[ 52.779497][ T26] audit: type=1800 audit(1573062492.093:28): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 53.461555][ T7947] sshd (7947) used greatest stack depth: 10128 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.822412][ T26] audit: type=1800 audit(1573062493.253:29): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 53.851752][ T26] audit: type=1800 audit(1573062493.253:30): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.122' (ECDSA) to the list of known hosts. 2019/11/06 17:48:23 fuzzer started 2019/11/06 17:48:25 dialing manager at 10.128.0.105:44951 2019/11/06 17:48:31 syscalls: 2553 2019/11/06 17:48:31 code coverage: enabled 2019/11/06 17:48:31 comparison tracing: enabled 2019/11/06 17:48:31 extra coverage: extra coverage is not supported by the kernel 2019/11/06 17:48:31 setuid sandbox: enabled 2019/11/06 17:48:31 namespace sandbox: enabled 2019/11/06 17:48:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/06 17:48:31 fault injection: enabled 2019/11/06 17:48:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/06 17:48:31 net packet injection: enabled 2019/11/06 17:48:31 net device setup: enabled 2019/11/06 17:48:31 concurrency sanitizer: enabled 2019/11/06 17:48:31 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 77.772524][ T8052] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/06 17:48:41 adding functions to KCSAN blacklist: 'blk_mq_dispatch_rq_list' 'ktime_get_real_seconds' 'taskstats_exit' 'mod_timer' 'tick_do_update_jiffies64' 'do_nanosleep' 'audit_log_start' 'osq_lock' 'tcp_add_backlog' 'process_srcu' 'fasync_remove_entry' 'pid_update_inode' 'wbt_done' 'xas_find_marked' 'inet_putpeer' 'find_next_bit' 'init_peercred' 'queue_access_lock' 'pipe_poll' '__skb_try_recv_from_queue' 'generic_fillattr' '__ext4_new_inode' 'ep_poll' 'ext4_mark_iloc_dirty' '__hrtimer_run_queues' 'tomoyo_supervisor' 'ext4_nonda_switch' 'poll_schedule_timeout' 'xas_clear_mark' 'blk_mq_run_hw_queue' 'dd_has_work' 'sit_tunnel_xmit' 'add_timer' 'ext4_free_inode' 'generic_write_end' 'tick_nohz_next_event' 'vm_area_dup' 'run_timer_softirq' 'rcu_gp_fqs_check_wake' 'tick_sched_do_timer' 'rcu_gp_fqs_loop' 'snapshot_refaults' 'snd_seq_check_queue' 'd_lru_add' 'blk_mq_get_request' 'tick_nohz_idle_stop_tick' 'find_get_pages_range_tag' 'echo_char' 'blk_mq_sched_dispatch_requests' 'lruvec_lru_size' 'common_perm_cond' 'do_exit' 'timer_clear_idle' 'generic_permission' 'ktime_get_seconds' 'p9_poll_workfn' 'ext4_free_inodes_count' 'do_syslog' 17:50:40 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1, 0x1}, 0x3c) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000140)='./file0/file0\x00', r0}, 0x10) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 17:50:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000026000befffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ffffff00000000"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 201.509172][ T8056] IPVS: ftp: loaded support on port[0] = 21 [ 201.602360][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 201.672752][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.679884][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.700493][ T8056] device bridge_slave_0 entered promiscuous mode [ 201.707920][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.730987][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.738855][ T8056] device bridge_slave_1 entered promiscuous mode [ 201.766292][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 17:50:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 201.777411][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.798660][ T8056] team0: Port device team_slave_0 added [ 201.805508][ T8056] team0: Port device team_slave_1 added [ 201.825876][ T8059] IPVS: ftp: loaded support on port[0] = 21 [ 201.922933][ T8056] device hsr_slave_0 entered promiscuous mode [ 201.960799][ T8056] device hsr_slave_1 entered promiscuous mode [ 202.036404][ T8061] IPVS: ftp: loaded support on port[0] = 21 17:50:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x28460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) [ 202.127171][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.134266][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.141588][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.148724][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.493972][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.502000][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 202.533165][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 202.618129][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.642503][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.672201][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.704230][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 202.747032][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.768041][ T8088] IPVS: ftp: loaded support on port[0] = 21 [ 202.792700][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.799813][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.831349][ T8059] device bridge_slave_0 entered promiscuous mode 17:50:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') fchdir(r1) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 202.870569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.879292][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.905983][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.913152][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.981059][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.989793][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.040844][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.047925][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.091335][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.100328][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.161644][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.190691][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.216381][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.240457][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.248215][ T8059] device bridge_slave_1 entered promiscuous mode [ 203.285035][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.300506][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.308344][ T8061] device bridge_slave_0 entered promiscuous mode [ 203.331871][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.340038][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.361256][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.375983][ T8056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.410715][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.460663][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.467722][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.478012][ T8092] IPVS: ftp: loaded support on port[0] = 21 [ 203.495346][ T8061] device bridge_slave_1 entered promiscuous mode [ 203.557095][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.584666][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.604317][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.631601][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.675749][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.724936][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 17:50:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='stat\x00\x00\xfe') preadv(r0, &(0x7f00000017c0), 0x332, 0x0) [ 203.771310][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.783135][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.805274][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.881275][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.943746][ T8059] team0: Port device team_slave_0 added [ 203.987767][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.007475][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.032667][ T8059] team0: Port device team_slave_1 added [ 204.039155][ T8061] team0: Port device team_slave_0 added [ 204.070231][ T8061] team0: Port device team_slave_1 added [ 204.148560][ T8088] chnl_net:caif_netlink_parms(): no params data found [ 204.194492][ T8061] device hsr_slave_0 entered promiscuous mode [ 204.251276][ T8061] device hsr_slave_1 entered promiscuous mode [ 204.310523][ T8061] debugfs: Directory 'hsr0' with parent '/' already present! [ 204.362506][ T8059] device hsr_slave_0 entered promiscuous mode [ 204.400935][ T8059] device hsr_slave_1 entered promiscuous mode [ 204.460539][ T8059] debugfs: Directory 'hsr0' with parent '/' already present! [ 204.547289][ T8107] IPVS: ftp: loaded support on port[0] = 21 [ 204.584084][ T8092] chnl_net:caif_netlink_parms(): no params data found [ 204.616256][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.660677][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.709610][ T8088] device bridge_slave_0 entered promiscuous mode 17:50:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1, 0x1}, 0x3c) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000140)='./file0/file0\x00', r0}, 0x10) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 204.823354][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.854026][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.924874][ T8088] device bridge_slave_1 entered promiscuous mode [ 205.042124][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.081073][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.119107][ T8092] device bridge_slave_0 entered promiscuous mode [ 205.209418][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.276950][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 17:50:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1, 0x1}, 0x3c) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000140)='./file0/file0\x00', r0}, 0x10) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 205.335185][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.360522][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.368462][ T8092] device bridge_slave_1 entered promiscuous mode [ 205.477559][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.564968][ T8088] team0: Port device team_slave_0 added [ 205.626308][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.676912][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.730161][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 17:50:45 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1, 0x1}, 0x3c) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000140)='./file0/file0\x00', r0}, 0x10) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 205.795112][ T8088] team0: Port device team_slave_1 added [ 205.922333][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.951155][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.989474][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.031525][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.039563][ T8092] team0: Port device team_slave_0 added [ 206.059749][ T8092] team0: Port device team_slave_1 added [ 206.114516][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.131051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.202967][ T8088] device hsr_slave_0 entered promiscuous mode 17:50:45 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 206.244301][ T8088] device hsr_slave_1 entered promiscuous mode [ 206.270536][ T8088] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.288462][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.314881][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.380763][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.387946][ T8089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.470620][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.479353][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.540858][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.548041][ T8089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.615515][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 17:50:46 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 206.661648][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.670277][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.770668][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.777732][ T8089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.873198][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.924275][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 17:50:46 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 206.981938][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.989012][ T8089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.071015][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.080070][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.165044][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.223464][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.266013][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 17:50:46 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 207.313391][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.360373][ T8059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.450457][ T8059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.544383][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.571791][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.579887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.611825][ T8132] ================================================================== [ 207.619973][ T8132] BUG: KCSAN: data-race in task_dump_owner / task_dump_owner [ 207.627347][ T8132] [ 207.629684][ T8132] write to 0xffff888125f27090 of 4 bytes by task 8138 on cpu 1: [ 207.637664][ T8132] task_dump_owner+0xe6/0x260 [ 207.642359][ T8132] pid_update_inode+0x3c/0x70 [ 207.642864][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.647040][ T8132] pid_revalidate+0x91/0xd0 [ 207.647072][ T8132] lookup_fast+0x6f2/0x700 [ 207.663824][ T8132] walk_component+0x6d/0xe70 [ 207.668418][ T8132] link_path_walk.part.0+0x5d3/0xa90 [ 207.673712][ T8132] path_openat+0x14f/0x36e0 [ 207.678218][ T8132] do_filp_open+0x11e/0x1b0 [ 207.682730][ T8132] do_sys_open+0x3b3/0x4f0 [ 207.687146][ T8132] __x64_sys_open+0x55/0x70 [ 207.691661][ T8132] do_syscall_64+0xcc/0x370 [ 207.696178][ T8132] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 207.702056][ T8132] [ 207.704398][ T8132] write to 0xffff888125f27090 of 4 bytes by task 8132 on cpu 0: [ 207.706592][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.712034][ T8132] task_dump_owner+0xe6/0x260 [ 207.712054][ T8132] pid_update_inode+0x3c/0x70 [ 207.712081][ T8132] pid_revalidate+0x91/0xd0 [ 207.733759][ T8132] lookup_fast+0x6f2/0x700 [ 207.738187][ T8132] walk_component+0x6d/0xe70 [ 207.742788][ T8132] path_lookupat.isra.0+0x13a/0x5a0 [ 207.747990][ T8132] filename_lookup+0x145/0x2b0 [ 207.752753][ T8132] user_path_at_empty+0x4c/0x70 [ 207.757602][ T8132] vfs_statx+0xd9/0x190 [ 207.761216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.761771][ T8132] __do_sys_newstat+0x51/0xb0 [ 207.770377][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.774229][ T8132] __x64_sys_newstat+0x3a/0x50 [ 207.774251][ T8132] do_syscall_64+0xcc/0x370 [ 207.774273][ T8132] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 207.774288][ T8132] [ 207.799626][ T8132] Reported by Kernel Concurrency Sanitizer on: [ 207.805784][ T8132] CPU: 0 PID: 8132 Comm: ps Not tainted 5.4.0-rc6+ #0 [ 207.812542][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.822596][ T8132] ================================================================== [ 207.830659][ T8132] Kernel panic - not syncing: panic_on_warn set ... [ 207.837250][ T8132] CPU: 0 PID: 8132 Comm: ps Not tainted 5.4.0-rc6+ #0 [ 207.844012][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.854071][ T8132] Call Trace: [ 207.857380][ T8132] dump_stack+0xf5/0x159 [ 207.858653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.861628][ T8132] panic+0x210/0x640 [ 207.861654][ T8132] ? vprintk_func+0x8d/0x140 [ 207.861682][ T8132] kcsan_report.cold+0xc/0xe [ 207.861716][ T8132] kcsan_setup_watchpoint+0x3fe/0x410 [ 207.887967][ T8132] __tsan_unaligned_write4+0x143/0x1f0 [ 207.893433][ T8132] task_dump_owner+0xe6/0x260 [ 207.898113][ T8132] ? __rcu_read_unlock+0x66/0x3c0 [ 207.903172][ T8132] pid_update_inode+0x3c/0x70 [ 207.907855][ T8132] pid_revalidate+0x91/0xd0 [ 207.911523][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.912373][ T8132] lookup_fast+0x6f2/0x700 [ 207.924571][ T8132] walk_component+0x6d/0xe70 [ 207.929173][ T8132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 207.935414][ T8132] ? link_path_walk.part.0+0x77f/0xa90 [ 207.940895][ T8132] path_lookupat.isra.0+0x13a/0x5a0 [ 207.946114][ T8132] ? __read_once_size.constprop.0+0x12/0x20 [ 207.952019][ T8132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 207.958277][ T8132] filename_lookup+0x145/0x2b0 [ 207.960712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.963064][ T8132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 207.963094][ T8132] ? strncpy_from_user+0x219/0x2b0 [ 207.982169][ T8132] user_path_at_empty+0x4c/0x70 [ 207.987035][ T8132] vfs_statx+0xd9/0x190 [ 207.991199][ T8132] __do_sys_newstat+0x51/0xb0 [ 207.991530][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.995904][ T8132] ? mem_cgroup_handle_over_high+0x50/0x180 [ 207.995941][ T8132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 208.015846][ T8132] ? debug_smp_processor_id+0x4c/0x172 [ 208.021317][ T8132] __x64_sys_newstat+0x3a/0x50 [ 208.026098][ T8132] do_syscall_64+0xcc/0x370 [ 208.030619][ T8132] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 208.036516][ T8132] RIP: 0033:0x7f57f83bec65 [ 208.040947][ T8132] Code: 00 00 00 e8 5d 01 00 00 48 83 c4 18 c3 90 90 90 90 90 90 90 90 83 ff 01 48 89 f0 77 18 48 89 c7 48 89 d6 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 17 f3 c3 90 48 8b 05 a1 51 2b 00 64 c7 00 16 [ 208.060569][ T8132] RSP: 002b:00007ffd0c511ff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 208.061140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.068981][ T8132] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f57f83bec65 [ 208.069006][ T8132] RDX: 00007f57f888cc60 RSI: 00007f57f888cc60 RDI: 0000000001a70220 [ 208.092727][ T8132] RBP: 0000000000020062 R08: 00007f57f86745a0 R09: 0000000000000000 [ 208.100714][ T8132] R10: 1999999999999999 R11: 0000000000000246 R12: 0000000001a70220 [ 208.108697][ T8132] R13: 0000000001a701c0 R14: 0000000000000005 R15: 0000000000000000 [ 208.110089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.118089][ T8132] Kernel Offset: disabled [ 208.130214][ T8132] Rebooting in 86400 seconds..