[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.199423][ T26] audit: type=1800 audit(1572633198.327:25): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 37.241739][ T26] audit: type=1800 audit(1572633198.327:26): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 37.263986][ T26] audit: type=1800 audit(1572633198.327:27): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.21' (ECDSA) to the list of known hosts. 2019/11/01 18:33:28 fuzzer started 2019/11/01 18:33:30 dialing manager at 10.128.0.105:41349 2019/11/01 18:33:30 syscalls: 2540 2019/11/01 18:33:30 code coverage: enabled 2019/11/01 18:33:30 comparison tracing: enabled 2019/11/01 18:33:30 extra coverage: extra coverage is not supported by the kernel 2019/11/01 18:33:30 setuid sandbox: enabled 2019/11/01 18:33:30 namespace sandbox: enabled 2019/11/01 18:33:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/01 18:33:30 fault injection: enabled 2019/11/01 18:33:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/01 18:33:30 net packet injection: enabled 2019/11/01 18:33:30 net device setup: enabled 2019/11/01 18:33:30 concurrency sanitizer: enabled 2019/11/01 18:33:32 adding functions to KCSAN blacklist: 'ext4_free_inode' 'pipe_poll' '__hrtimer_run_queues' 'tcp_add_backlog' 'common_perm_cond' 'run_timer_softirq' '__nf_conntrack_find_get' 'generic_permission' 'ktime_get_real_seconds' 'pid_update_inode' 'tomoyo_supervisor' 'tick_do_update_jiffies64' 'ep_poll' 18:33:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x22, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f00000000c0)=['!/*ppp1vmnet1wlan1$,cgroupwlan1posix_acl_accesswlan1\x00'], 0x35}) syzkaller login: [ 54.736976][ T7263] IPVS: ftp: loaded support on port[0] = 21 18:33:35 executing program 1: unshare(0x2000400) waitid(0x3, 0x0, 0x0, 0x4000000c, 0x0) [ 54.831646][ T7263] chnl_net:caif_netlink_parms(): no params data found [ 54.877760][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.894922][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.902968][ T7263] device bridge_slave_0 entered promiscuous mode [ 54.910990][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.919320][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.928790][ T7263] device bridge_slave_1 entered promiscuous mode [ 54.951795][ T7263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.986590][ T7263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.029150][ T7263] team0: Port device team_slave_0 added [ 55.046320][ T7263] team0: Port device team_slave_1 added [ 55.073257][ T7266] IPVS: ftp: loaded support on port[0] = 21 18:33:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4ffd}) [ 55.168016][ T7263] device hsr_slave_0 entered promiscuous mode [ 55.206132][ T7263] device hsr_slave_1 entered promiscuous mode [ 55.426214][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.433483][ T7263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.441001][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.448307][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.633757][ T7285] IPVS: ftp: loaded support on port[0] = 21 [ 55.659210][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 55.799781][ T7263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.856920][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.887578][ T2917] bridge0: port 1(bridge_slave_0) entered disabled state 18:33:37 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 55.906966][ T2917] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.931098][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 55.989524][ T7263] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.017526][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.024706][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.065774][ T7266] device bridge_slave_0 entered promiscuous mode [ 56.096576][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.137242][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.165919][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.172989][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.205730][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.212812][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.257575][ T7266] device bridge_slave_1 entered promiscuous mode [ 56.311992][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.326179][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.365490][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.372658][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.425870][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.457801][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.486403][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.517754][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.577475][ T7296] IPVS: ftp: loaded support on port[0] = 21 [ 56.599350][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.627468][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.665902][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.697928][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.737595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.757994][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.797948][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.834197][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.901467][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 18:33:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2721, 0x0, &(0x7f00000000c0)) [ 56.948195][ T7263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.987943][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.065090][ T7285] chnl_net:caif_netlink_parms(): no params data found [ 57.148839][ T7266] team0: Port device team_slave_0 added [ 57.199487][ T7266] team0: Port device team_slave_1 added [ 57.408500][ T7266] device hsr_slave_0 entered promiscuous mode [ 57.487855][ T7266] device hsr_slave_1 entered promiscuous mode [ 57.514948][ T7266] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.523444][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state 18:33:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x22, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f00000000c0)=['!/*ppp1vmnet1wlan1$,cgroupwlan1posix_acl_accesswlan1\x00'], 0x35}) [ 57.541468][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.578880][ T7285] device bridge_slave_0 entered promiscuous mode [ 57.668683][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.690363][ T7308] IPVS: ftp: loaded support on port[0] = 21 [ 57.705199][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.768215][ T7285] device bridge_slave_1 entered promiscuous mode [ 57.792250][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 58.005488][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.065470][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.128582][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.146127][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.154289][ T7296] device bridge_slave_0 entered promiscuous mode [ 58.238275][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.255336][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.284119][ T7296] device bridge_slave_1 entered promiscuous mode [ 58.325282][ T7285] team0: Port device team_slave_0 added [ 58.332628][ T7285] team0: Port device team_slave_1 added [ 58.427244][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.452163][ T7266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.521449][ T7285] device hsr_slave_0 entered promiscuous mode [ 58.585272][ T7285] device hsr_slave_1 entered promiscuous mode [ 58.634954][ T7285] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.657116][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.682355][ T7266] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.731987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.740239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.795119][ T7308] chnl_net:caif_netlink_parms(): no params data found [ 58.864084][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.884713][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.929213][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.936393][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.015755][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.083772][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.155707][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.162893][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.225756][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.286946][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.366332][ T7296] team0: Port device team_slave_0 added [ 59.433760][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.457361][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.517492][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.558055][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.601413][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.670060][ T7296] team0: Port device team_slave_1 added [ 59.691835][ T7266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.734924][ T7266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.788022][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.806493][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.825533][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.859288][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.876215][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.940300][ T7266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.969746][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.022529][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.055034][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.069483][ T7308] device bridge_slave_0 entered promiscuous mode [ 60.132506][ T7296] device hsr_slave_0 entered promiscuous mode [ 60.199867][ T7296] device hsr_slave_1 entered promiscuous mode [ 60.255033][ T7296] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.275090][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.282292][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.316035][ T7308] device bridge_slave_1 entered promiscuous mode [ 60.332477][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.405163][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.423859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.445761][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.459837][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.476920][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.578019][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.622679][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.679540][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.686691][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.768106][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.812119][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 18:33:42 executing program 1: unshare(0x2000400) waitid(0x3, 0x0, 0x0, 0x4000000c, 0x0) 18:33:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x22, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f00000000c0)=['!/*ppp1vmnet1wlan1$,cgroupwlan1posix_acl_accesswlan1\x00'], 0x35}) 18:33:42 executing program 5: unshare(0x2000400) waitid(0x3, 0x0, 0x0, 0x4000000c, 0x0) [ 60.875746][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.882864][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.073600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.132025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.262161][ T7308] team0: Port device team_slave_0 added [ 61.297786][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.332291][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.417716][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.496093][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.573917][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.646265][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.725143][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.820296][ T7285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.889088][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.970308][ T7308] team0: Port device team_slave_1 added [ 61.997905][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.029393][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.119739][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.222802][ T7400] IPVS: ftp: loaded support on port[0] = 21 [ 62.305957][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.462372][ T7308] device hsr_slave_0 entered promiscuous mode [ 62.525507][ T7308] device hsr_slave_1 entered promiscuous mode [ 62.565140][ T7308] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.582200][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.737985][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.775107][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.783027][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.018811][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.047607][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.115760][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.123356][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.246000][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.305915][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.343262][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.350396][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.470155][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.540184][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.645210][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.653533][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.722338][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.767910][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.818200][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.867912][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.907600][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.938294][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.978410][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 18:33:45 executing program 1: unshare(0x2000400) waitid(0x3, 0x0, 0x0, 0x4000000c, 0x0) 18:33:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x22, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f00000000c0)=['!/*ppp1vmnet1wlan1$,cgroupwlan1posix_acl_accesswlan1\x00'], 0x35}) [ 64.040955][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.067634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.158694][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.213409][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.302659][ T7308] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.372862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.392402][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:33:45 executing program 1: unshare(0x2000400) waitid(0x3, 0x0, 0x0, 0x4000000c, 0x0) [ 64.479742][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 64.514660][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 18:33:45 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000580)='ip6_vti0\x00') [ 64.555811][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.564376][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.571836][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state 18:33:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4ffd}) [ 64.764014][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.865693][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.874332][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.881498][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.022747][ T2917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.141316][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.166462][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.239100][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.291981][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.416456][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.459377][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.478813][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.531987][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.554399][ T7308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 18:33:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4ffd}) [ 65.596562][ T7308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.642028][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.657806][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.673281][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.768895][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.769206][ T7479] vivid-002: ================= START STATUS ================= [ 65.805013][ T7479] v4l2-ctrls: vivid-002: RDS Tx I/O Mode: Controls [ 65.823310][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.834948][ T7479] v4l2-ctrls: vivid-002: RDS Program ID: 32904 [ 65.842865][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.871813][ T7400] device bridge_slave_0 entered promiscuous mode [ 65.875017][ T7479] v4l2-ctrls: vivid-002: RDS Program Type: 3 [ 65.924996][ T7479] v4l2-ctrls: vivid-002: RDS PS Name: VIVID-TX [ 65.931958][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.960664][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.978228][ T7479] v4l2-ctrls: vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 66.016034][ T7400] device bridge_slave_1 entered promiscuous mode [ 66.026964][ T7479] v4l2-ctrls: vivid-002: RDS Stereo: true [ 66.053034][ T7479] v4l2-ctrls: vivid-002: RDS Artificial Head: false [ 66.064936][ T7479] v4l2-ctrls: vivid-002: RDS Compressed: false [ 66.071418][ T7479] v4l2-ctrls: vivid-002: RDS Dynamic PTY: false [ 66.094651][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.118663][ T7479] v4l2-ctrls: vivid-002: RDS Traffic Announcement: false [ 66.145078][ T7479] v4l2-ctrls: vivid-002: RDS Traffic Program: true [ 66.169002][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.192377][ T7479] v4l2-ctrls: vivid-002: RDS Music: true [ 66.222610][ T7479] vivid-002: ================== END STATUS ================== [ 66.253712][ T7400] team0: Port device team_slave_0 added [ 66.286846][ T7400] team0: Port device team_slave_1 added [ 66.398466][ T7400] device hsr_slave_0 entered promiscuous mode [ 66.415322][ T7400] device hsr_slave_1 entered promiscuous mode [ 66.454935][ T7400] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.778810][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.850266][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.863538][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.912247][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.932704][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.951057][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.995539][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.002609][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.074193][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.082780][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.125774][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.166016][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.173103][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.210793][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.226598][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.261187][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.286471][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.316025][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.356433][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.369625][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.391743][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.469560][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 18:33:49 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 67.962285][ T7525] vivid-002: ================= START STATUS ================= [ 67.993414][ T7514] ================================================================== [ 67.998899][ T7525] v4l2-ctrls: vivid-002: RDS Tx I/O Mode: Controls [ 68.001797][ T7514] BUG: KCSAN: data-race in task_dump_owner / task_dump_owner [ 68.001815][ T7514] [ 68.018228][ T7514] write to 0xffff8881244b8050 of 4 bytes by task 7507 on cpu 1: [ 68.025882][ T7514] task_dump_owner+0xe6/0x260 [ 68.030556][ T7514] pid_update_inode+0x3c/0x70 [ 68.035404][ T7514] pid_revalidate+0x91/0xd0 [ 68.039928][ T7514] lookup_fast+0x6f2/0x700 [ 68.044350][ T7514] walk_component+0x6d/0xe80 [ 68.047467][ T7525] v4l2-ctrls: vivid-002: RDS Program ID: 32904 [ 68.048949][ T7514] link_path_walk.part.0+0x5d3/0xa90 [ 68.048963][ T7514] path_openat+0x14f/0x36e0 [ 68.048974][ T7514] do_filp_open+0x11e/0x1b0 [ 68.048985][ T7514] do_sys_open+0x3b3/0x4f0 [ 68.049009][ T7514] __x64_sys_open+0x55/0x70 [ 68.078926][ T7514] do_syscall_64+0xcc/0x370 [ 68.083432][ T7514] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.085022][ T7525] v4l2-ctrls: vivid-002: RDS Program Type: 3 [ 68.089321][ T7514] [ 68.089335][ T7514] write to 0xffff8881244b8050 of 4 bytes by task 7514 on cpu 0: [ 68.089351][ T7514] task_dump_owner+0xe6/0x260 [ 68.089362][ T7514] pid_update_inode+0x3c/0x70 [ 68.089373][ T7514] pid_revalidate+0x91/0xd0 [ 68.089388][ T7514] lookup_fast+0x6f2/0x700 [ 68.089400][ T7514] walk_component+0x6d/0xe80 [ 68.089426][ T7514] link_path_walk.part.0+0x5d3/0xa90 [ 68.133989][ T7514] path_openat+0x14f/0x36e0 [ 68.138496][ T7514] do_filp_open+0x11e/0x1b0 [ 68.139756][ T7525] v4l2-ctrls: vivid-002: RDS PS Name: VIVID-TX [ 68.143127][ T7514] do_sys_open+0x3b3/0x4f0 [ 68.143140][ T7514] __x64_sys_open+0x55/0x70 [ 68.143154][ T7514] do_syscall_64+0xcc/0x370 [ 68.143180][ T7514] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.168763][ T7514] [ 68.171080][ T7514] Reported by Kernel Concurrency Sanitizer on: [ 68.177330][ T7514] CPU: 0 PID: 7514 Comm: ps Not tainted 5.4.0-rc3+ #0 [ 68.184412][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.186133][ T7525] v4l2-ctrls: vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 68.194685][ T7514] ================================================================== [ 68.194694][ T7514] Kernel panic - not syncing: panic_on_warn set ... [ 68.194710][ T7514] CPU: 0 PID: 7514 Comm: ps Not tainted 5.4.0-rc3+ #0 [ 68.194717][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.194720][ T7514] Call Trace: [ 68.194744][ T7514] dump_stack+0xf5/0x159 [ 68.194777][ T7514] panic+0x210/0x640 [ 68.249089][ T7514] ? do_sys_open+0x3b3/0x4f0 [ 68.253919][ T7514] ? vprintk_func+0x8d/0x140 [ 68.259482][ T7514] kcsan_report.cold+0xc/0x10 [ 68.264179][ T7514] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 68.269769][ T7514] ? __rcu_read_unlock+0x66/0x3c0 [ 68.275150][ T7514] __tsan_write4+0x32/0x40 [ 68.279606][ T7514] task_dump_owner+0xe6/0x260 [ 68.284295][ T7514] ? __rcu_read_unlock+0x66/0x3c0 [ 68.289540][ T7514] pid_update_inode+0x3c/0x70 [ 68.294228][ T7514] pid_revalidate+0x91/0xd0 [ 68.298745][ T7514] lookup_fast+0x6f2/0x700 [ 68.303177][ T7514] walk_component+0x6d/0xe80 [ 68.307773][ T7514] ? __tsan_read8+0x2c/0x30 [ 68.312284][ T7514] ? security_inode_permission+0xa5/0xc0 [ 68.314946][ T7525] v4l2-ctrls: vivid-002: RDS Stereo: true [ 68.317939][ T7514] link_path_walk.part.0+0x5d3/0xa90 [ 68.317969][ T7514] path_openat+0x14f/0x36e0 [ 68.333471][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.339106][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.344872][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.350505][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.356148][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.361801][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.367437][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.373070][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.375055][ T7525] v4l2-ctrls: vivid-002: RDS Artificial Head: false [ 68.378719][ T7514] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 68.378745][ T7514] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 68.397003][ T7514] do_filp_open+0x11e/0x1b0 [ 68.401512][ T7514] ? __alloc_fd+0x316/0x4c0 [ 68.406043][ T7514] do_sys_open+0x3b3/0x4f0 [ 68.410458][ T7514] __x64_sys_open+0x55/0x70 [ 68.415063][ T7514] do_syscall_64+0xcc/0x370 [ 68.419576][ T7514] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.424955][ T7525] v4l2-ctrls: vivid-002: RDS Compressed: false [ 68.425473][ T7514] RIP: 0033:0x7f9e4190c120 [ 68.436117][ T7514] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 68.455886][ T7514] RSP: 002b:00007fff90f8a588 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 68.462135][ T7525] v4l2-ctrls: vivid-002: RDS Dynamic PTY: false [ 68.464295][ T7514] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f9e4190c120 [ 68.464304][ T7514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f9e41ddad00 [ 68.464312][ T7514] RBP: 0000000000001000 R08: 0000000000000000 R09: 00007f9e41bd457b [ 68.464333][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e41dd9d00 [ 68.502505][ T7514] R13: 0000000000000020 R14: 0000000000000005 R15: 0000000000000000 [ 68.512574][ T7514] Kernel Offset: disabled [ 68.516921][ T7514] Rebooting in 86400 seconds..