[ 52.090690][ T26] audit: type=1800 audit(1573036132.129:26): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 52.129677][ T26] audit: type=1800 audit(1573036132.129:27): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 52.171118][ T26] audit: type=1800 audit(1573036132.129:28): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.879959][ T26] audit: type=1800 audit(1573036132.939:29): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. 2019/11/06 10:29:02 fuzzer started 2019/11/06 10:29:04 dialing manager at 10.128.0.105:39303 2019/11/06 10:29:04 syscalls: 2553 2019/11/06 10:29:04 code coverage: enabled 2019/11/06 10:29:04 comparison tracing: enabled 2019/11/06 10:29:04 extra coverage: extra coverage is not supported by the kernel 2019/11/06 10:29:04 setuid sandbox: enabled 2019/11/06 10:29:04 namespace sandbox: enabled 2019/11/06 10:29:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/06 10:29:04 fault injection: enabled 2019/11/06 10:29:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/06 10:29:04 net packet injection: enabled 2019/11/06 10:29:04 net device setup: enabled 2019/11/06 10:29:04 concurrency sanitizer: enabled 2019/11/06 10:29:04 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 68.305405][ T8073] KCSAN: could not find function: 'calc_wb_limits' [ 69.759892][ T8073] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/06 10:29:17 adding functions to KCSAN blacklist: 'xas_clear_mark' 'pipe_poll' 'hrtimer_wakeup' 'tick_do_update_jiffies64' 'tomoyo_supervisor' 'process_srcu' 'alloc_empty_file' 'generic_file_read_iter' 'ext4_da_write_end' 'ktime_get_real_seconds' 'sit_tunnel_xmit' '__splice_from_pipe' 'ext4_free_inodes_count' 'kauditd_thread' '__alloc_file' 'pid_update_inode' 'fanotify_handle_event' 'tick_nohz_next_event' 'rcu_gp_fqs_check_wake' 'blk_mq_dispatch_rq_list' 'lruvec_lru_size' 'blk_mq_run_hw_queue' 'calc_wb_limits' 'kvm_arch_vcpu_load' 'generic_permission' 'taskstats_exit' 'p9_poll_workfn' 'add_timer' 'ext4_free_inode' 'find_get_pages_range_tag' 'poll_schedule_timeout' 'do_syslog' 'mm_update_next_owner' 'blk_stat_add' 'tcp_add_backlog' 'ep_poll' 'do_exit' 'timer_clear_idle' 'task_dump_owner' 'pcpu_alloc' 'copy_process' 'wbt_issue' '__ext4_new_inode' 'dd_has_work' 'atime_needs_update' 'do_splice' 'mod_timer' 'do_nanosleep' 'tick_sched_do_timer' 'blk_mq_sched_dispatch_requests' 'inet_putpeer' 'xas_find_marked' '__dev_queue_xmit' 'echo_char' '__hrtimer_run_queues' 'kcm_rfree' 'pipe_wait' 'page_counter_try_charge' 'ktime_get_with_offset' 'ext4_mb_good_group' 'snd_seq_prioq_cell_out' 'generic_write_end' 'find_next_bit' '__snd_rawmidi_transmit_ack' 'kvm_mmu_notifier_invalidate_range_end' 'ext4_mark_iloc_dirty' 'iput' 'wbt_done' 'generic_fillattr' 'ktime_get_seconds' '__perf_event_overflow' '__delete_from_page_cache' 'vm_area_dup' 'ext4_has_free_clusters' 'get_wchan' 'osq_lock' 'list_lru_count_one' 'rcu_gp_fqs_loop' 'run_timer_softirq' 'tick_nohz_idle_stop_tick' 'audit_log_start' 'ext4_nonda_switch' 'mem_cgroup_select_victim_node' 'enqueue_timer' 'blk_mq_get_request' 10:33:21 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000000085a8a147c9699c47b996000dbc30c69ee922fc04644a2ea97d1eb4ad56840600c97a7bdac498cdc78d419badc9635130e640d3b8e13f0b6170534f2976b234f5e97bdb7edd63e42a8c4a85bfcc887c09076c6d2301003a2ffc563362de604165444557b17702ad48e9a7187ff261d30f7f946c95e9ec8566c26c2c60be28ef3f4935c9a5"], 0x68) 10:33:21 executing program 1: io_setup(0x1ff, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) [ 321.614494][ T8076] IPVS: ftp: loaded support on port[0] = 21 [ 321.748043][ T8076] chnl_net:caif_netlink_parms(): no params data found [ 321.781041][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.785121][ T8079] IPVS: ftp: loaded support on port[0] = 21 [ 321.788399][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.803465][ T8076] device bridge_slave_0 entered promiscuous mode [ 321.811383][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.818518][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.827415][ T8076] device bridge_slave_1 entered promiscuous mode [ 321.864461][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.877493][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:33:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) [ 321.943748][ T8076] team0: Port device team_slave_0 added [ 321.950612][ T8076] team0: Port device team_slave_1 added [ 321.975379][ T8079] chnl_net:caif_netlink_parms(): no params data found [ 322.043095][ T8076] device hsr_slave_0 entered promiscuous mode [ 322.091077][ T8076] device hsr_slave_1 entered promiscuous mode [ 322.191451][ T8084] IPVS: ftp: loaded support on port[0] = 21 10:33:22 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000280)={0x60, 0x0, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4}}}, 0x60) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) [ 322.253474][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.282072][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.348563][ T8079] device bridge_slave_0 entered promiscuous mode [ 322.402397][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.409549][ T8076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.416894][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.423968][ T8076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.541051][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.548164][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.592755][ T8079] device bridge_slave_1 entered promiscuous mode [ 322.683445][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.733945][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.806748][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.816221][ T8111] IPVS: ftp: loaded support on port[0] = 21 [ 322.827064][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.945097][ T8079] team0: Port device team_slave_0 added [ 323.004907][ T8079] team0: Port device team_slave_1 added [ 323.035799][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0 10:33:23 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000280)='f', 0x1, r0) [ 323.088321][ T8084] chnl_net:caif_netlink_parms(): no params data found [ 323.145048][ T8079] device hsr_slave_0 entered promiscuous mode [ 323.202587][ T8079] device hsr_slave_1 entered promiscuous mode [ 323.250706][ T8079] debugfs: Directory 'hsr0' with parent '/' already present! [ 323.296306][ T8076] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.366609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.383456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.485795][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.523235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.564796][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.572001][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.591344][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.611147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.628752][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.635903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.671316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.691595][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.723625][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.751670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.791785][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 323.856087][ T8076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.910666][ T8076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.978810][ T8122] IPVS: ftp: loaded support on port[0] = 21 [ 323.988633][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.012180][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.086517][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 10:33:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) [ 324.144316][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.183840][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.244860][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.291538][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.408961][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.469488][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.501671][ T8111] device bridge_slave_0 entered promiscuous mode [ 324.521005][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.528073][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.561437][ T8084] device bridge_slave_0 entered promiscuous mode [ 324.576474][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.600671][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.608834][ T8084] device bridge_slave_1 entered promiscuous mode [ 324.629506][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.653917][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.673638][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.736712][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.750677][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.758587][ T8111] device bridge_slave_1 entered promiscuous mode [ 324.793773][ T8076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.825253][ T8148] IPVS: ftp: loaded support on port[0] = 21 [ 324.852577][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.941271][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.954966][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.027487][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.080043][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.137020][ T8084] team0: Port device team_slave_0 added [ 325.167724][ T8084] team0: Port device team_slave_1 added [ 325.204734][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.216845][ T8111] team0: Port device team_slave_0 added [ 325.224338][ T8111] team0: Port device team_slave_1 added [ 325.248260][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.261232][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.385231][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.424021][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.451154][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.458258][ T8080] bridge0: port 1(bridge_slave_0) entered forwarding state 10:33:25 executing program 0: [ 325.505935][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.561605][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.574064][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.581189][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state 10:33:25 executing program 0: [ 325.621213][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 10:33:25 executing program 0: [ 325.703385][ T8084] device hsr_slave_0 entered promiscuous mode 10:33:25 executing program 0: [ 325.781074][ T8084] device hsr_slave_1 entered promiscuous mode [ 325.810704][ T8084] debugfs: Directory 'hsr0' with parent '/' already present! 10:33:25 executing program 0: [ 325.892992][ T8111] device hsr_slave_0 entered promiscuous mode [ 325.931054][ T8111] device hsr_slave_1 entered promiscuous mode 10:33:26 executing program 0: [ 325.980694][ T8111] debugfs: Directory 'hsr0' with parent '/' already present! [ 325.999319][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.014564][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.037873][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.061370][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 10:33:26 executing program 0: [ 326.102866][ T8122] chnl_net:caif_netlink_parms(): no params data found [ 326.113185][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.131342][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.140116][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.161805][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 326.185032][ T8079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.264965][ T8079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.341234][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.349826][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.398498][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.441382][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.671905][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.679643][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.750826][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.761819][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.818083][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.841405][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.875283][ T8148] device bridge_slave_0 entered promiscuous mode [ 326.941713][ T8122] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.948884][ T8122] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.995796][ T8122] device bridge_slave_0 entered promiscuous mode [ 327.040850][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.047921][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.121824][ T8148] device bridge_slave_1 entered promiscuous mode [ 327.188320][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.240395][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.281141][ T8122] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.288202][ T8122] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.311506][ T8122] device bridge_slave_1 entered promiscuous mode [ 327.368789][ T8084] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.416994][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.441407][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.451694][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.504870][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.541331][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.647597][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.712337][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.769400][ T8084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.860658][ T8084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.929842][ T8111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.991199][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.052271][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.078692][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.133119][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.140218][ T8112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.214864][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 10:33:28 executing program 0: [ 328.259186][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.353324][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.360466][ T8112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.454201][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.514240][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.581076][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.589773][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.671135][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.678214][ T8112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.731873][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.771275][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.824905][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.832023][ T8112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.905272][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.931875][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.985109][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.045967][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.065061][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.125216][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.171729][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.225046][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.251672][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.304979][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.333248][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.382651][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.414018][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.435563][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.466795][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.476917][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.497806][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.515075][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.529772][ T8122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.552450][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.560450][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.569112][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.577469][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.585680][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.593811][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.602859][ T8122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.624187][ T8148] team0: Port device team_slave_0 added [ 329.631547][ T8148] team0: Port device team_slave_1 added [ 329.643351][ T8122] team0: Port device team_slave_0 added [ 329.713060][ T8148] device hsr_slave_0 entered promiscuous mode [ 329.771110][ T8148] device hsr_slave_1 entered promiscuous mode [ 329.810754][ T8148] debugfs: Directory 'hsr0' with parent '/' already present! [ 329.828936][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.836565][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.844709][ T8122] team0: Port device team_slave_1 added [ 329.854869][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.872320][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.880294][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.904215][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.003907][ T8122] device hsr_slave_0 entered promiscuous mode [ 330.041021][ T8122] device hsr_slave_1 entered promiscuous mode [ 330.082087][ T8122] debugfs: Directory 'hsr0' with parent '/' already present! [ 330.355865][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.439880][ C0] ================================================================== [ 330.448295][ C0] BUG: KCSAN: data-race in queue_access_lock / snd_seq_check_queue [ 330.456221][ C0] [ 330.458594][ C0] write to 0xffff88812103fde4 of 1 bytes by task 8290 on cpu 1: [ 330.466222][ C0] queue_access_lock+0x89/0xc0 [ 330.470983][ C0] snd_seq_control_queue+0x77/0x350 [ 330.476179][ C0] event_input_timer+0x2f/0x50 [ 330.480966][ C0] snd_seq_deliver_single_event.constprop.0+0x3e8/0x4d0 [ 330.487955][ C0] snd_seq_deliver_event+0x2e9/0x4c0 [ 330.493275][ C0] snd_seq_dispatch_event+0xa1/0x340 [ 330.498559][ C0] snd_seq_check_queue+0xeb/0x200 [ 330.503991][ C0] snd_seq_enqueue_event+0x163/0x2b0 [ 330.509313][ C0] snd_seq_client_enqueue_event.constprop.0+0x187/0x2a0 [ 330.516247][ C0] snd_seq_write+0x23f/0x4d0 [ 330.520841][ C0] __vfs_write+0x67/0xc0 [ 330.525083][ C0] vfs_write+0x18a/0x390 [ 330.529348][ C0] ksys_write+0x17b/0x1b0 [ 330.533680][ C0] __x64_sys_write+0x4c/0x60 [ 330.538280][ C0] do_syscall_64+0xcc/0x370 [ 330.542782][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 330.548659][ C0] [ 330.550993][ C0] write to 0xffff88812103fde4 of 1 bytes by interrupt on cpu 0: [ 330.559665][ C0] snd_seq_check_queue+0xfb/0x200 [ 330.564693][ C0] snd_seq_timer_interrupt+0x243/0x280 [ 330.570152][ C0] snd_timer_process_callbacks+0x1e4/0x220 [ 330.575956][ C0] snd_timer_interrupt+0x483/0x930 [ 330.581068][ C0] snd_hrtimer_callback+0x18f/0x260 [ 330.586386][ C0] __hrtimer_run_queues+0x274/0x5f0 [ 330.591616][ C0] hrtimer_interrupt+0x22a/0x480 [ 330.596584][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 330.602044][ C0] apic_timer_interrupt+0xf/0x20 [ 330.606981][ C0] __tsan_read8+0x57/0x1f0 [ 330.611396][ C0] cfg80211_netdev_notifier_call+0x3f/0xbc7 [ 330.617290][ C0] notifier_call_chain+0xd7/0x160 [ 330.622354][ C0] raw_notifier_call_chain+0x37/0x50 [ 330.627669][ C0] call_netdevice_notifiers_info+0x48/0xc0 [ 330.633517][ C0] __dev_open+0xbc/0x2a0 [ 330.637786][ C0] __dev_change_flags+0x37f/0x4c0 [ 330.642809][ C0] dev_change_flags+0x6c/0xe0 [ 330.647482][ C0] do_setlink+0x626/0x1e30 [ 330.651897][ C0] __rtnl_newlink+0x93e/0x1010 [ 330.656741][ C0] rtnl_newlink+0x63/0x90 [ 330.661082][ C0] rtnetlink_rcv_msg+0x1d3/0x500 [ 330.666023][ C0] netlink_rcv_skb+0xb0/0x260 [ 330.670729][ C0] rtnetlink_rcv+0x26/0x30 [ 330.675145][ C0] netlink_unicast+0x354/0x430 [ 330.679909][ C0] netlink_sendmsg+0x456/0x770 [ 330.684675][ C0] sock_sendmsg+0x9f/0xc0 [ 330.689006][ C0] __sys_sendto+0x21f/0x320 [ 330.694915][ C0] __x64_sys_sendto+0x89/0xb0 [ 330.699606][ C0] do_syscall_64+0xcc/0x370 [ 330.704332][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 330.710375][ C0] [ 330.712703][ C0] Reported by Kernel Concurrency Sanitizer on: [ 330.718876][ C0] CPU: 0 PID: 8122 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 330.726694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.736859][ C0] ================================================================== [ 330.745273][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 330.751860][ C0] CPU: 0 PID: 8122 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 330.759654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.769701][ C0] Call Trace: [ 330.775260][ C0] [ 330.778124][ C0] dump_stack+0xf5/0x159 [ 330.782454][ C0] panic+0x210/0x640 [ 330.786443][ C0] ? vprintk_func+0x8d/0x140 [ 330.791039][ C0] kcsan_report.cold+0xc/0xe [ 330.795637][ C0] kcsan_setup_watchpoint+0x3fe/0x410 [ 330.801048][ C0] __tsan_unaligned_write1+0x13d/0x1e0 [ 330.806511][ C0] snd_seq_check_queue+0xfb/0x200 [ 330.811715][ C0] snd_seq_timer_interrupt+0x243/0x280 [ 330.817224][ C0] ? snd_seq_timer_set_tick_resolution+0x170/0x170 [ 330.823732][ C0] snd_timer_process_callbacks+0x1e4/0x220 [ 330.830503][ C0] snd_timer_interrupt+0x483/0x930 [ 330.836579][ C0] ? __read_once_size+0x5a/0xe0 [ 330.841831][ C0] snd_hrtimer_callback+0x18f/0x260 [ 330.847359][ C0] __hrtimer_run_queues+0x274/0x5f0 [ 330.852568][ C0] ? snd_hrtimer_close+0xc0/0xc0 [ 330.857509][ C0] hrtimer_interrupt+0x22a/0x480 [ 330.862631][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 330.868098][ C0] apic_timer_interrupt+0xf/0x20 [ 330.873056][ C0] [ 330.876000][ C0] RIP: 0010:__tsan_read8+0x57/0x1f0 [ 330.881210][ C0] Code: 8d 42 01 48 89 c2 49 0f af c1 89 d3 48 c1 e8 21 8d 04 40 29 c3 8d 44 1e ff 41 89 c3 41 c1 fb 1f 41 c1 eb 1a 44 01 d8 83 e0 3f <44> 29 d8 48 98 4c 8d 24 c5 20 6c 04 86 48 8b 04 c5 20 6c 04 86 48 [ 330.900902][ C0] RSP: 0018:ffffc900017ef2b0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 330.909342][ C0] RAX: 000000000000002f RBX: 0000000000000001 RCX: 0000ffffffffffff [ 330.917347][ C0] RDX: 0000000000000001 RSI: 000000000000002f RDI: ffffc900017ef4c0 [ 330.925319][ C0] RBP: ffffc900017ef2c0 R08: 0000c900017ef4c0 R09: 00000000aaaaaaab [ 330.933327][ C0] R10: 0000c900017ef4c7 R11: 0000000000000000 R12: ffffc900017ef4c0 [ 330.941299][ C0] R13: 0000000000000000 R14: ffffffff85c31c00 R15: 0000000000000000 [ 330.949295][ C0] cfg80211_netdev_notifier_call+0x3f/0xbc7 [ 330.955998][ C0] ? node_free_rcu+0x40/0x40 [ 330.960874][ C0] ? fib6_clean_tree+0xf4/0x120 [ 330.965731][ C0] ? mutex_is_locked+0x48/0x70 [ 330.970586][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 330.976482][ C0] ? inetdev_event+0x11a/0x9d0 [ 330.981255][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.987494][ C0] ? ipmr_device_event+0x51/0x1a0 [ 330.992586][ C0] ? igmp_netdev_event+0x42/0x380 [ 330.997699][ C0] notifier_call_chain+0xd7/0x160 [ 331.002828][ C0] raw_notifier_call_chain+0x37/0x50 [ 331.008119][ C0] call_netdevice_notifiers_info+0x48/0xc0 [ 331.013929][ C0] __dev_open+0xbc/0x2a0 [ 331.018211][ C0] __dev_change_flags+0x37f/0x4c0 [ 331.023250][ C0] ? ___cache_free+0x2e/0x320 [ 331.027932][ C0] dev_change_flags+0x6c/0xe0 [ 331.032968][ C0] do_setlink+0x626/0x1e30 [ 331.038306][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 331.044213][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.050734][ C0] ? __nla_validate_parse+0xa0/0x1140 [ 331.056133][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 331.062071][ C0] ? __read_once_size+0xea/0x110 [ 331.067015][ C0] __rtnl_newlink+0x93e/0x1010 [ 331.071792][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.078035][ C0] ? __this_cpu_preempt_check+0x4a/0x170 [ 331.083675][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.089919][ C0] ? __perf_event_task_sched_in+0x14d/0x390 [ 331.095842][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.102261][ C0] ? __perf_event_task_sched_out+0x14d/0xaa0 [ 331.108537][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.115001][ C0] ? _raw_spin_unlock_irq+0x68/0x80 [ 331.120206][ C0] ? finish_task_switch+0x7b/0x260 [ 331.125325][ C0] ? __schedule+0x319/0x640 [ 331.129896][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 331.135795][ C0] ? __rtnl_newlink+0x1010/0x1010 [ 331.142322][ C0] rtnl_newlink+0x63/0x90 [ 331.146655][ C0] rtnetlink_rcv_msg+0x1d3/0x500 [ 331.151603][ C0] ? __rcu_read_unlock+0x66/0x3c0 [ 331.156633][ C0] netlink_rcv_skb+0xb0/0x260 [ 331.161307][ C0] ? rtnl_calcit.isra.0+0x220/0x220 [ 331.166539][ C0] rtnetlink_rcv+0x26/0x30 [ 331.171061][ C0] netlink_unicast+0x354/0x430 [ 331.175834][ C0] netlink_sendmsg+0x456/0x770 [ 331.180601][ C0] ? aa_sock_msg_perm.isra.0+0xa5/0x140 [ 331.186155][ C0] ? netlink_unicast+0x430/0x430 [ 331.191098][ C0] sock_sendmsg+0x9f/0xc0 [ 331.195426][ C0] __sys_sendto+0x21f/0x320 [ 331.199946][ C0] ? blkcg_maybe_throttle_current+0x472/0x610 [ 331.206058][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 331.212299][ C0] ? debug_smp_processor_id+0x4c/0x172 [ 331.218176][ C0] __x64_sys_sendto+0x89/0xb0 [ 331.222870][ C0] do_syscall_64+0xcc/0x370 [ 331.227417][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.233304][ C0] RIP: 0033:0x413f13 [ 331.237236][ C0] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 40 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 331.257161][ C0] RSP: 002b:00007ffdafe4fb78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 331.265585][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000413f13 [ 331.273555][ C0] RDX: 0000000000000038 RSI: 0000000000a71df0 RDI: 0000000000000003 [ 331.281563][ C0] RBP: 0000000000000000 R08: 00007ffdafe4fb80 R09: 000000000000000c [ 331.289532][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.297499][ C0] R13: 0000000000000003 R14: 00007ffdafe4fc48 R15: 0000000000000006 [ 332.424750][ C0] Shutting down cpus with NMI [ 332.430968][ C0] Kernel Offset: disabled [ 332.435602][ C0] Rebooting in 86400 seconds..