[ 35.794132][ T26] audit: type=1800 audit(1571052464.568:21): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 35.841305][ T26] audit: type=1800 audit(1571052464.578:22): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 35.871150][ T26] audit: type=1800 audit(1571052464.578:23): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [ 35.891042][ T26] audit: type=1800 audit(1571052464.578:24): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.454513][ T26] audit: type=1800 audit(1571052465.228:25): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 36.474643][ T26] audit: type=1800 audit(1571052465.228:26): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 36.496517][ T26] audit: type=1800 audit(1571052465.228:27): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.179' (ECDSA) to the list of known hosts. 2019/10/14 11:27:52 fuzzer started 2019/10/14 11:27:53 dialing manager at 10.128.0.105:43961 2019/10/14 11:27:53 syscalls: 2523 2019/10/14 11:27:53 code coverage: enabled 2019/10/14 11:27:53 comparison tracing: enabled 2019/10/14 11:27:53 extra coverage: extra coverage is not supported by the kernel 2019/10/14 11:27:53 setuid sandbox: enabled 2019/10/14 11:27:53 namespace sandbox: enabled 2019/10/14 11:27:53 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/14 11:27:53 fault injection: enabled 2019/10/14 11:27:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/14 11:27:53 net packet injection: enabled 2019/10/14 11:27:53 net device setup: enabled 2019/10/14 11:27:53 concurrency sanitizer: enabled 11:27:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x10fffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x833e, r1, 0x3, 0x0, 0x8001}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(r1, 0x0, 0x0) syzkaller login: [ 48.667109][ T7239] IPVS: ftp: loaded support on port[0] = 21 11:27:57 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {}, {}, {0x3}}, [@filter_kind_options=@f_route={{0xc, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 48.759079][ T7239] chnl_net:caif_netlink_parms(): no params data found [ 48.824730][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.856138][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.864246][ T7239] device bridge_slave_0 entered promiscuous mode [ 48.887284][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.894394][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.917173][ T7239] device bridge_slave_1 entered promiscuous mode [ 48.958608][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.977927][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.026091][ T7239] team0: Port device team_slave_0 added [ 49.033964][ T7239] team0: Port device team_slave_1 added 11:27:57 executing program 2: r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x2d7, 0x403080) ioctl$BLKPG(r1, 0x1269, &(0x7f00000013c0)={0x3ff, 0x7, 0xd04, &(0x7f00000003c0)="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"}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001}) getpgrp(r3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0), 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e22, 0x800, @ipv4={[], [], @loopback}}}, 0x1, 0x9, 0xd2, 0x0, 0x8}, &(0x7f0000000100)=0x98) socket$key(0xf, 0x3, 0x2) [ 49.120413][ T7239] device hsr_slave_0 entered promiscuous mode [ 49.196525][ T7239] device hsr_slave_1 entered promiscuous mode [ 49.264316][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.271446][ T7239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.278870][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.285979][ T7239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.349986][ T7242] IPVS: ftp: loaded support on port[0] = 21 11:27:58 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_ENTRY(r0, &(0x7f00000025c0)={0x90, 0xf2ffffff}, 0x90) [ 49.456886][ T7244] IPVS: ftp: loaded support on port[0] = 21 [ 49.485038][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.524702][ T7239] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.532727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.543035][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.578156][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.588365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.630955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.640362][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.647552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.667704][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.687527][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.694623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.750364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.761139][ T7242] chnl_net:caif_netlink_parms(): no params data found [ 49.786829][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.800234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.809589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.825538][ T7239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 11:27:58 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getpid() close(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x114b2f27f1eb1237}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x0, 0x70, 0x2, 0x7, 0x7, 0xfb, 0x0, 0x10000, 0x8c, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x8, @perf_config_ext={0xab, 0xcea}, 0x1400, 0x96be, 0x2, 0x4, 0x2, 0x7, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) gettid() io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0) recvmsg$kcm(r0, 0x0, 0x10100) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)) [ 49.846376][ T7239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.879820][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.891785][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.919506][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.929749][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.960116][ T7249] IPVS: ftp: loaded support on port[0] = 21 [ 49.980341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.055584][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.109412][ T7244] chnl_net:caif_netlink_parms(): no params data found [ 50.135809][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.145748][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.154366][ T7242] device bridge_slave_0 entered promiscuous mode [ 50.187167][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.194314][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.206694][ T7242] device bridge_slave_1 entered promiscuous mode [ 50.250925][ T7254] IPVS: ftp: loaded support on port[0] = 21 [ 50.281986][ T7244] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.298251][ T7244] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.309218][ T7244] device bridge_slave_0 entered promiscuous mode [ 50.343893][ T7242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.388607][ T7244] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.395772][ T7244] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.417562][ T7244] device bridge_slave_1 entered promiscuous mode 11:27:59 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000d, 0x7bb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$vcsa(0x0, 0x0, 0x222a6d8102856fd9) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000008c0), 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xfff}, 0x8) add_key$keyring(&(0x7f0000000380)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) getrandom(&(0x7f00000003c0)=""/190, 0xbe, 0x1) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000003) [ 50.443545][ T7242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.558963][ T7242] team0: Port device team_slave_0 added [ 50.566644][ T7244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.588757][ C0] hrtimer: interrupt took 36320 ns [ 50.600648][ T7242] team0: Port device team_slave_1 added [ 50.610741][ T7244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.656383][ T7249] chnl_net:caif_netlink_parms(): no params data found [ 50.695137][ T7244] team0: Port device team_slave_0 added [ 50.756818][ T7242] device hsr_slave_0 entered promiscuous mode [ 50.806504][ T7242] device hsr_slave_1 entered promiscuous mode [ 50.846180][ T7242] debugfs: Directory 'hsr0' with parent '/' already present! [ 50.860599][ T7244] team0: Port device team_slave_1 added [ 50.934604][ T7265] IPVS: ftp: loaded support on port[0] = 21 [ 50.980465][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.994542][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.003128][ T7249] device bridge_slave_0 entered promiscuous mode [ 51.049850][ T7244] device hsr_slave_0 entered promiscuous mode [ 51.109598][ T7244] device hsr_slave_1 entered promiscuous mode [ 51.156230][ T7244] debugfs: Directory 'hsr0' with parent '/' already present! [ 51.171210][ T7254] chnl_net:caif_netlink_parms(): no params data found [ 51.192821][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.200705][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.212856][ T7249] device bridge_slave_1 entered promiscuous mode [ 51.269871][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.293225][ T7242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.326800][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.337895][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.345975][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.359451][ T7242] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.418117][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.425199][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.434225][ T7254] device bridge_slave_0 entered promiscuous mode [ 51.442206][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.455791][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.465015][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.472114][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.485563][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.494737][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.507644][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.514728][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.523819][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.533617][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.557980][ T7249] team0: Port device team_slave_0 added 11:28:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x10fffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x833e, r1, 0x3, 0x0, 0x8001}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(r1, 0x0, 0x0) [ 51.563777][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.601530][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.627136][ T7254] device bridge_slave_1 entered promiscuous mode [ 51.662753][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.677184][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.693843][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.703720][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.719248][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.742707][ T7249] team0: Port device team_slave_1 added [ 51.787914][ T7271] ================================================================== [ 51.796372][ T7271] BUG: KCSAN: data-race in generic_write_end / mpage_submit_page [ 51.804111][ T7271] [ 51.806446][ T7271] read to 0xffff888125bdc178 of 8 bytes by task 7274 on cpu 0: [ 51.813967][ T7271] mpage_submit_page+0x81/0x170 [ 51.818797][ T7271] mpage_map_and_submit_buffers+0x331/0x520 [ 51.824690][ T7271] ext4_writepages+0x147c/0x22e0 [ 51.829797][ T7271] do_writepages+0x6b/0x170 [ 51.834299][ T7271] __filemap_fdatawrite_range+0x19e/0x200 [ 51.840007][ T7271] filemap_flush+0x2d/0x40 [ 51.844408][ T7271] ext4_alloc_da_blocks+0x78/0x180 [ 51.849501][ T7271] ext4_ioctl+0x3da/0x29b0 [ 51.854494][ T7271] do_vfs_ioctl+0x991/0xc60 [ 51.858988][ T7271] ksys_ioctl+0xbd/0xe0 [ 51.863137][ T7271] __x64_sys_ioctl+0x4c/0x60 [ 51.867905][ T7271] do_syscall_64+0xcf/0x2f0 [ 51.872402][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 51.878277][ T7271] [ 51.880602][ T7271] write to 0xffff888125bdc178 of 8 bytes by task 7271 on cpu 1: [ 51.888231][ T7271] generic_write_end+0xd0/0x1f0 [ 51.893084][ T7271] ext4_da_write_end+0x158/0x620 [ 51.898005][ T7271] generic_perform_write+0x1d3/0x320 [ 51.903406][ T7271] __generic_file_write_iter+0x251/0x380 [ 51.909045][ T7271] ext4_file_write_iter+0x1fc/0xa40 [ 51.914232][ T7271] new_sync_write+0x388/0x4a0 [ 51.918892][ T7271] __vfs_write+0xb1/0xc0 [ 51.923134][ T7271] vfs_write+0x18a/0x390 [ 51.927356][ T7271] ksys_write+0xd5/0x1b0 [ 51.931579][ T7271] __x64_sys_write+0x4c/0x60 [ 51.936252][ T7271] do_syscall_64+0xcf/0x2f0 [ 51.940754][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 51.946620][ T7271] [ 51.949033][ T7271] Reported by Kernel Concurrency Sanitizer on: [ 51.955344][ T7271] CPU: 1 PID: 7271 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 51.962784][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.974375][ T7271] ================================================================== [ 51.982543][ T7271] Kernel panic - not syncing: panic_on_warn set ... [ 51.989578][ T7271] CPU: 1 PID: 7271 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 51.997284][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.007564][ T7271] Call Trace: [ 52.010843][ T7271] dump_stack+0xf5/0x159 [ 52.015092][ T7271] panic+0x209/0x639 [ 52.018983][ T7271] ? ksys_write+0xd5/0x1b0 [ 52.023484][ T7271] ? vprintk_func+0x8d/0x140 [ 52.028093][ T7271] kcsan_report.cold+0xc/0x1b [ 52.032815][ T7271] __kcsan_setup_watchpoint+0x3ee/0x510 [ 52.038452][ T7271] __tsan_write8+0x32/0x40 [ 52.043746][ T7271] generic_write_end+0xd0/0x1f0 [ 52.049088][ T7271] ext4_da_write_end+0x158/0x620 [ 52.054659][ T7271] ? __tsan_write4+0x32/0x40 [ 52.059249][ T7271] ? ext4_write_end+0x760/0x760 [ 52.064186][ T7271] generic_perform_write+0x1d3/0x320 [ 52.069578][ T7271] __generic_file_write_iter+0x251/0x380 [ 52.075201][ T7271] ext4_file_write_iter+0x1fc/0xa40 [ 52.080601][ T7271] new_sync_write+0x388/0x4a0 [ 52.085282][ T7271] __vfs_write+0xb1/0xc0 [ 52.089605][ T7271] vfs_write+0x18a/0x390 [ 52.094589][ T7271] ksys_write+0xd5/0x1b0 [ 52.098828][ T7271] __x64_sys_write+0x4c/0x60 [ 52.103591][ T7271] do_syscall_64+0xcf/0x2f0 [ 52.108089][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 52.114059][ T7271] RIP: 0033:0x459a59 [ 52.117944][ T7271] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.137636][ T7271] RSP: 002b:00007f39c5790c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.146415][ T7271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 52.154511][ T7271] RDX: 000000005aa78d33 RSI: 0000000020000200 RDI: 0000000000000004 [ 52.164164][ T7271] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 52.172626][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39c57916d4 [ 52.180889][ T7271] R13: 00000000004c9a75 R14: 00000000004e13e8 R15: 00000000ffffffff [ 52.190597][ T7271] Kernel Offset: disabled [ 52.194930][ T7271] Rebooting in 86400 seconds..