[info] Using makefile-style concurrent boot in runlevel 2. [ 43.588356][ T26] audit: type=1800 audit(1571807081.075:21): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 43.636304][ T26] audit: type=1800 audit(1571807081.075:22): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.161' (ECDSA) to the list of known hosts. 2019/10/23 05:04:53 fuzzer started 2019/10/23 05:04:55 dialing manager at 10.128.0.105:42531 2019/10/23 05:04:55 syscalls: 2524 2019/10/23 05:04:55 code coverage: enabled 2019/10/23 05:04:55 comparison tracing: enabled 2019/10/23 05:04:55 extra coverage: extra coverage is not supported by the kernel 2019/10/23 05:04:55 setuid sandbox: enabled 2019/10/23 05:04:55 namespace sandbox: enabled 2019/10/23 05:04:55 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/23 05:04:55 fault injection: enabled 2019/10/23 05:04:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/23 05:04:55 net packet injection: enabled 2019/10/23 05:04:55 net device setup: enabled 2019/10/23 05:04:55 concurrency sanitizer: enabled syzkaller login: [ 68.230690][ T7367] KCSAN: could not find function: 'poll_schedule_timeout' 2019/10/23 05:05:09 adding functions to KCSAN blacklist: 'pipe_poll' 'ktime_get_real_seconds' 'tick_sched_do_timer' 'enqueue_timer' 'generic_write_end' 'ext4_has_free_clusters' 'wbc_detach_inode' 'update_defense_level' 'ktime_get_seconds' 'tick_do_update_jiffies64' 'icmp_global_allow' 'ext4_mark_iloc_dirty' 'generic_permission' 'blk_mq_get_request' 'fsnotify' 'do_syslog' '__nf_conntrack_find_get' 'ext4_free_inode' 'common_perm_cond' '__ext4_new_inode' 'blk_mq_dispatch_rq_list' 'atime_needs_update' 'ext4_nonda_switch' 'ep_poll' 'kvm_arch_vcpu_load' 'rcu_gp_fqs_check_wake' 'alloc_pid' 'fasync_remove_entry' '__nf_ct_refresh_acct' 'taskstats_exit' '__dev_queue_xmit' 'futex_wait_queue_me' 'dd_has_work' 'tcp_add_backlog' 'add_timer' 'list_lru_count_one' 'inactive_list_is_low' 'find_next_bit' 'run_timer_softirq' 'find_get_pages_range_tag' 'balance_dirty_pages' 'blk_mq_sched_dispatch_requests' 'generic_fillattr' 'pid_update_inode' 'wbt_issue' 'xas_clear_mark' 'find_alive_thread' '__splice_from_pipe' 'blk_mq_run_hw_queue' 'ext4_free_inodes_count' 'mm_update_next_owner' '__snd_rawmidi_transmit_ack' '__add_to_page_cache_locked' 'wbt_wait' 'tomoyo_supervisor' 'vm_area_dup' 'timer_clear_idle' 'poll_schedule_timeout' 'xas_find_marked' 'tick_nohz_idle_stop_tick' 'bio_endio' 'do_nanosleep' '__skb_recv_udp' '__tcp_select_window' 'tcp_poll' 'padata_find_next' 'sit_tunnel_xmit' '__hrtimer_run_queues' 'mod_timer' 05:08:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0x17c, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1, 0x8000000}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000340)={0x8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:08:47 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setstatus(r2, 0x4, 0x42000) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket(0x5, 0x6, 0x32) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 290.025344][ T7369] IPVS: ftp: loaded support on port[0] = 21 [ 290.174061][ T7371] IPVS: ftp: loaded support on port[0] = 21 [ 290.208688][ T7369] chnl_net:caif_netlink_parms(): no params data found 05:08:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x8000000) [ 290.320835][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.327912][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.349818][ T7369] device bridge_slave_0 entered promiscuous mode [ 290.381163][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.399196][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.418304][ T7369] device bridge_slave_1 entered promiscuous mode [ 290.434374][ T7371] chnl_net:caif_netlink_parms(): no params data found [ 290.484544][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.518138][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.527864][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.537196][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.545832][ T7371] device bridge_slave_0 entered promiscuous mode [ 290.572512][ T7369] team0: Port device team_slave_0 added [ 290.579430][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state 05:08:48 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) unshare(0x20020000) [ 290.586495][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.596814][ T7371] device bridge_slave_1 entered promiscuous mode [ 290.607292][ T7369] team0: Port device team_slave_1 added [ 290.631886][ T7375] IPVS: ftp: loaded support on port[0] = 21 [ 290.753053][ T7369] device hsr_slave_0 entered promiscuous mode 05:08:48 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4d304, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2, @loopback, 0x0, 0x1, [@multicast2]}, 0x14) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) dup(0xffffffffffffffff) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x4080) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa5) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40002) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) [ 290.808685][ T7369] device hsr_slave_1 entered promiscuous mode [ 290.880025][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.921143][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.972134][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.979231][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.986601][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.994135][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.043868][ T7371] team0: Port device team_slave_0 added [ 291.046046][ T7377] IPVS: ftp: loaded support on port[0] = 21 [ 291.087306][ T7371] team0: Port device team_slave_1 added [ 291.173688][ T7375] chnl_net:caif_netlink_parms(): no params data found 05:08:48 executing program 5: open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x8, 0x0, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000002000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 291.291287][ T7371] device hsr_slave_0 entered promiscuous mode [ 291.330787][ T7371] device hsr_slave_1 entered promiscuous mode [ 291.378313][ T7371] debugfs: Directory 'hsr0' with parent '/' already present! [ 291.387494][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.395635][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.436505][ T7380] IPVS: ftp: loaded support on port[0] = 21 [ 291.455795][ T7383] IPVS: ftp: loaded support on port[0] = 21 [ 291.504380][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.511749][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.519606][ T7375] device bridge_slave_0 entered promiscuous mode [ 291.549534][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.556676][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.565154][ T7375] device bridge_slave_1 entered promiscuous mode [ 291.634965][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.656347][ T7377] chnl_net:caif_netlink_parms(): no params data found [ 291.673311][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.681925][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.706452][ T7375] team0: Port device team_slave_0 added [ 291.729699][ T7375] team0: Port device team_slave_1 added [ 291.799625][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.806764][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.815160][ T7377] device bridge_slave_0 entered promiscuous mode [ 291.824893][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.833942][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.842098][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.884611][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.892106][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.900279][ T7377] device bridge_slave_1 entered promiscuous mode [ 291.961438][ T7375] device hsr_slave_0 entered promiscuous mode [ 292.018717][ T7375] device hsr_slave_1 entered promiscuous mode [ 292.088441][ T7375] debugfs: Directory 'hsr0' with parent '/' already present! [ 292.100656][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.111172][ T7383] chnl_net:caif_netlink_parms(): no params data found [ 292.127596][ T7377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.139696][ T7377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.158650][ T7380] chnl_net:caif_netlink_parms(): no params data found [ 292.192586][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.201247][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.210004][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.217098][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.226856][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.235548][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.244360][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.251435][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.279922][ T7377] team0: Port device team_slave_0 added [ 292.296183][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.304278][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.312721][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.328095][ T7377] team0: Port device team_slave_1 added [ 292.401022][ T7377] device hsr_slave_0 entered promiscuous mode [ 292.458784][ T7377] device hsr_slave_1 entered promiscuous mode [ 292.498355][ T7377] debugfs: Directory 'hsr0' with parent '/' already present! [ 292.525429][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.535135][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.552644][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.561028][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.571096][ T7380] device bridge_slave_0 entered promiscuous mode [ 292.578503][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.585636][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.595415][ T7383] device bridge_slave_0 entered promiscuous mode [ 292.603116][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.610628][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.618518][ T7383] device bridge_slave_1 entered promiscuous mode [ 292.641161][ T7383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.650491][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.660437][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.669882][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.682099][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.689291][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.697185][ T7380] device bridge_slave_1 entered promiscuous mode [ 292.710881][ T7383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.736691][ T7383] team0: Port device team_slave_0 added [ 292.743028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.752049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.760641][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.767671][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.775708][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.784413][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.792987][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.800203][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.808007][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.817613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.826491][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.835630][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.860347][ T7383] team0: Port device team_slave_1 added [ 292.867815][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.877586][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.886162][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.895419][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.904223][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.913041][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.921767][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.953944][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.962791][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.971493][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.980426][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.991249][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.002629][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.013339][ T7371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.024317][ T7371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.046180][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.056025][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.064701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.073599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.082094][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.099236][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.126278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.134263][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.142438][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.161548][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.210793][ T7383] device hsr_slave_0 entered promiscuous mode [ 293.248657][ T7383] device hsr_slave_1 entered promiscuous mode [ 293.288503][ T7383] debugfs: Directory 'hsr0' with parent '/' already present! [ 293.304198][ T7380] team0: Port device team_slave_0 added [ 293.311232][ T7380] team0: Port device team_slave_1 added [ 293.319665][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.328771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.337400][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.344553][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.353856][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.362811][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.371432][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.378525][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.386667][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.452457][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.461657][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.471720][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.480516][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.490027][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.498975][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.507677][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.516292][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.524719][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.533132][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.542393][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.554229][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.600907][ T7380] device hsr_slave_0 entered promiscuous mode [ 293.648884][ T7380] device hsr_slave_1 entered promiscuous mode [ 293.708357][ T7380] debugfs: Directory 'hsr0' with parent '/' already present! [ 293.731079][ T7377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.769606][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.796846][ T7377] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.816798][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.832123][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.867883][ T7383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.897602][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.915490][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.926154][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.933300][ T7379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.941840][ T7379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.963334][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.965119][ C0] hrtimer: interrupt took 44413 ns [ 293.971783][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.993327][ T7383] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.039244][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.048096][ T7409] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 294.060694][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 05:08:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x5452, 0x20000ff8) [ 294.126134][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.133291][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.147829][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.169742][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.189363][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.199424][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.226917][ T7383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.252885][ T7383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.312848][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.347395][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.362072][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.388008][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 05:08:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x5452, 0x20000ff8) 05:08:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x8000000) [ 294.407720][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.414841][ T7388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.462781][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.495411][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.526602][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.533802][ T7388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.552924][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.569137][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 05:08:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x8000000) 05:08:52 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x5452, 0x20000ff8) [ 294.585487][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.602644][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.616043][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.625700][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.635801][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.644944][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.659143][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.668067][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.683293][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.694650][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.714376][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.739011][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.760093][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.774140][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 05:08:52 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x5452, 0x20000ff8) [ 294.795388][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.804007][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.817714][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.832662][ T7383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.852610][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.875367][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.921294][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.931542][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.955241][ T7377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.990812][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.005204][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.037135][ T44] ================================================================== [ 295.045259][ T44] BUG: KCSAN: data-race in pcpu_alloc / pcpu_free_area [ 295.052091][ T44] [ 295.054415][ T44] write to 0xffffffff86046740 of 4 bytes by task 7371 on cpu 0: [ 295.062043][ T44] pcpu_free_area+0x448/0x6a0 [ 295.066714][ T44] free_percpu+0x152/0x440 [ 295.071126][ T44] xt_percpu_counter_free+0x82/0xa0 [ 295.076315][ T44] cleanup_entry+0x12a/0x160 [ 295.080907][ T44] __do_replace+0x439/0x510 [ 295.085407][ T44] do_ip6t_set_ctl+0x26d/0x311 [ 295.090166][ T44] nf_setsockopt+0x6e/0xb0 [ 295.094575][ T44] ipv6_setsockopt+0x119/0x130 [ 295.099335][ T44] tcp_setsockopt+0x7c/0xc0 [ 295.103836][ T44] sock_common_setsockopt+0x67/0x90 [ 295.109036][ T44] __sys_setsockopt+0x1ce/0x370 [ 295.113887][ T44] __x64_sys_setsockopt+0x70/0x90 [ 295.118926][ T44] do_syscall_64+0xcc/0x370 [ 295.123431][ T44] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 295.129311][ T44] [ 295.131646][ T44] read to 0xffffffff86046740 of 4 bytes by task 44 on cpu 1: [ 295.139022][ T44] pcpu_alloc+0x3b0/0xcf0 [ 295.143359][ T44] __alloc_percpu_gfp+0x31/0x50 [ 295.148202][ T44] fib_nh_common_init+0x58/0x1e0 [ 295.153138][ T44] fib6_nh_init+0x2aa/0xee0 [ 295.157641][ T44] ip6_route_info_create+0x913/0xd40 [ 295.162928][ T44] ip6_route_add+0x30/0xd0 [ 295.167346][ T44] addrconf_add_mroute+0x177/0x1a0 [ 295.172453][ T44] addrconf_add_dev+0x100/0x170 [ 295.177297][ T44] addrconf_dev_config+0x170/0x280 [ 295.182425][ T44] addrconf_notify+0x1fa/0x1480 [ 295.188572][ T44] notifier_call_chain+0xd7/0x160 [ 295.193594][ T44] raw_notifier_call_chain+0x37/0x50 [ 295.198872][ T44] call_netdevice_notifiers_info+0x48/0xc0 [ 295.204658][ T44] [ 295.206976][ T44] Reported by Kernel Concurrency Sanitizer on: [ 295.213130][ T44] CPU: 1 PID: 44 Comm: kworker/1:1 Not tainted 5.4.0-rc3+ #0 [ 295.220483][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.230537][ T44] Workqueue: events linkwatch_event [ 295.235723][ T44] ================================================================== [ 295.243789][ T44] Kernel panic - not syncing: panic_on_warn set ... [ 295.250369][ T44] CPU: 1 PID: 44 Comm: kworker/1:1 Not tainted 5.4.0-rc3+ #0 [ 295.257721][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.267771][ T44] Workqueue: events linkwatch_event [ 295.272957][ T44] Call Trace: [ 295.276247][ T44] dump_stack+0xf5/0x159 [ 295.280487][ T44] panic+0x210/0x640 [ 295.284373][ T44] ? addrconf_dev_config+0x170/0x280 [ 295.289654][ T44] ? vprintk_func+0x8d/0x140 [ 295.294242][ T44] kcsan_report.cold+0xc/0x10 [ 295.298929][ T44] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 295.304485][ T44] __tsan_read4+0x2c/0x30 [ 295.308826][ T44] pcpu_alloc+0x3b0/0xcf0 [ 295.313157][ T44] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 295.318786][ T44] __alloc_percpu_gfp+0x31/0x50 [ 295.323657][ T44] fib_nh_common_init+0x58/0x1e0 [ 295.328601][ T44] fib6_nh_init+0x2aa/0xee0 [ 295.333100][ T44] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 295.338726][ T44] ? fib6_info_alloc+0x11d/0x160 [ 295.343667][ T44] ip6_route_info_create+0x913/0xd40 [ 295.348950][ T44] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 295.354658][ T44] ip6_route_add+0x30/0xd0 [ 295.359074][ T44] addrconf_add_mroute+0x177/0x1a0 [ 295.364195][ T44] addrconf_add_dev+0x100/0x170 [ 295.369035][ T44] addrconf_dev_config+0x170/0x280 [ 295.374144][ T44] addrconf_notify+0x1fa/0x1480 [ 295.378998][ T44] ? __tsan_read8+0x2c/0x30 [ 295.383496][ T44] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 295.389740][ T44] notifier_call_chain+0xd7/0x160 [ 295.394845][ T44] ? notifier_call_chain+0xd7/0x160 [ 295.400047][ T44] raw_notifier_call_chain+0x37/0x50 [ 295.405329][ T44] call_netdevice_notifiers_info+0x48/0xc0 [ 295.411131][ T44] netdev_state_change+0xb2/0xd0 [ 295.416062][ T44] linkwatch_do_dev+0xd8/0xf0 [ 295.420728][ T44] __linkwatch_run_queue+0x1a9/0x510 [ 295.426015][ T44] linkwatch_event+0x54/0x70 [ 295.430689][ T44] process_one_work+0x3d4/0x890 [ 295.435544][ T44] worker_thread+0xa0/0x800 [ 295.440073][ T44] kthread+0x1d4/0x200 [ 295.444220][ T44] ? rescuer_thread+0x6a0/0x6a0 [ 295.449058][ T44] ? kthread_stop+0x2d0/0x2d0 [ 295.453732][ T44] ret_from_fork+0x1f/0x30 [ 295.459589][ T44] Kernel Offset: disabled [ 295.463916][ T44] Rebooting in 86400 seconds..