[ 41.131361][ T25] audit: type=1800 audit(1570197916.747:25): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 41.151293][ T25] audit: type=1800 audit(1570197916.747:26): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 41.221042][ T25] audit: type=1800 audit(1570197916.837:27): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 41.409424][ T7193] sshd (7193) used greatest stack depth: 10032 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.170' (ECDSA) to the list of known hosts. 2019/10/04 14:05:27 fuzzer started 2019/10/04 14:05:28 dialing manager at 10.128.0.105:44881 2019/10/04 14:05:28 syscalls: 2523 2019/10/04 14:05:28 code coverage: enabled 2019/10/04 14:05:28 comparison tracing: enabled 2019/10/04 14:05:28 extra coverage: extra coverage is not supported by the kernel 2019/10/04 14:05:28 setuid sandbox: enabled 2019/10/04 14:05:28 namespace sandbox: enabled 2019/10/04 14:05:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 14:05:28 fault injection: enabled 2019/10/04 14:05:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 14:05:28 net packet injection: enabled 2019/10/04 14:05:28 net device setup: enabled 2019/10/04 14:05:28 concurrency sanitizer: enabled 14:05:29 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syzkaller login: [ 54.027847][ T7282] IPVS: ftp: loaded support on port[0] = 21 14:05:29 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fd) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 54.115401][ T7282] chnl_net:caif_netlink_parms(): no params data found [ 54.162489][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.179973][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.206302][ T7282] device bridge_slave_0 entered promiscuous mode [ 54.213937][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.234659][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.245468][ T7282] device bridge_slave_1 entered promiscuous mode [ 54.292825][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.316145][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.357650][ T7282] team0: Port device team_slave_0 added [ 54.364506][ T7282] team0: Port device team_slave_1 added 14:05:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x17, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x2c) [ 54.407220][ T7285] IPVS: ftp: loaded support on port[0] = 21 [ 54.467525][ T7282] device hsr_slave_0 entered promiscuous mode [ 54.524873][ T7282] device hsr_slave_1 entered promiscuous mode [ 54.592785][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.599888][ T7282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.607272][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.614320][ T7282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.657756][ T7287] IPVS: ftp: loaded support on port[0] = 21 [ 54.712022][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.746363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:05:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 54.766528][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.784799][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.793441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.809242][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.856653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.871586][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.878723][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.930731][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.945665][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.952734][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.011641][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.037691][ T7285] chnl_net:caif_netlink_parms(): no params data found [ 55.069188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.095783][ T7287] chnl_net:caif_netlink_parms(): no params data found 14:05:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0x80000024) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r5, 0x402, 0x698b47966327f9d9) fcntl$setownex(r5, 0xf, &(0x7f0000000080)) sendfile(r3, r4, 0x0, 0x6052b11e) [ 55.148118][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.215085][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.228902][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.255495][ T7285] device bridge_slave_0 entered promiscuous mode [ 55.262841][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.275534][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.283961][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.311042][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.336908][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.352194][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.365820][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.385908][ T7285] device bridge_slave_1 entered promiscuous mode [ 55.431090][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.457652][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.465589][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.473595][ T7287] device bridge_slave_0 entered promiscuous mode [ 55.492118][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.504250][ T7293] IPVS: ftp: loaded support on port[0] = 21 [ 55.517631][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.539772][ T7295] IPVS: ftp: loaded support on port[0] = 21 [ 55.546988][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.554050][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.575841][ T7287] device bridge_slave_1 entered promiscuous mode 14:05:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 55.642526][ T7285] team0: Port device team_slave_0 added [ 55.665372][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.683895][ T7285] team0: Port device team_slave_1 added [ 55.708826][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.847357][ T7285] device hsr_slave_0 entered promiscuous mode [ 55.885805][ T7285] device hsr_slave_1 entered promiscuous mode [ 55.926394][ T7285] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.942590][ T7287] team0: Port device team_slave_0 added [ 55.952686][ T7287] team0: Port device team_slave_1 added [ 56.019078][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.026205][ T7285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.033499][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.040621][ T7285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.063647][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 56.070268][ T7304] IPVS: ftp: loaded support on port[0] = 21 [ 56.166964][ T7287] device hsr_slave_0 entered promiscuous mode [ 56.215411][ T7287] device hsr_slave_1 entered promiscuous mode [ 56.235938][ T7287] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.280422][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.294260][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.342549][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 56.382560][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.389932][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.402235][ T7293] device bridge_slave_0 entered promiscuous mode [ 56.419854][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.445566][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.452759][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.465041][ T7293] device bridge_slave_1 entered promiscuous mode [ 56.491652][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.500280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.513779][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.580182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.593682][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.602748][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.609862][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.663021][ T7285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.680651][ T7285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.695470][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.722468][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.731513][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.743061][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.750151][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.763701][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.773277][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.786901][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.799938][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.810144][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.822314][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.832767][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.845433][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.854498][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.867670][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.878138][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.887728][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.897794][ T7295] device bridge_slave_0 entered promiscuous mode [ 56.907476][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.929514][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.968881][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 14:05:32 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 56.983651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.991965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.999941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.007873][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.015361][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.023477][ T7295] device bridge_slave_1 entered promiscuous mode [ 57.033873][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.042997][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.069242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.086625][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.108491][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.115611][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.126637][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.135350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.143549][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.150636][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.172619][ T7304] chnl_net:caif_netlink_parms(): no params data found [ 57.195992][ T7293] team0: Port device team_slave_0 added [ 57.203956][ T7287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.214935][ T7287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.226660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.237753][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.247076][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.260449][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.269553][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.282591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.291818][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.305106][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.313711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.326461][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.336928][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.349235][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.368472][ T7293] team0: Port device team_slave_1 added [ 57.392046][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.470309][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.483638][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.535750][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.647926][ T7293] device hsr_slave_0 entered promiscuous mode [ 57.802983][ T7293] device hsr_slave_1 entered promiscuous mode [ 57.846208][ T7293] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.041945][ T7295] team0: Port device team_slave_0 added [ 58.061415][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.071049][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.085606][ T7304] device bridge_slave_0 entered promiscuous mode 14:05:33 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 58.111763][ T7295] team0: Port device team_slave_1 added [ 58.118443][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.134998][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.143082][ T7304] device bridge_slave_1 entered promiscuous mode [ 58.242885][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 14:05:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x17, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x2c) [ 58.284934][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 14:05:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x17, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x2c) [ 58.327424][ T7295] device hsr_slave_0 entered promiscuous mode [ 58.358339][ T7295] device hsr_slave_1 entered promiscuous mode [ 58.424769][ T7295] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.496335][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.545811][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.566475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.574161][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:05:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x17, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x2c) 14:05:34 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 58.829523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.844374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.888597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.895753][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.951280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.980453][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.006176][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.013357][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.021723][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.035558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.051115][ T7350] FS-Cache: Duplicate cookie detected [ 59.056584][ T7350] FS-Cache: O-cookie c=000000004aef608e [p=000000006d881040 fl=222 nc=0 na=1] [ 59.065649][ T7350] FS-Cache: O-cookie d=00000000e34402b6 n=0000000000f00824 [ 59.072860][ T7350] FS-Cache: O-key=[10] '0200020000807f000008' [ 59.079054][ T7350] FS-Cache: N-cookie c=00000000fab4b0cc [p=000000006d881040 fl=2 nc=0 na=1] [ 59.087833][ T7350] FS-Cache: N-cookie d=00000000e34402b6 n=00000000136e32d7 [ 59.095105][ T7350] FS-Cache: N-key=[10] '0200020000807f000008' [ 59.140859][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 14:05:34 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fd) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 59.181963][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.202640][ T7304] team0: Port device team_slave_0 added [ 59.215707][ T7293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.235522][ T7293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.331600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.345207][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.366353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.376451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.385281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.394043][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.411158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.436674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.458390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.480265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.503608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.535695][ T7304] team0: Port device team_slave_1 added [ 59.571024][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 14:05:35 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 59.595815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.617841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.642883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.680386][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.687543][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.728347][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.767060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.782673][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.789825][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.805673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.818988][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.828241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.841232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.851217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.864127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.897464][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.925978][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.944153][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.966293][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.990380][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 14:05:35 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 60.028422][ T7295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.076342][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.102350][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.120302][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.120675][ T7365] FS-Cache: Duplicate cookie detected [ 60.133558][ T7365] FS-Cache: O-cookie c=00000000b7019d16 [p=000000006d881040 fl=222 nc=0 na=1] [ 60.142458][ T7365] FS-Cache: O-cookie d=00000000e34402b6 n=0000000000f00824 [ 60.149689][ T7365] FS-Cache: O-key=[10] '0200020000807f000008' [ 60.155904][ T7365] FS-Cache: N-cookie c=00000000df7ff284 [p=000000006d881040 fl=2 nc=0 na=1] [ 60.164625][ T7365] FS-Cache: N-cookie d=00000000e34402b6 n=00000000608aad1b [ 60.171848][ T7365] FS-Cache: N-key=[10] '0200020000807f000008' [ 60.210824][ T7295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.259510][ T7304] device hsr_slave_0 entered promiscuous mode [ 60.317413][ T7304] device hsr_slave_1 entered promiscuous mode [ 60.334660][ T7304] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.557445][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.676168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.695537][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.738790][ T7304] 8021q: adding VLAN 0 to HW filter on device team0 14:05:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 60.949924][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.996234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.057571][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.064731][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.119370][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.167604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.222214][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.229379][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.333022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.393921][ T7304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 14:05:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0x80000024) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r5, 0x402, 0x698b47966327f9d9) fcntl$setownex(r5, 0xf, &(0x7f0000000080)) sendfile(r3, r4, 0x0, 0x6052b11e) [ 61.455487][ T7304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.492656][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.501913][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.516701][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.571103][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.594010][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.627072][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.636187][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.664966][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.674997][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.683870][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.699283][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.708380][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.720521][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.920202][ T7401] input: syz0 as /devices/virtual/input/input5 [ 62.126395][ T7401] input: syz0 as /devices/virtual/input/input6 14:05:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 14:05:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 14:05:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 14:05:37 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fd) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 14:05:37 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 14:05:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0x80000024) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r5, 0x402, 0x698b47966327f9d9) fcntl$setownex(r5, 0xf, &(0x7f0000000080)) sendfile(r3, r4, 0x0, 0x6052b11e) 14:05:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 14:05:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0x80000024) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r5, 0x402, 0x698b47966327f9d9) fcntl$setownex(r5, 0xf, &(0x7f0000000080)) sendfile(r3, r4, 0x0, 0x6052b11e) 14:05:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 62.505367][ T7417] input: syz0 as /devices/virtual/input/input7 [ 63.250372][ T1515] ================================================================== [ 63.258569][ T1515] BUG: KCSAN: data-race in xprt_clear_locked / xprt_prepare_transmit [ 63.266609][ T1515] [ 63.268926][ T1515] read to 0xffff8881041a2cc0 of 8 bytes by task 7411 on cpu 0: [ 63.276454][ T1515] xprt_prepare_transmit+0x6c/0x120 [ 63.281640][ T1515] call_connect+0xfc/0x1a0 [ 63.286041][ T1515] __rpc_execute+0xf5/0x610 [ 63.290532][ T1515] rpc_execute+0x1b5/0x1c0 [ 63.294931][ T1515] rpc_run_task+0x379/0x440 [ 63.299426][ T1515] rpc_call_sync+0xa7/0x130 [ 63.303912][ T1515] rpc_create_xprt+0x376/0x3d0 [ 63.308659][ T1515] rpc_create+0x296/0x4a0 [ 63.312974][ T1515] nfs_create_rpc_client+0x348/0x3c0 [ 63.318258][ T1515] nfs_init_client+0x69/0xc0 [ 63.322862][ T1515] nfs_get_client+0x7a6/0x8c0 [ 63.327522][ T1515] nfs_init_server+0x1c0/0x790 [ 63.332269][ T1515] nfs_create_server+0xcc/0x3d0 [ 63.337119][ T1515] nfs_try_mount+0xa0/0x560 [ 63.341597][ T1515] [ 63.343914][ T1515] write to 0xffff8881041a2cc0 of 8 bytes by task 1515 on cpu 1: [ 63.351532][ T1515] xprt_clear_locked+0x24/0xb0 [ 63.356282][ T1515] __xprt_lock_write_next+0xb5/0xd0 [ 63.361463][ T1515] xprt_release_xprt+0x56/0x70 [ 63.366212][ T1515] xprt_autoclose+0x139/0x150 [ 63.370877][ T1515] process_one_work+0x3d4/0x890 [ 63.375722][ T1515] worker_thread+0xa0/0x800 [ 63.380223][ T1515] kthread+0x1d4/0x200 [ 63.384293][ T1515] ret_from_fork+0x1f/0x30 [ 63.388691][ T1515] [ 63.391006][ T1515] Reported by Kernel Concurrency Sanitizer on: [ 63.397144][ T1515] CPU: 1 PID: 1515 Comm: kworker/u5:0 Not tainted 5.3.0+ #0 [ 63.404412][ T1515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.414467][ T1515] Workqueue: xprtiod xprt_autoclose [ 63.419644][ T1515] ================================================================== [ 63.427683][ T1515] Kernel panic - not syncing: panic_on_warn set ... [ 63.434278][ T1515] CPU: 1 PID: 1515 Comm: kworker/u5:0 Not tainted 5.3.0+ #0 [ 63.441546][ T1515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.451589][ T1515] Workqueue: xprtiod xprt_autoclose [ 63.456776][ T1515] Call Trace: [ 63.460058][ T1515] dump_stack+0xf5/0x159 [ 63.464300][ T1515] panic+0x209/0x639 [ 63.468182][ T1515] ? vprintk_func+0x8d/0x140 [ 63.472764][ T1515] kcsan_report.cold+0x57/0xeb [ 63.477535][ T1515] __kcsan_setup_watchpoint+0x342/0x500 [ 63.483082][ T1515] __tsan_write8+0x32/0x40 [ 63.487492][ T1515] xprt_clear_locked+0x24/0xb0 [ 63.492249][ T1515] __xprt_lock_write_next+0xb5/0xd0 [ 63.497447][ T1515] xprt_release_xprt+0x56/0x70 [ 63.502196][ T1515] xprt_autoclose+0x139/0x150 [ 63.506863][ T1515] process_one_work+0x3d4/0x890 [ 63.511717][ T1515] worker_thread+0xa0/0x800 [ 63.516219][ T1515] kthread+0x1d4/0x200 [ 63.520274][ T1515] ? rescuer_thread+0x670/0x670 [ 63.525108][ T1515] ? kthread_bind+0x50/0x50 [ 63.529604][ T1515] ret_from_fork+0x1f/0x30 [ 63.535320][ T1515] Kernel Offset: disabled [ 63.539676][ T1515] Rebooting in 86400 seconds..