[info] Using makefile-style concurrent boot in runlevel 2. [ 45.452956][ T26] audit: type=1800 audit(1575468048.918:21): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 45.502505][ T26] audit: type=1800 audit(1575468048.918:22): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. 2019/12/04 14:00:57 fuzzer started 2019/12/04 14:00:59 dialing manager at 10.128.0.105:44241 2019/12/04 14:01:00 syscalls: 2684 2019/12/04 14:01:00 code coverage: enabled 2019/12/04 14:01:00 comparison tracing: enabled 2019/12/04 14:01:00 extra coverage: extra coverage is not supported by the kernel 2019/12/04 14:01:00 setuid sandbox: enabled 2019/12/04 14:01:00 namespace sandbox: enabled 2019/12/04 14:01:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 14:01:00 fault injection: enabled 2019/12/04 14:01:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 14:01:00 net packet injection: enabled 2019/12/04 14:01:00 net device setup: enabled 2019/12/04 14:01:00 concurrency sanitizer: enabled 2019/12/04 14:01:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/12/04 14:01:01 adding functions to KCSAN blacklist: '__ext4_new_inode' 'ep_poll' 'tcp_add_backlog' 'rcu_gp_fqs_check_wake' 'tick_sched_do_timer' 'generic_fillattr' 'tomoyo_supervisor' '__hrtimer_run_queues' 'find_next_bit' 'pid_update_inode' 'page_counter_try_charge' 14:01:05 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, 0xe669) 14:01:06 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) syzkaller login: [ 62.664835][ T7518] IPVS: ftp: loaded support on port[0] = 21 [ 62.783319][ T7518] chnl_net:caif_netlink_parms(): no params data found 14:01:06 executing program 2: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000330019010000000000e0ffff03000000ffd38d9b0c000100060006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 62.830802][ T7521] IPVS: ftp: loaded support on port[0] = 21 [ 62.838394][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.845508][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.856762][ T7518] device bridge_slave_0 entered promiscuous mode [ 62.887806][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.894961][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.918454][ T7518] device bridge_slave_1 entered promiscuous mode [ 62.965119][ T7518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.999873][ T7518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.036831][ T7521] chnl_net:caif_netlink_parms(): no params data found [ 63.046737][ T7518] team0: Port device team_slave_0 added [ 63.053784][ T7518] team0: Port device team_slave_1 added 14:01:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x44, 0x0) [ 63.102600][ T7521] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.113611][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.122909][ T7521] device bridge_slave_0 entered promiscuous mode [ 63.199519][ T7518] device hsr_slave_0 entered promiscuous mode [ 63.237834][ T7518] device hsr_slave_1 entered promiscuous mode [ 63.284994][ T7524] IPVS: ftp: loaded support on port[0] = 21 [ 63.313813][ T7521] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.327592][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.335457][ T7521] device bridge_slave_1 entered promiscuous mode [ 63.399085][ T7526] IPVS: ftp: loaded support on port[0] = 21 [ 63.432227][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.439351][ T7518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.446738][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.453891][ T7518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.539800][ T7521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.578436][ T7521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 14:01:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x4bfa, &(0x7f0000000040)) [ 63.771178][ T7521] team0: Port device team_slave_0 added [ 63.781473][ T7524] chnl_net:caif_netlink_parms(): no params data found [ 63.861594][ T7521] team0: Port device team_slave_1 added [ 63.899343][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.927780][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.972655][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.024506][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.067692][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.075457][ T7524] device bridge_slave_0 entered promiscuous mode [ 64.123908][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.169372][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.176420][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.218385][ T7524] device bridge_slave_1 entered promiscuous mode [ 64.266365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.279832][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:01:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x20) [ 64.421298][ T7521] device hsr_slave_0 entered promiscuous mode [ 64.479214][ T7521] device hsr_slave_1 entered promiscuous mode [ 64.527652][ T7521] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.536308][ T7524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.573993][ T7553] IPVS: ftp: loaded support on port[0] = 21 [ 64.614669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.648185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.656542][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.663631][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.728193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.736947][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.801063][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.808268][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.830951][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.843185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.861268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.870142][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.881139][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.890028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.901288][ T7524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.917062][ T7518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.930050][ T7518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.975826][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.988464][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.011752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.035716][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.055568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.081350][ T7526] chnl_net:caif_netlink_parms(): no params data found [ 65.114941][ T7559] IPVS: ftp: loaded support on port[0] = 21 [ 65.130101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.149988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.167843][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.211785][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.253992][ T7524] team0: Port device team_slave_0 added [ 65.312881][ T7524] team0: Port device team_slave_1 added [ 65.344118][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.360275][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.388145][ T7526] device bridge_slave_0 entered promiscuous mode [ 65.475429][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.487932][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.495687][ T7526] device bridge_slave_1 entered promiscuous mode [ 65.520665][ T7521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.569895][ T7524] device hsr_slave_0 entered promiscuous mode [ 65.587866][ T7524] device hsr_slave_1 entered promiscuous mode [ 65.627768][ T7524] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.690341][ T7521] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.804607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.819758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.867268][ T7553] chnl_net:caif_netlink_parms(): no params data found [ 65.947584][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.956111][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.022583][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.029695][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.118066][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.158011][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.208027][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.215207][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.267053][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.306580][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.340286][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.360211][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.388323][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.408155][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.428496][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.449615][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.481492][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.503383][ T7521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.532582][ T7521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.560690][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.578118][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.611453][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.628077][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.665415][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.678005][ T7559] chnl_net:caif_netlink_parms(): no params data found [ 66.783749][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.797870][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.810316][ T7526] team0: Port device team_slave_0 added [ 66.831967][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.847982][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.888179][ T7553] device bridge_slave_0 entered promiscuous mode [ 66.919639][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.926713][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.975747][ T7553] device bridge_slave_1 entered promiscuous mode [ 66.991815][ T7526] team0: Port device team_slave_1 added [ 67.006155][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.022584][ T7521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.094632][ T7524] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.127292][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.135760][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.183345][ T7526] device hsr_slave_0 entered promiscuous mode [ 67.247782][ T7526] device hsr_slave_1 entered promiscuous mode [ 67.267603][ T7526] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.276440][ T7553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.297774][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.304818][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.333452][ T7559] device bridge_slave_0 entered promiscuous mode [ 67.430294][ T7553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.447367][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.468029][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.493268][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.500480][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.551230][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.586655][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.610392][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.617498][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.661485][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.682194][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.721341][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.761278][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 14:01:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, 0xe669) [ 67.770449][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.821915][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.832993][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.860651][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state 14:01:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, 0xe669) [ 67.900278][ T7559] device bridge_slave_1 entered promiscuous mode [ 67.932427][ T7524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.984015][ T7524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.038479][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.046441][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.085396][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.118192][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 14:01:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, 0xe669) [ 68.132843][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.183966][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 14:01:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, 0xe669) [ 68.272291][ T7553] team0: Port device team_slave_0 added [ 68.283747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.298031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.305468][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.369043][ T7524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.409256][ T7559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.438300][ T7553] team0: Port device team_slave_1 added [ 68.486301][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.509224][ T7559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.554826][ T7526] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.581029][ C0] hrtimer: interrupt took 35752 ns 14:01:12 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, 0xe669) [ 68.598607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.606481][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.719894][ T7553] device hsr_slave_0 entered promiscuous mode [ 68.758125][ T7553] device hsr_slave_1 entered promiscuous mode 14:01:12 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, 0xe669) [ 68.807553][ T7553] debugfs: Directory 'hsr0' with parent '/' already present! [ 68.816152][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.867970][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.907993][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state 14:01:12 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 68.915061][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.915764][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.916155][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.916448][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.916505][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.917071][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.931943][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.941844][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.944713][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.945363][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.949356][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.951415][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.951801][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.953057][ T7559] team0: Port device team_slave_0 added [ 68.954349][ T7559] team0: Port device team_slave_1 added [ 68.973425][ T7526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.973879][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.986203][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.986628][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.008812][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.009388][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.133115][ T7559] device hsr_slave_0 entered promiscuous mode [ 69.142471][ C1] ================================================================== [ 69.142511][ C1] BUG: KCSAN: data-race in add_timer / run_timer_softirq [ 69.142518][ C1] [ 69.142530][ C1] read to 0xffff88812bf1b6c8 of 8 bytes by task 21 on cpu 0: [ 69.142543][ C1] add_timer+0x16f/0x550 [ 69.142560][ C1] __queue_delayed_work+0x13b/0x1d0 [ 69.142574][ C1] queue_delayed_work_on+0xf3/0x110 [ 69.142589][ C1] bond_netdev_notify_work+0x150/0x160 [ 69.142604][ C1] process_one_work+0x3d4/0x890 [ 69.142616][ C1] worker_thread+0xa0/0x800 [ 69.142628][ C1] kthread+0x1d4/0x200 [ 69.142642][ C1] ret_from_fork+0x1f/0x30 [ 69.142645][ C1] [ 69.142657][ C1] write to 0xffff88812bf1b6c8 of 8 bytes by interrupt on cpu 1: [ 69.142673][ C1] run_timer_softirq+0x496/0xcd0 [ 69.142687][ C1] __do_softirq+0x115/0x33f [ 69.142699][ C1] irq_exit+0xbb/0xe0 [ 69.142714][ C1] smp_apic_timer_interrupt+0xe6/0x280 [ 69.142728][ C1] apic_timer_interrupt+0xf/0x20 [ 69.142743][ C1] console_unlock+0x8fa/0xb80 [ 69.142756][ C1] vcs_open+0x6b/0xb0 [ 69.142771][ C1] chrdev_open+0x150/0x380 [ 69.142785][ C1] do_dentry_open+0x301/0x970 [ 69.142800][ C1] vfs_open+0x62/0x80 [ 69.142815][ C1] path_openat+0xf73/0x36e0 [ 69.142829][ C1] do_filp_open+0x11e/0x1b0 [ 69.142845][ C1] do_sys_open+0x3b3/0x4f0 [ 69.142861][ C1] __x64_sys_openat+0x62/0x80 [ 69.142879][ C1] do_syscall_64+0xcc/0x370 [ 69.142894][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.142897][ C1] [ 69.142901][ C1] Reported by Kernel Concurrency Sanitizer on: [ 69.142919][ C1] CPU: 1 PID: 7696 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 69.142928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.142933][ C1] ================================================================== [ 69.142940][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 69.142953][ C1] CPU: 1 PID: 7696 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 69.142960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.142963][ C1] Call Trace: [ 69.142968][ C1] [ 69.142986][ C1] dump_stack+0x11d/0x181 [ 69.143007][ C1] panic+0x210/0x640 [ 69.143025][ C1] ? vprintk_func+0x8d/0x140 [ 69.143046][ C1] kcsan_report.cold+0xc/0xd [ 69.143068][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 69.143084][ C1] ? __queue_work+0x910/0x910 [ 69.143105][ C1] __tsan_unaligned_write8+0xc4/0x100 [ 69.143121][ C1] run_timer_softirq+0x496/0xcd0 [ 69.143140][ C1] ? kvm_sched_clock_read+0x9/0x20 [ 69.143155][ C1] ? sched_clock+0x13/0x20 [ 69.143170][ C1] ? sched_clock_cpu+0x15/0xe0 [ 69.143188][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.143209][ C1] __do_softirq+0x115/0x33f [ 69.143230][ C1] irq_exit+0xbb/0xe0 [ 69.143247][ C1] smp_apic_timer_interrupt+0xe6/0x280 [ 69.143267][ C1] apic_timer_interrupt+0xf/0x20 [ 69.143273][ C1] [ 69.143289][ C1] RIP: 0010:console_unlock+0x8fa/0xb80 [ 69.143310][ C1] Code: e8 eb 54 00 00 48 c7 c7 20 61 a5 85 e8 af d8 1a 00 48 83 3d c7 ff 6e 04 00 0f 84 69 02 00 00 e8 6c cb 0d 00 48 8b 7d a0 57 9d <0f> 1f 44 00 00 48 c7 c7 18 61 a5 85 e8 85 d8 1a 00 48 83 3d 95 ff [ 69.143319][ C1] RSP: 0018:ffffc900025dba60 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13 [ 69.143333][ C1] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90001929000 [ 69.143342][ C1] RDX: 0000000000034d9d RSI: ffffffff81366164 RDI: 0000000000000216 [ 69.143353][ C1] RBP: ffffc900025dbad0 R08: 0000000000000000 R09: 0000ffff85a56120 [ 69.143363][ C1] R10: 0000c900025bbcc0 R11: 0000ffff85a56127 R12: ffffffff82e24420 [ 69.143372][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc900025dba98 [ 69.143390][ C1] ? write_ext_msg+0x360/0x360 [ 69.143409][ C1] ? console_unlock+0x8f4/0xb80 [ 69.143434][ C1] vcs_open+0x6b/0xb0 [ 69.143448][ C1] ? vcs_release+0x60/0x60 [ 69.143465][ C1] chrdev_open+0x150/0x380 [ 69.143485][ C1] ? security_file_open+0x84/0x210 [ 69.143503][ C1] do_dentry_open+0x301/0x970 [ 69.143524][ C1] ? cdev_init+0xb0/0xb0 [ 69.143542][ C1] vfs_open+0x62/0x80 [ 69.143560][ C1] path_openat+0xf73/0x36e0 [ 69.143576][ C1] ? ___cache_free+0x2e/0x320 [ 69.143605][ C1] ? __read_once_size+0x41/0xe0 [ 69.143625][ C1] do_filp_open+0x11e/0x1b0 [ 69.143641][ C1] ? _raw_spin_unlock+0x4b/0x60 [ 69.143653][ C1] ? __alloc_fd+0x2ef/0x3b0 [ 69.143673][ C1] ? get_unused_fd_flags+0x93/0xc0 [ 69.143693][ C1] do_sys_open+0x3b3/0x4f0 [ 69.143717][ C1] __x64_sys_openat+0x62/0x80 [ 69.143735][ C1] do_syscall_64+0xcc/0x370 [ 69.143750][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.143760][ C1] RIP: 0033:0x45a679 [ 69.143775][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 69.143782][ C1] RSP: 002b:00007fcd68f52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.143798][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 69.143808][ C1] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 69.143818][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 69.143827][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd68f536d4 [ 69.143838][ C1] R13: 00000000004c83e6 R14: 00000000004df790 R15: 00000000ffffffff [ 69.145291][ C1] Kernel Offset: disabled [ 69.804828][ C1] Rebooting in 86400 seconds..