[ 50.195612][ T26] audit: type=1800 audit(1572963723.921:27): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 50.216406][ T26] audit: type=1800 audit(1572963723.921:28): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.939473][ T26] audit: type=1800 audit(1572963724.701:29): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 50.962858][ T26] audit: type=1800 audit(1572963724.701:30): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.244' (ECDSA) to the list of known hosts. 2019/11/05 14:22:16 fuzzer started 2019/11/05 14:22:17 dialing manager at 10.128.0.105:43787 2019/11/05 14:22:18 syscalls: 2553 2019/11/05 14:22:18 code coverage: enabled 2019/11/05 14:22:18 comparison tracing: enabled 2019/11/05 14:22:18 extra coverage: extra coverage is not supported by the kernel 2019/11/05 14:22:18 setuid sandbox: enabled 2019/11/05 14:22:18 namespace sandbox: enabled 2019/11/05 14:22:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/05 14:22:18 fault injection: enabled 2019/11/05 14:22:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/05 14:22:18 net packet injection: enabled 2019/11/05 14:22:18 net device setup: enabled 2019/11/05 14:22:18 concurrency sanitizer: enabled 2019/11/05 14:22:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/11/05 14:22:18 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'tomoyo_supervisor' 'pid_update_inode' 'generic_permission' 14:22:20 executing program 0: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:22:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x8000000) syzkaller login: [ 66.461186][ T8011] IPVS: ftp: loaded support on port[0] = 21 [ 66.594266][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 66.654942][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.662065][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.670171][ T8011] device bridge_slave_0 entered promiscuous mode [ 66.677901][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.682574][ T8014] IPVS: ftp: loaded support on port[0] = 21 [ 66.685226][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.698967][ T8011] device bridge_slave_1 entered promiscuous mode [ 66.731200][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.744066][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.771007][ T8011] team0: Port device team_slave_0 added 14:22:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) [ 66.777890][ T8011] team0: Port device team_slave_1 added [ 66.876779][ T8011] device hsr_slave_0 entered promiscuous mode [ 66.914074][ T8011] device hsr_slave_1 entered promiscuous mode 14:22:20 executing program 3: perf_event_open(&(0x7f00000003c0)={0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x627, 0x2, 0x0) [ 67.054364][ T8017] IPVS: ftp: loaded support on port[0] = 21 [ 67.069931][ T8014] chnl_net:caif_netlink_parms(): no params data found [ 67.137988][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.145109][ T8011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.152516][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.159679][ T8011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.337205][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.363244][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.394551][ T8014] device bridge_slave_0 entered promiscuous mode [ 67.450237][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.459385][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.495257][ T8014] device bridge_slave_1 entered promiscuous mode [ 67.579967][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.616672][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.636752][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.666074][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.703289][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.734122][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 67.787871][ T8043] IPVS: ftp: loaded support on port[0] = 21 [ 67.788271][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.839348][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.863657][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.885393][ T8017] chnl_net:caif_netlink_parms(): no params data found [ 67.925439][ T8014] team0: Port device team_slave_0 added [ 67.965038][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.993855][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.025095][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.032442][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state 14:22:21 executing program 4: r0 = memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) ftruncate(r0, 0x9) pread64(r0, &(0x7f0000b52000)=""/67, 0x43, 0x0) [ 68.082149][ T8014] team0: Port device team_slave_1 added [ 68.128306][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.143742][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.183389][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.190460][ T8046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.243626][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.252834][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.294581][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.333820][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.342919][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.404077][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.444836][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.488609][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.523087][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.530974][ T8017] device bridge_slave_0 entered promiscuous mode [ 68.597522][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.614031][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.646528][ T8011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.694257][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.733399][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.740497][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.773888][ T8017] device bridge_slave_1 entered promiscuous mode [ 68.835634][ T8014] device hsr_slave_0 entered promiscuous mode [ 68.873541][ T8014] device hsr_slave_1 entered promiscuous mode 14:22:22 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f00000001c0)="ce041000c4fc50ec00911efc0bb35c02630dffffa328b47ca8a88a37877b06340400000099dbe547f481705924fac300000000309662bd845011399e970800d85433c996e3485bde7c829d37f62622d8826f7957", 0xfd40, 0x0, 0x0, 0x0) [ 68.923184][ T8014] debugfs: Directory 'hsr0' with parent '/' already present! [ 68.935264][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.945367][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.960856][ T8049] IPVS: ftp: loaded support on port[0] = 21 [ 68.985238][ T8017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.018458][ T8017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.049911][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.057617][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.087890][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.189275][ T8062] IPVS: ftp: loaded support on port[0] = 21 [ 69.190364][ T8017] team0: Port device team_slave_0 added [ 69.242075][ T8017] team0: Port device team_slave_1 added [ 69.308590][ T8043] chnl_net:caif_netlink_parms(): no params data found [ 69.575935][ T8017] device hsr_slave_0 entered promiscuous mode [ 69.603539][ T8017] device hsr_slave_1 entered promiscuous mode [ 69.685958][ T8017] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.722714][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.744359][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.767887][ T8043] device bridge_slave_0 entered promiscuous mode [ 69.804875][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 69.861194][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.883382][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.930124][ T8043] device bridge_slave_1 entered promiscuous mode [ 70.020085][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.123576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.144260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.203250][ T8043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.214446][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.327234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.352191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:22:24 executing program 0: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 70.408114][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.415286][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.540228][ T8043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.593255][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.600348][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.654165][ T8049] device bridge_slave_0 entered promiscuous mode [ 70.712322][ T8017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.752864][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.776188][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.831407][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 14:22:24 executing program 0: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 70.886718][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.893834][ T8042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.017380][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.024859][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.056315][ T8049] device bridge_slave_1 entered promiscuous mode [ 71.139140][ T8017] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.182279][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 71.226662][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.248875][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.303801][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.345819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.388694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.437735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.480570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.523812][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.566678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.606657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.652558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.682991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.720984][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.749045][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.803916][ T8043] team0: Port device team_slave_0 added [ 71.830232][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.856579][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.883702][ T8043] team0: Port device team_slave_1 added [ 71.909821][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 14:22:25 executing program 0: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 71.951101][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.984149][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.991221][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.088846][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.126543][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.153929][ T8062] device bridge_slave_0 entered promiscuous mode [ 72.187679][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.207508][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.233979][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.273549][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.280627][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.327884][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.337176][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.368699][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.387932][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.409725][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.427485][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.444946][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.470287][ T8017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.486285][ T8017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.503352][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.511466][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.519494][ T8062] device bridge_slave_1 entered promiscuous mode [ 72.527255][ T8049] team0: Port device team_slave_0 added [ 72.535892][ T8049] team0: Port device team_slave_1 added [ 72.542696][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.551450][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.560315][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.568981][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.577784][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.585620][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.645080][ T8043] device hsr_slave_0 entered promiscuous mode [ 72.693566][ T8043] device hsr_slave_1 entered promiscuous mode [ 72.733138][ T8043] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.752747][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.764307][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.773771][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.787953][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.817190][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.835332][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.842893][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.868899][ T8062] team0: Port device team_slave_0 added [ 72.955798][ T8049] device hsr_slave_0 entered promiscuous mode 14:22:26 executing program 0: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 73.003553][ T8049] device hsr_slave_1 entered promiscuous mode [ 73.043172][ T8049] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.084432][ T8062] team0: Port device team_slave_1 added [ 73.275759][ T8062] device hsr_slave_0 entered promiscuous mode [ 73.317306][ T8062] device hsr_slave_1 entered promiscuous mode [ 73.363479][ T8062] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.571542][ T8043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.615407][ T8187] ================================================================== [ 73.623560][ T8187] BUG: KCSAN: data-race in osq_lock / osq_lock [ 73.629710][ T8187] [ 73.632053][ T8187] write to 0xffff88812bf2b054 of 4 bytes by task 8188 on cpu 1: [ 73.639699][ T8187] osq_lock+0x89/0x2f0 [ 73.643800][ T8187] rwsem_optimistic_spin+0x5f/0x320 [ 73.649014][ T8187] rwsem_down_write_slowpath+0x109/0x950 [ 73.654661][ T8187] down_write+0x88/0x90 [ 73.658830][ T8187] vma_link+0x84/0x130 [ 73.662911][ T8187] mmap_region+0x8bb/0xd50 [ 73.667342][ T8187] do_mmap+0x6d4/0xba0 [ 73.671416][ T8187] vm_mmap_pgoff+0x12d/0x190 [ 73.676016][ T8187] ksys_mmap_pgoff+0x2d8/0x420 [ 73.680785][ T8187] __x64_sys_mmap+0x91/0xc0 [ 73.685297][ T8187] do_syscall_64+0xcc/0x370 [ 73.689821][ T8187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 73.695710][ T8187] [ 73.698071][ T8187] read to 0xffff88812bf2b054 of 4 bytes by task 8187 on cpu 0: [ 73.698606][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.705639][ T8187] osq_lock+0x170/0x2f0 [ 73.705659][ T8187] rwsem_optimistic_spin+0x5f/0x320 [ 73.705687][ T8187] rwsem_down_write_slowpath+0x109/0x950 [ 73.727357][ T8187] down_write+0x88/0x90 [ 73.731513][ T8187] __vma_adjust+0x196/0x12a0 [ 73.736188][ T8187] __split_vma+0x208/0x350 [ 73.740621][ T8187] split_vma+0x73/0xa0 [ 73.744713][ T8187] mprotect_fixup+0x43f/0x510 [ 73.749405][ T8187] do_mprotect_pkey+0x3eb/0x660 [ 73.754292][ T8187] __x64_sys_mprotect+0x51/0x70 [ 73.759149][ T8187] do_syscall_64+0xcc/0x370 [ 73.763656][ T8187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 73.769551][ T8187] [ 73.771874][ T8187] Reported by Kernel Concurrency Sanitizer on: [ 73.778040][ T8187] CPU: 0 PID: 8187 Comm: grep Not tainted 5.4.0-rc6+ #0 [ 73.784979][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.795053][ T8187] ================================================================== [ 73.797083][ T8049] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.803138][ T8187] Kernel panic - not syncing: panic_on_warn set ... [ 73.803162][ T8187] CPU: 0 PID: 8187 Comm: grep Not tainted 5.4.0-rc6+ #0 [ 73.803172][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.803188][ T8187] Call Trace: [ 73.836639][ T8187] dump_stack+0xf5/0x159 [ 73.840911][ T8187] panic+0x210/0x640 [ 73.844830][ T8187] ? vprintk_func+0x8d/0x140 [ 73.849435][ T8187] kcsan_report.cold+0xc/0xe [ 73.854061][ T8187] kcsan_setup_watchpoint+0x3fe/0x410 [ 73.859459][ T8187] __tsan_read4+0x145/0x1f0 [ 73.864001][ T8187] osq_lock+0x170/0x2f0 [ 73.868167][ T8187] rwsem_optimistic_spin+0x5f/0x320 [ 73.873378][ T8187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.879651][ T8187] rwsem_down_write_slowpath+0x109/0x950 [ 73.885297][ T8187] ? __read_once_size.constprop.0+0x12/0x20 [ 73.891212][ T8187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.897479][ T8187] ? refcount_sub_and_test_checked+0xc8/0x190 [ 73.903575][ T8187] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 73.909514][ T8187] ? __read_once_size+0x41/0xe0 [ 73.914381][ T8187] ? uprobe_mmap+0xd9/0x8e0 [ 73.918902][ T8187] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 73.924816][ T8187] down_write+0x88/0x90 [ 73.928993][ T8187] __vma_adjust+0x196/0x12a0 [ 73.933619][ T8187] __split_vma+0x208/0x350 [ 73.938051][ T8187] split_vma+0x73/0xa0 [ 73.942183][ T8187] mprotect_fixup+0x43f/0x510 [ 73.946895][ T8187] do_mprotect_pkey+0x3eb/0x660 [ 73.951779][ T8187] __x64_sys_mprotect+0x51/0x70 [ 73.956673][ T8187] do_syscall_64+0xcc/0x370 [ 73.961203][ T8187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 73.967128][ T8187] RIP: 0033:0x7f7ffe0b0447 [ 73.971565][ T8187] Code: 73 01 c3 48 8d 0d 5d ad 20 00 31 d2 48 29 c2 89 11 48 83 c8 ff eb eb 90 90 90 90 90 90 90 90 90 90 90 90 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 2d ad 20 00 31 d2 48 29 c2 89 [ 73.991175][ T8187] RSP: 002b:00007ffca7e11248 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 73.999621][ T8187] RAX: ffffffffffffffda RBX: 00007f7ffe2b89a8 RCX: 00007f7ffe0b0447 [ 73.999968][ T8049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.007601][ T8187] RDX: 0000000000000000 RSI: 00000000001ff000 RDI: 00007f7ffdc8d000 [ 74.007616][ T8187] RBP: 00007ffca7e115a0 R08: 0000000000000003 R09: 0000000000000000 [ 74.007629][ T8187] R10: 0000000000000001 R11: 0000000000000206 R12: 00007ffca7e11688 [ 74.007642][ T8187] R13: 0000000000000002 R14: 0000000000000030 R15: 00007ffca7e11290 [ 74.019254][ T8187] Kernel Offset: disabled [ 74.055400][ T8187] Rebooting in 86400 seconds..