[info] Using makefile-style concurrent boot in runlevel 2. [ 48.872829][ T27] audit: type=1800 audit(1578652037.038:21): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 48.893800][ T27] audit: type=1800 audit(1578652037.068:22): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts. 2020/01/10 10:27:30 fuzzer started 2020/01/10 10:27:31 dialing manager at 10.128.0.105:46059 2020/01/10 10:27:32 syscalls: 2812 2020/01/10 10:27:32 code coverage: enabled 2020/01/10 10:27:32 comparison tracing: enabled 2020/01/10 10:27:32 extra coverage: enabled 2020/01/10 10:27:32 setuid sandbox: enabled 2020/01/10 10:27:32 namespace sandbox: enabled 2020/01/10 10:27:32 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/10 10:27:32 fault injection: enabled 2020/01/10 10:27:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/10 10:27:32 net packet injection: enabled 2020/01/10 10:27:32 net device setup: enabled 2020/01/10 10:27:32 concurrency sanitizer: enabled 2020/01/10 10:27:32 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 73.490581][ T7977] KCSAN: could not find function: 'decode_data' [ 74.111842][ T7977] KCSAN: could not find function: 'calc_wb_limits' [ 79.216945][ T7977] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/10 10:27:48 adding functions to KCSAN blacklist: 'generic_write_end' 'process_srcu' 'pid_update_inode' 'vm_area_dup' '__lru_cache_add' 'file_update_time' 'futex_wait_queue_me' 'run_timer_softirq' 'generic_fillattr' 'blk_mq_run_hw_queue' 'snd_seq_prioq_cell_out' 'echo_char' 'copy_process' 'pcpu_alloc' 'tick_sched_do_timer' '__put_unused_fd' 'find_next_bit' 'audit_log_start' '__d_lookup_done' 'evict' 'do_nanosleep' 'ktime_get_real_seconds' '__snd_rawmidi_transmit_ack' 'virtqueue_disable_cb' 'fasync_remove_entry' 'lookup_fast' 'del_timer' 'do_wait' 'timer_clear_idle' 'filemap_fault' '__add_to_page_cache_locked' '__send_signal' 'blk_mq_get_request' 'blk_mq_sched_dispatch_requests' 'kauditd_thread' 'xas_find_marked' 'n_tty_receive_buf_common' 'ep_poll' 'blk_stat_add' 'tick_do_update_jiffies64' 'rcu_gp_fqs_check_wake' 'snd_seq_check_queue' 'wbt_issue' '__rcu_read_unlock' '__delete_from_page_cache' '__hrtimer_run_queues' 'enqueue_timer' 'find_get_pages_range_tag' 'sit_tunnel_xmit' 'ext4_mark_iloc_dirty' 'iomap_dio_bio_actor' 'do_signal_stop' 'dd_has_work' 'can_receive' 'ext4_mb_find_by_goal' 'do_syslog' 'padata_find_next' 'smpboot_thread_fn' 'ext4_nonda_switch' '__ext4_new_inode' 'atime_needs_update' 'snd_rawmidi_kernel_write1' 'shmem_add_to_page_cache' 'tomoyo_supervisor' 'decode_data' 'calc_wb_limits' 'ion_page_pool_free' 'kernfs_refresh_inode' 'page_counter_charge' 'xas_clear_mark' 'tick_nohz_idle_stop_tick' 'iput' 'page_counter_try_charge' 'lruvec_lru_size' 'alloc_empty_file' 'd_instantiate_new' '__skb_try_recv_from_queue' 'ns_capable_common' '__mark_inode_dirty' 'rcu_gp_fqs_loop' 'ip_tunnel_xmit' 'ktime_get_seconds' 'mod_timer' 'clear_inode' 'yama_ptracer_del' 'common_perm_cond' 'ext4_mb_good_group' 'ext4_free_inode' 'blk_mq_dispatch_rq_list' 'handle_mm_fault' '__find_get_block' 'unix_release_sock' 'do_exit' 'ext4_free_inodes_count' 'taskstats_exit' 'ext4_has_free_clusters' 'poll_schedule_timeout' 'generic_permission' 'ext4_da_write_end' 'mm_update_next_owner' 'wbt_done' '__blk_queue_split' 10:31:37 executing program 0: 10:31:38 executing program 1: [ 309.822106][ T7980] IPVS: ftp: loaded support on port[0] = 21 [ 309.910782][ T7980] chnl_net:caif_netlink_parms(): no params data found [ 309.979144][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.986782][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.994567][ T7980] device bridge_slave_0 entered promiscuous mode [ 310.008218][ T7983] IPVS: ftp: loaded support on port[0] = 21 [ 310.016055][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.023161][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.034553][ T7980] device bridge_slave_1 entered promiscuous mode [ 310.076992][ T7980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.097422][ T7980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:31:38 executing program 2: [ 310.137958][ T7980] team0: Port device team_slave_0 added [ 310.154559][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 310.164741][ T7980] team0: Port device team_slave_1 added [ 310.288713][ T7980] device hsr_slave_0 entered promiscuous mode [ 310.335797][ T7980] device hsr_slave_1 entered promiscuous mode 10:31:38 executing program 3: [ 310.401476][ T7986] IPVS: ftp: loaded support on port[0] = 21 [ 310.428876][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.446857][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.466609][ T7983] device bridge_slave_0 entered promiscuous mode [ 310.489187][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.506626][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.526380][ T7983] device bridge_slave_1 entered promiscuous mode [ 310.565118][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.596688][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.635592][ T7983] team0: Port device team_slave_0 added [ 310.643704][ T7989] IPVS: ftp: loaded support on port[0] = 21 [ 310.659096][ T7983] team0: Port device team_slave_1 added 10:31:38 executing program 4: [ 310.767635][ T7983] device hsr_slave_0 entered promiscuous mode [ 310.816537][ T7983] device hsr_slave_1 entered promiscuous mode [ 310.856697][ T7983] debugfs: Directory 'hsr0' with parent '/' already present! 10:31:39 executing program 5: [ 310.911728][ T7991] IPVS: ftp: loaded support on port[0] = 21 [ 310.917752][ T7980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.982163][ T7980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.037673][ T7980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.088065][ T7980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.190846][ T7986] chnl_net:caif_netlink_parms(): no params data found [ 311.277496][ T7995] IPVS: ftp: loaded support on port[0] = 21 [ 311.283508][ T7989] chnl_net:caif_netlink_parms(): no params data found [ 311.296003][ T7983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.347973][ T7983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.407842][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.415060][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.423178][ T7986] device bridge_slave_0 entered promiscuous mode [ 311.430443][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.437701][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.445578][ T7986] device bridge_slave_1 entered promiscuous mode [ 311.464267][ T7986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.473596][ T7983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.547784][ T7983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.614113][ T7986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.642429][ T7986] team0: Port device team_slave_0 added [ 311.670358][ T7986] team0: Port device team_slave_1 added [ 311.747447][ T7986] device hsr_slave_0 entered promiscuous mode [ 311.805808][ T7986] device hsr_slave_1 entered promiscuous mode [ 311.845823][ T7986] debugfs: Directory 'hsr0' with parent '/' already present! [ 311.856798][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.864392][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.872550][ T7989] device bridge_slave_0 entered promiscuous mode [ 311.913142][ T7991] chnl_net:caif_netlink_parms(): no params data found [ 311.928081][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.935236][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.943098][ T7989] device bridge_slave_1 entered promiscuous mode [ 311.961494][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.973176][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.047961][ T7995] chnl_net:caif_netlink_parms(): no params data found [ 312.064988][ T7980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.072894][ T7989] team0: Port device team_slave_0 added [ 312.081703][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.090409][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.098168][ T7991] device bridge_slave_0 entered promiscuous mode [ 312.116188][ T7983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.137535][ T7989] team0: Port device team_slave_1 added [ 312.143853][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.151192][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.161526][ T7991] device bridge_slave_1 entered promiscuous mode [ 312.173906][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.181227][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.189125][ T7995] device bridge_slave_0 entered promiscuous mode [ 312.196955][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.204226][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.212176][ T7995] device bridge_slave_1 entered promiscuous mode [ 312.231701][ T7991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.242933][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.251155][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.271239][ T7991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.295474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.303761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.312739][ T7980] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.334380][ T7983] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.341568][ T7986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.399114][ T7995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.409245][ T7991] team0: Port device team_slave_0 added [ 312.457980][ T7989] device hsr_slave_0 entered promiscuous mode [ 312.498041][ T7989] device hsr_slave_1 entered promiscuous mode [ 312.535527][ T7989] debugfs: Directory 'hsr0' with parent '/' already present! [ 312.548907][ T7986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.598683][ T7995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.608469][ T7991] team0: Port device team_slave_1 added [ 312.616092][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.624894][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.633604][ T2617] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.640646][ T2617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.648732][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.657509][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.665997][ T2617] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.673028][ T2617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.680814][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.689630][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.698304][ T2617] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.705339][ T2617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.715804][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.723853][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.736192][ T7986] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.781694][ T7986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.829198][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.838001][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.846686][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.853708][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.861529][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.883668][ T7995] team0: Port device team_slave_0 added [ 312.893555][ T7995] team0: Port device team_slave_1 added [ 312.902422][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.912069][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.921148][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.930410][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.939100][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.997739][ T7995] device hsr_slave_0 entered promiscuous mode [ 313.045780][ T7995] device hsr_slave_1 entered promiscuous mode [ 313.095850][ T7995] debugfs: Directory 'hsr0' with parent '/' already present! [ 313.104407][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.112548][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.121280][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.129986][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.138540][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.147499][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.172422][ T7983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.187445][ T7983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.237784][ T7991] device hsr_slave_0 entered promiscuous mode [ 313.295775][ T7991] device hsr_slave_1 entered promiscuous mode [ 313.355583][ T7991] debugfs: Directory 'hsr0' with parent '/' already present! [ 313.375480][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.384236][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.397676][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.406583][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.414992][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.423801][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.432299][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.440775][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.449418][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.457944][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.474496][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.487698][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.499944][ T7989] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.558342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.566280][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.573637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.597950][ T7989] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.675643][ T7989] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.737854][ T7989] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.797253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.804756][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.822578][ T7980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.853084][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.862118][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.878242][ T7986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.906145][ T7986] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.921189][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.929909][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.938792][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.946512][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.959877][ T7980] device veth0_vlan entered promiscuous mode [ 313.972561][ T7991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.034000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.042459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.051058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.059924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.068418][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.075488][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.083368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.092079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.100631][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.107712][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.115882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.123761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.131924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.140442][ T7995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.211192][ T7980] device veth1_vlan entered promiscuous mode [ 314.219216][ T7991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.257348][ T7991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.310266][ T7983] device veth0_vlan entered promiscuous mode [ 314.317662][ T7995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.353609][ T7991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.387494][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.396304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.404803][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.414385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.422833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.433122][ T7995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.489208][ T7995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.542190][ T7983] device veth1_vlan entered promiscuous mode [ 314.552885][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.562009][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.571157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.579660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.601083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.648640][ T7986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.659529][ T7986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.686435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 10:31:42 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x2, r0, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x7a) read(r1, &(0x7f0000000280)=""/109, 0x6d) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r2, r2, 0x0, 0x8800804) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) [ 314.694480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.703676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.713163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.721828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.730694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.746099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.765498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.795491][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 314.795509][ T27] audit: type=1800 audit(1578652302.958:31): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16519 res=0 [ 314.800845][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 10:31:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000004c0)=ANY=[@ANYBLOB="d24300001c0010979d355106858a000383830d8b0a0783878b06030783808b8f838a068994c400bc87ffa9770fffdc9c2539b2451bd2301e7c9dced80eb2c08a915201ffb8923d1060850f2fc1035a08a98690be9e12e36676bd78bd10b97d6b601bb0fd9613ffa735"]) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x220}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="4100000053e9e8f5e416523c8a071bc6640b4e99e05b5f56fe55abd54b2e44de086450391581c73b088d44132eb2bb49f3f8872ad5b3c94c849a7e67daa7d537a13d938d4ff562a9a2cf8e499510e352dfda81f4a4388ea6b2cf294e5dcc96cfe83eab3314a78d605ea101ba64a945deba7a1ca315a0dba537e2c07b09257cbcb5ef3825eab369417e19bde7310c18f67a25fa094cfdff9d8a8988c072dc66663acdb169ad399472343ab7d9df210f882638f0c7e60d6c1bb30a5e86861455e5d6d82446f91d0cafbfcbc3ec8e39544d19caa938895307992aa8af58daedea908af6f0dd7ea22e61", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x9, @rand_addr="ea130e100d5aa41e507c1581d08151e0", 0x6}}}, 0x84) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000280)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x98, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 314.860863][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.872023][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.898414][ T7986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.933969][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.935591][ T27] audit: type=1800 audit(1578652303.098:32): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16519 res=0 [ 314.960883][ T7991] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.973500][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.981372][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.991243][ T8015] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 314.993086][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.018342][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.027038][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.047305][ T7995] 8021q: adding VLAN 0 to HW filter on device bond0 10:31:43 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00200000000000001c00120009000100626f6e64000000000c000200060019007f000000"], 0x3c}}, 0x0) [ 315.099331][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.110381][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.123275][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.132375][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.152795][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.159915][ T7993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.167994][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.177064][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.185333][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.192396][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.200763][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.209545][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.217896][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.225615][ T7993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.234618][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.243718][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.252124][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.259597][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.267866][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.282159][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.290259][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.308993][ T8020] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 315.343981][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.352369][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.360305][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.368290][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.391901][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 10:31:43 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x220}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x5, 0x80000) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000380)={0x0, 0x20}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xfc, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) [ 315.413583][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.423125][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.441114][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.450159][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.458858][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.467681][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.477312][ C1] hrtimer: interrupt took 25636 ns [ 315.485339][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.495699][ T7986] device veth0_vlan entered promiscuous mode [ 315.523484][ T7991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.545433][ T7991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.555989][ T27] audit: type=1804 audit(1578652303.718:33): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir963453159/syzkaller.kjHOHL/3/bus" dev="sda1" ino=16525 res=1 10:31:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) eventfd2(0x5, 0x100000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a05000000000000a7fa12770042b6d02b624c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188742b7e9f035fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff93e48884ca1c0018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e2f8a16324fe27da2a9d5ba9ff3c009d308bd73", 0xc0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r5, r5}, &(0x7f0000000600)=""/232, 0x6d, &(0x7f0000000240)={&(0x7f0000000180)={'crct10dif-generic\x00\x00\x00\x0f\x00'}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000040)={0x220}) ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000000400)={0x8, 0x1, 0x6}) keyctl$get_security(0x11, r5, &(0x7f0000000080)=""/141, 0x8d) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettaction={0x28, 0x30, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x0) r9 = dup2(r8, r3) getsockname$inet6(r9, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000340)=0x1c) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x96c80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000480)={0xfb, 0x20, 0x1, 0x0, 0x8000, 0xff, 0x1, 0x4, 0x2, 0x20, 0x0, 0xce, 0x0, 0x2, 0x3a63, 0x6, 0x80, 0xf1, 0x4, [], 0x1, 0x10000}) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@generic={0x0, "dff4ed73656221bbea8538f7e0a634d95012482508a0b2d0be3eae2798c9752f7ec98e5fb011d8b6352ac4bb92b9486d24b8a8ca9fbc8764c0277bb430e60b313dde1059c58f546de853a11695e807d4f5268d19d6f7a50d61ae987eaae72fc92a8dce80d9f70f20f2b79f068398da1b42f6aa21071d0e3c22de55494cee"}, 0x80, 0x0}, 0x0) [ 315.616610][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.626772][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.649187][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.672170][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.682081][ T27] audit: type=1804 audit(1578652303.858:34): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir963453159/syzkaller.kjHOHL/3/bus" dev="sda1" ino=16525 res=1 [ 315.713200][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 10:31:43 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x220}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x5, 0x80000) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000380)={0x0, 0x20}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xfc, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) [ 315.722198][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.730930][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.739981][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.748648][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.757297][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.773260][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.781824][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.816004][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.824454][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.843599][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.852395][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.859472][ T7996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.867380][ T27] audit: type=1804 audit(1578652304.028:35): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir963453159/syzkaller.kjHOHL/4/bus" dev="sda1" ino=16526 res=1 [ 315.893482][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.901987][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.911790][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.919863][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.927591][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.938513][ T7986] device veth1_vlan entered promiscuous mode [ 315.948264][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.956840][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 10:31:44 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x220}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x5, 0x80000) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000380)={0x0, 0x20}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xfc, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) [ 315.965701][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.974261][ T8034] syz-executor.0 (8034) used greatest stack depth: 10088 bytes left [ 315.983055][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.990350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.002779][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 10:31:44 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x220}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x5, 0x80000) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000380)={0x0, 0x20}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xfc, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) [ 316.060346][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.075866][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.084932][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.102993][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.110848][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.134396][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.152357][ T7995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.172270][ T7995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.212931][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.227391][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.235317][ T27] audit: type=1804 audit(1578652304.398:36): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir963453159/syzkaller.kjHOHL/5/bus" dev="sda1" ino=16522 res=1 [ 316.277898][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.292587][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.316589][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.325062][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.350145][ T27] audit: type=1804 audit(1578652304.508:37): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594851164/syzkaller.KF1zWV/3/bus" dev="sda1" ino=16526 res=1 [ 316.378088][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.419369][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.428387][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.436652][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.451000][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.466717][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.479357][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.511501][ T7995] 8021q: adding VLAN 0 to HW filter on device batadv0 10:31:44 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffee1, 0x100, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0xffffffffffffff86) socketpair(0x0, 0x0, 0x0, 0x0) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) setgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) [ 316.556774][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.564242][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.588906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.613096][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.658736][ T27] audit: type=1804 audit(1578652304.828:38): pid=8056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir963453159/syzkaller.kjHOHL/6/file0" dev="sda1" ino=16519 res=1 [ 316.668761][ T7989] device veth0_vlan entered promiscuous mode [ 316.689032][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 316.723116][ T7991] device veth0_vlan entered promiscuous mode [ 316.734903][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.751666][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.760574][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.771011][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.779971][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.788469][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.797230][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.804902][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.812810][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.820701][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.834657][ T7989] device veth1_vlan entered promiscuous mode [ 316.846828][ T7991] device veth1_vlan entered promiscuous mode [ 316.889975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.901982][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.910863][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.919283][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.927901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.936914][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 10:31:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r6, 0x200}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r7, 0x0, 0x7, 0x0, 0x0, 0x3fe}, 0xffffffffffffff8e) [ 316.990981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.016577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 10:31:45 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(0x0, 0x2, 0x20) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000500)={0x76591ff02f01386a, 0x69, 0x1}, 0xfffffffffffffe81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) writev(r3, &(0x7f0000000400), 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x220}) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x3, {0x2, 0x81, 0xe0, 0x78, 0x80, 0x60}, 0xfff, 0x3f}, 0xe) [ 317.056321][ T7995] device veth0_vlan entered promiscuous mode [ 317.094169][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.120661][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.150100][ T7995] device veth1_vlan entered promiscuous mode 10:31:45 executing program 4: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x220}) r1 = dup(0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x12) 10:31:45 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x220}) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x220}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x3, 0x2, 0x5073, 0x2, 0x7a91}}) getsockopt$inet_int(r1, 0x10d, 0x10, &(0x7f000079bffc), &(0x7f0000000200)=0x75) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x220}) accept4$nfc_llcp(r4, &(0x7f00000000c0), &(0x7f0000000000)=0x60, 0x80000) 10:31:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettaction={0x28, 0x30, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x0) r3 = dup2(r1, r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)={r6, 0x7, 0x6, [0x3, 0x6, 0x0, 0xfe00, 0x7, 0x8000]}, &(0x7f0000000080)=0x14) r7 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mknod(&(0x7f00000005c0)='./bus\x00', 0x800b, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x5, 0x8}, {0x7ff, 0x1d81}]}, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0xee01) execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 10:31:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xa868c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100005070000000000001ffffffffff7", @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r2, @ANYBLOB="70a17a8dbb68938074c30b6e328cf9a5d941422d66ee7a695d5f481d8c3bb6aaac0c14cff1b59b63e3561e3953f9791e3d1853b655aee0c414719608f0c86e332c1d6c3fcf3746b7d4797bed54da25b02142ecabeb295a113543fb2dbc47d278597b415b0b99da1de90aa2b4b67007c11240fdc1a09491bf459d4306"], 0x38}}, 0x0) [ 317.438184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 317.469241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 10:31:45 executing program 0: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3c, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a07a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d78e0c9c15ab3a14817ac61e4dd111a0a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b86c7c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c9727808700146000"/486], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x66, 0x3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1000000ff, 0x0, &(0x7f00000000c0)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab8450138bb033a5caa1f2325f1a39010108038da1", 0x0, 0x590, 0x60000000, 0x0, 0x1cd, &(0x7f00000001c0)="ecfe00000083e5054fd6e4862d0c2e08f4", &(0x7f0000000180)="0f02ee9e4e212c0c6034b4b2fcef5070913266cc9ba78c88412be7a403c17ac081271db87de045cc604f7b1b1e35b5a2504105ecae252d672f7216"}, 0x40) 10:31:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="90"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000480)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 10:31:45 executing program 4: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) [ 317.761725][ T8093] ================================================================== [ 317.770630][ T8093] BUG: KCSAN: data-race in find_alive_thread / get_signal [ 317.770634][ T8093] [ 317.770650][ T8093] read to 0xffff88809eea20a4 of 4 bytes by task 8095 on cpu 1: [ 317.770666][ T8093] find_alive_thread+0xdd/0x130 [ 317.770681][ T8093] do_exit+0x65c/0x18c0 [ 317.770699][ T8093] do_group_exit+0xb4/0x1c0 [ 317.770718][ T8093] get_signal+0x2a2/0x1320 [ 317.770737][ T8093] do_signal+0x2f/0x6c0 [ 317.770758][ T8093] exit_to_usermode_loop+0x250/0x2c0 [ 317.770775][ T8093] do_syscall_64+0x384/0x3a0 [ 317.770794][ T8093] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 317.770797][ T8093] [ 317.770811][ T8093] write to 0xffff88809eea20a4 of 4 bytes by task 8093 on cpu 0: [ 317.770826][ T8093] get_signal+0x7c7/0x1320 [ 317.770843][ T8093] do_signal+0x2f/0x6c0 [ 317.770865][ T8093] exit_to_usermode_loop+0x250/0x2c0 [ 317.770886][ T8093] do_syscall_64+0x384/0x3a0 [ 317.770907][ T8093] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 317.770911][ T8093] [ 317.770916][ T8093] Reported by Kernel Concurrency Sanitizer on: [ 317.770937][ T8093] CPU: 0 PID: 8093 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 317.770947][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.770955][ T8093] ================================================================== [ 317.770965][ T8093] Kernel panic - not syncing: panic_on_warn set ... [ 317.770983][ T8093] CPU: 0 PID: 8093 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 317.770993][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.770997][ T8093] Call Trace: [ 317.771014][ T8093] dump_stack+0x11d/0x181 [ 317.771033][ T8093] panic+0x210/0x640 [ 317.771054][ T8093] ? vprintk_func+0x8d/0x140 [ 317.771078][ T8093] kcsan_report.cold+0xc/0xd [ 317.771098][ T8093] kcsan_setup_watchpoint+0x3fe/0x460 [ 317.771134][ T8093] __tsan_unaligned_write4+0xc7/0x110 [ 317.804445][ T8108] overlayfs: filesystem on './bus' not supported as upperdir [ 317.805994][ T8093] get_signal+0x7c7/0x1320 [ 317.806013][ T8093] ? __read_once_size+0x5a/0xe0 [ 317.806042][ T8093] ? __read_once_size+0xea/0x110 [ 317.975021][ T8093] do_signal+0x2f/0x6c0 [ 317.979194][ T8093] ? __read_once_size+0x5a/0xe0 [ 317.984068][ T8093] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 317.989805][ T8093] exit_to_usermode_loop+0x250/0x2c0 [ 317.995112][ T8093] do_syscall_64+0x384/0x3a0 [ 317.999815][ T8093] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 318.005799][ T8093] RIP: 0033:0x45af49 [ 318.009706][ T8093] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.029324][ T8093] RSP: 002b:00007fcce52dbcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 318.037735][ T8093] RAX: fffffffffffffe00 RBX: 000000000075bf28 RCX: 000000000045af49 [ 318.045700][ T8093] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28 [ 318.053664][ T8093] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 318.061629][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c [ 318.069591][ T8093] R13: 00007ffcab8d96df R14: 00007fcce52dc9c0 R15: 000000000075bf2c [ 318.079118][ T8093] Kernel Offset: disabled [ 318.083443][ T8093] Rebooting in 86400 seconds..