893321][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.900395][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.914420][ T6861] device bridge_slave_1 entered promiscuous mode [ 57.967154][ T6948] chnl_net:caif_netlink_parms(): no params data found [ 57.994836][ T6861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.030672][ T6861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.093620][ T6861] team0: Port device team_slave_0 added 19:22:51 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0)="a2e6999b", 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x7f}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)={0x490, 0x0, 0x2, [{}, {{}, {0x0, 0x0, 0x11, 0x0, 'GPLGPLtrustedbdev'}}, {{}, {0x0, 0x0, 0xa, 0x0, '/dev/cuse\x00'}}, {{}, {0x0, 0x0, 0xe, 0x0, 'vboxnet1,&proc'}}, {{}, {0x0, 0x0, 0x4, 0x0, 'bdev'}}, {{}, {0x0, 0x0, 0x2, 0x0, '\'@'}}, {{}, {0x0, 0x0, 0xf, 0x0, '/dev/sequencer\x00'}}]}, 0x490) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x4, 0xe, 0x1, r3}) pipe(&(0x7f00000001c0)) [ 58.133791][ T7210] IPVS: ftp: loaded support on port[0] = 21 [ 58.144843][ T6861] team0: Port device team_slave_1 added [ 58.157723][ T7031] chnl_net:caif_netlink_parms(): no params data found [ 58.176112][ T6737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.234557][ T6737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.293907][ T6737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.337587][ T6737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.405021][ T7298] IPVS: ftp: loaded support on port[0] = 21 [ 58.432035][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.439745][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.448043][ T6948] device bridge_slave_0 entered promiscuous mode [ 58.457995][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.465752][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.473644][ T6948] device bridge_slave_1 entered promiscuous mode [ 58.480481][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.488616][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.518129][ T6861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.538799][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.546422][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.573104][ T6861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.647278][ T6948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.661421][ T6948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.684473][ T6948] team0: Port device team_slave_0 added [ 58.734195][ T6861] device hsr_slave_0 entered promiscuous mode [ 58.772191][ T6861] device hsr_slave_1 entered promiscuous mode [ 58.861840][ T6861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.869413][ T6861] Cannot create hsr debugfs directory [ 58.886387][ T6948] team0: Port device team_slave_1 added [ 58.903350][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.910467][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.919080][ T7031] device bridge_slave_0 entered promiscuous mode [ 58.928390][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.936038][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.944392][ T7031] device bridge_slave_1 entered promiscuous mode [ 58.969467][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.983238][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.005116][ T7031] team0: Port device team_slave_0 added [ 59.014168][ T7031] team0: Port device team_slave_1 added [ 59.026537][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.033766][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.060740][ T6948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.094445][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.102912][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.131088][ T6948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.157833][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.165661][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.192682][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.206041][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.213218][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.240743][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.279674][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.293866][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 59.370226][ T6737] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.433884][ T6948] device hsr_slave_0 entered promiscuous mode [ 59.462124][ T6948] device hsr_slave_1 entered promiscuous mode [ 59.501762][ T6948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.509368][ T6948] Cannot create hsr debugfs directory [ 59.553462][ T7031] device hsr_slave_0 entered promiscuous mode [ 59.642263][ T7031] device hsr_slave_1 entered promiscuous mode [ 59.701740][ T7031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.709318][ T7031] Cannot create hsr debugfs directory [ 59.715897][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.724125][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.734773][ T7210] chnl_net:caif_netlink_parms(): no params data found [ 59.748985][ T6861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.785290][ T6861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.893176][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.903219][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.912106][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.919329][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.934645][ T6861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.985318][ T6861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.027606][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.076011][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.088692][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.097759][ T3978] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.104861][ T3978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.113078][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.140710][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.148079][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.156578][ T7298] device bridge_slave_0 entered promiscuous mode [ 60.164809][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.173948][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.182991][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.202134][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.209427][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.217773][ T7298] device bridge_slave_1 entered promiscuous mode [ 60.237180][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.252391][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.261372][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.270677][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.311717][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.320233][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.334699][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.363420][ T7031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.404153][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.414925][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.424293][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.431337][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.439515][ T7210] device bridge_slave_0 entered promiscuous mode [ 60.447524][ T7031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.518145][ T7298] team0: Port device team_slave_0 added [ 60.524677][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.533044][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.541228][ T7210] device bridge_slave_1 entered promiscuous mode [ 60.559429][ T6948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.604304][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.613078][ T7031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.655953][ T7298] team0: Port device team_slave_1 added [ 60.671513][ T6948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.703803][ T7031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.756636][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.765007][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.793264][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.807028][ T7210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.817909][ T6948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.875123][ T6948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.937478][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.945231][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.972465][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.988047][ T7210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.011352][ T7210] team0: Port device team_slave_0 added [ 61.074167][ T7298] device hsr_slave_0 entered promiscuous mode [ 61.132044][ T7298] device hsr_slave_1 entered promiscuous mode [ 61.196526][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.205161][ T7298] Cannot create hsr debugfs directory [ 61.236188][ T7210] team0: Port device team_slave_1 added [ 61.302974][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.309983][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.338196][ T7210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.349814][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.359201][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.378038][ T7298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.443907][ T7298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.493602][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.500592][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.527973][ T7210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.558919][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.566161][ T7298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.634503][ T7298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.699264][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.743971][ T7210] device hsr_slave_0 entered promiscuous mode [ 61.781970][ T7210] device hsr_slave_1 entered promiscuous mode [ 61.841538][ T7210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.849151][ T7210] Cannot create hsr debugfs directory [ 61.872939][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.895036][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.903227][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.952216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.960955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.995104][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.025842][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.035748][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.046724][ T2430] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.053833][ T2430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.064031][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.072229][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.081008][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.091947][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.100553][ T2430] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.107649][ T2430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.118049][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.127104][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.138924][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.147882][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.158849][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.167648][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.179073][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.187282][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.197522][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.205733][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.217958][ T6737] device veth0_vlan entered promiscuous mode [ 62.242746][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.264431][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.276905][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.285746][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.294805][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.303639][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.310932][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.319227][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.328350][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.338135][ T6737] device veth1_vlan entered promiscuous mode [ 62.350623][ T7210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.394921][ T7210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.455242][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.463416][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.473705][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.483182][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.496028][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.503271][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.511306][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.519921][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.538898][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.555356][ T6861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.564169][ T7210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.597314][ T7210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.643717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.653024][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.672704][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.685661][ T6948] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.702053][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.710190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.720551][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.728577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.739037][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.748056][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.757228][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.766672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.775944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.791492][ T6737] ================================================================== [ 62.802271][ T6737] BUG: KCSAN: data-race in add_timer / run_timer_softirq [ 62.809883][ T6737] [ 62.812461][ T6737] write to 0xffff88812c11dc88 of 8 bytes by interrupt on cpu 1: [ 62.820352][ T6737] run_timer_softirq+0xb1c/0xbd0 [ 62.825285][ T6737] __do_softirq+0x118/0x34a [ 62.829912][ T6737] irq_exit+0xb5/0xd0 [ 62.833896][ T6737] smp_apic_timer_interrupt+0xe2/0x270 [ 62.839394][ T6737] apic_timer_interrupt+0xf/0x20 [ 62.844317][ T6737] format_decode+0x1a4/0xaa0 [ 62.848922][ T6737] vsnprintf+0xd1/0xb60 [ 62.853073][ T6737] snprintf+0x6f/0xa0 [ 62.857065][ T6737] tomoyo_init_log+0x5e7/0x10c0 [ 62.861905][ T6737] tomoyo_supervisor+0x23e/0xc90 [ 62.866829][ T6737] tomoyo_path_number_perm+0x2d7/0x360 [ 62.872703][ T6737] tomoyo_file_ioctl+0x28/0x40 [ 62.877712][ T6737] security_file_ioctl+0x69/0xa0 [ 62.882657][ T6737] ksys_ioctl+0x5a/0x150 [ 62.886983][ T6737] __x64_sys_ioctl+0x47/0x60 [ 62.891663][ T6737] do_syscall_64+0xc7/0x3b0 [ 62.896190][ T6737] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.903060][ T6737] [ 62.905468][ T6737] read to 0xffff88812c11dc88 of 8 bytes by task 6737 on cpu 0: [ 62.913004][ T6737] add_timer+0x175/0x550 [ 62.917232][ T6737] __queue_delayed_work+0x13c/0x1d0 [ 62.922440][ T6737] mod_delayed_work_on+0x85/0x100 [ 62.927458][ T6737] addrconf_verify_rtnl+0x367/0xa80 [ 62.932659][ T6737] inet6_addr_add+0x369/0x5d0 [ 62.937326][ T6737] inet6_rtm_newaddr+0xa2e/0xfe0 [ 62.942954][ T6737] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 62.947947][ T6737] netlink_rcv_skb+0xaf/0x260 [ 62.952616][ T6737] rtnetlink_rcv+0x22/0x30 [ 62.957037][ T6737] netlink_unicast+0x390/0x4c0 [ 62.961793][ T6737] netlink_sendmsg+0x4cf/0x8a0 [ 62.966544][ T6737] sock_sendmsg+0x98/0xc0 [ 62.970884][ T6737] __sys_sendto+0x1e2/0x2c0 [ 62.975380][ T6737] __x64_sys_sendto+0x7e/0xa0 [ 62.980061][ T6737] do_syscall_64+0xc7/0x3b0 [ 62.984563][ T6737] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.990432][ T6737] [ 62.992760][ T6737] Reported by Kernel Concurrency Sanitizer on: [ 62.998919][ T6737] CPU: 0 PID: 6737 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 63.007485][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.017546][ T6737] ================================================================== [ 63.025619][ T6737] Kernel panic - not syncing: panic_on_warn set ... [ 63.032505][ T6737] CPU: 0 PID: 6737 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 63.044522][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.054576][ T6737] Call Trace: [ 63.057866][ T6737] dump_stack+0x11d/0x187 [ 63.062186][ T6737] panic+0x210/0x640 [ 63.066074][ T6737] ? vprintk_func+0x89/0x13a [ 63.070655][ T6737] kcsan_report.cold+0xc/0x1a [ 63.075329][ T6737] kcsan_setup_watchpoint+0x3fb/0x440 [ 63.080712][ T6737] add_timer+0x175/0x550 [ 63.084943][ T6737] __queue_delayed_work+0x13c/0x1d0 [ 63.090129][ T6737] mod_delayed_work_on+0x85/0x100 [ 63.095148][ T6737] addrconf_verify_rtnl+0x367/0xa80 [ 63.100345][ T6737] inet6_addr_add+0x369/0x5d0 [ 63.105022][ T6737] inet6_rtm_newaddr+0xa2e/0xfe0 [ 63.110118][ T6737] ? addrconf_prefix_rcv_add_addr+0x5d0/0x5d0 [ 63.116208][ T6737] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 63.121445][ T6737] ? __rcu_read_unlock+0x77/0x390 [ 63.126486][ T6737] ? skb_clone+0x132/0x280 [ 63.131123][ T6737] netlink_rcv_skb+0xaf/0x260 [ 63.135810][ T6737] ? rtnl_calcit.isra.0+0x200/0x200 [ 63.141012][ T6737] rtnetlink_rcv+0x22/0x30 [ 63.145437][ T6737] netlink_unicast+0x390/0x4c0 [ 63.150210][ T6737] netlink_sendmsg+0x4cf/0x8a0 [ 63.154981][ T6737] ? netlink_unicast+0x4c0/0x4c0 [ 63.160068][ T6737] sock_sendmsg+0x98/0xc0 [ 63.164448][ T6737] __sys_sendto+0x1e2/0x2c0 [ 63.169138][ T6737] ? __fput+0x315/0x500 [ 63.173433][ T6737] ? blkcg_maybe_throttle_current+0x249/0x5a0 [ 63.179523][ T6737] ? mem_cgroup_handle_over_high+0x51/0x1f0 [ 63.185430][ T6737] __x64_sys_sendto+0x7e/0xa0 [ 63.190130][ T6737] do_syscall_64+0xc7/0x3b0 [ 63.194671][ T6737] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 63.200671][ T6737] RIP: 0033:0x416583 [ 63.204581][ T6737] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 0d 1f 89 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 63.224551][ T6737] RSP: 002b:00007fff9d46e308 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 63.232967][ T6737] RAX: ffffffffffffffda RBX: 0000000000ca2200 RCX: 0000000000416583 [ 63.240931][ T6737] RDX: 0000000000000040 RSI: 0000000000ca2250 RDI: 0000000000000003 [ 63.248906][ T6737] RBP: 0000000000000000 R08: 00007fff9d46e310 R09: 000000000000000c [ 63.256983][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.264999][ T6737] R13: 0000000000000000 R14: 0000000000ca2250 R15: 0000000000000003 [ 64.343375][ T6737] Shutting down cpus with NMI [ 64.349398][ T6737] Kernel Offset: disabled [ 64.353797][ T6737] Rebooting in 86400 seconds..