[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.346207][ T25] audit: type=1800 audit(1570551264.675:25): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 34.392710][ T25] audit: type=1800 audit(1570551264.685:26): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 34.416077][ T25] audit: type=1800 audit(1570551264.685:27): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.177' (ECDSA) to the list of known hosts. 2019/10/08 16:14:37 fuzzer started 2019/10/08 16:14:38 dialing manager at 10.128.0.105:44253 2019/10/08 16:14:38 syscalls: 2523 2019/10/08 16:14:38 code coverage: enabled 2019/10/08 16:14:38 comparison tracing: enabled 2019/10/08 16:14:38 extra coverage: extra coverage is not supported by the kernel 2019/10/08 16:14:38 setuid sandbox: enabled 2019/10/08 16:14:38 namespace sandbox: enabled 2019/10/08 16:14:38 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/08 16:14:38 fault injection: enabled 2019/10/08 16:14:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/08 16:14:38 net packet injection: enabled 2019/10/08 16:14:38 net device setup: enabled 2019/10/08 16:14:38 concurrency sanitizer: enabled 16:14:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) syzkaller login: [ 52.193783][ T7300] IPVS: ftp: loaded support on port[0] = 21 [ 52.280042][ T7300] chnl_net:caif_netlink_parms(): no params data found [ 52.318225][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state 16:14:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', 0x0, 0x2}) [ 52.325494][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.335070][ T7300] device bridge_slave_0 entered promiscuous mode [ 52.350443][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.357639][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.378273][ T7300] device bridge_slave_1 entered promiscuous mode [ 52.424418][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.450804][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.497982][ T7300] team0: Port device team_slave_0 added [ 52.519516][ T7300] team0: Port device team_slave_1 added 16:14:43 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 52.631393][ T7300] device hsr_slave_0 entered promiscuous mode [ 52.708532][ T7300] device hsr_slave_1 entered promiscuous mode [ 52.765284][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.772419][ T7300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.779760][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.786822][ T7300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.842054][ T7303] IPVS: ftp: loaded support on port[0] = 21 [ 52.864633][ T7305] IPVS: ftp: loaded support on port[0] = 21 [ 52.953682][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.985130][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.004767][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.023557][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.033101][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 16:14:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) [ 53.052070][ T7300] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.103508][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.118557][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.125616][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.171254][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.189107][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.196168][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.267760][ T7303] chnl_net:caif_netlink_parms(): no params data found [ 53.308125][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.317195][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.339531][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.348912][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.357795][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.367068][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.376228][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.385542][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.408349][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.438236][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.457979][ T7312] IPVS: ftp: loaded support on port[0] = 21 [ 53.481187][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.490565][ T7305] chnl_net:caif_netlink_parms(): no params data found 16:14:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f000035bfbc)={{}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}}) [ 53.528878][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.535949][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.552263][ T7303] device bridge_slave_0 entered promiscuous mode [ 53.581991][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.593491][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.619089][ T7303] device bridge_slave_1 entered promiscuous mode [ 53.679188][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.711994][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.740702][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.748127][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.761156][ T7305] device bridge_slave_0 entered promiscuous mode [ 53.778144][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.800938][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.819264][ T7305] device bridge_slave_1 entered promiscuous mode [ 53.888899][ T7303] team0: Port device team_slave_0 added [ 53.901761][ T7303] team0: Port device team_slave_1 added [ 53.937559][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.965238][ T7322] IPVS: ftp: loaded support on port[0] = 21 [ 53.981343][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 16:14:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) [ 54.051191][ T7303] device hsr_slave_0 entered promiscuous mode [ 54.088534][ T7303] device hsr_slave_1 entered promiscuous mode [ 54.138173][ T7303] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.196509][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 54.234730][ T7305] team0: Port device team_slave_0 added 16:14:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) [ 54.249504][ T7305] team0: Port device team_slave_1 added 16:14:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) [ 54.381340][ T7305] device hsr_slave_0 entered promiscuous mode [ 54.438472][ T7305] device hsr_slave_1 entered promiscuous mode [ 54.471283][ T7305] debugfs: Directory 'hsr0' with parent '/' already present! 16:14:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) [ 54.512889][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.521649][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.541856][ T7312] device bridge_slave_0 entered promiscuous mode [ 54.567214][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.595952][ T7334] IPVS: ftp: loaded support on port[0] = 21 [ 54.602170][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.609445][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.617474][ T7312] device bridge_slave_1 entered promiscuous mode [ 54.656529][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.690596][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.701695][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.712986][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.728760][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:14:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) [ 54.781933][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.792099][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.801676][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.808795][ T7306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.817926][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.838534][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.847039][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.854134][ T7306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.862625][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.872095][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.881210][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.911767][ T7322] chnl_net:caif_netlink_parms(): no params data found [ 54.928813][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.945220][ T7312] team0: Port device team_slave_0 added 16:14:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) [ 54.957164][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.966670][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.984885][ T7303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.000465][ T7303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.015162][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.034001][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.043313][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.052759][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.061939][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.071263][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.080159][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.116090][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.123519][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.131922][ T7322] device bridge_slave_0 entered promiscuous mode [ 55.140830][ T7312] team0: Port device team_slave_1 added [ 55.146606][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.154095][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.163220][ T7322] device bridge_slave_1 entered promiscuous mode [ 55.181365][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.194049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.202075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 16:14:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) [ 55.210581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.242108][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.270087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.307946][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.316917][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.324047][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.332137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.341111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.349713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.356763][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.364838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.375818][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.451448][ T7312] device hsr_slave_0 entered promiscuous mode [ 55.488738][ T7312] device hsr_slave_1 entered promiscuous mode [ 55.528375][ T7312] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.544173][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.556325][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.567046][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 16:14:45 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5421, 0xffffffffffffffff) [ 55.580282][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.632706][ T7305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.658878][ T7305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.691970][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.702558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.714239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.734987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.744198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.753366][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.762021][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.771207][ T7322] team0: Port device team_slave_0 added [ 55.813136][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.824232][ T7322] team0: Port device team_slave_1 added [ 55.901285][ T7322] device hsr_slave_0 entered promiscuous mode [ 55.958595][ T7322] device hsr_slave_1 entered promiscuous mode [ 55.998179][ T7322] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.011388][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.025936][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.042773][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.054219][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 56.078445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.086412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.109817][ T7312] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.158402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.167203][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.186824][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.194078][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.214607][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.226173][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.235357][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.242458][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.251213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.263898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.297830][ T7322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.320234][ T7312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.334014][ T7312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.371689][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.381698][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.405512][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.426312][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.452099][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.463342][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 16:14:46 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', 0x0, 0x2}) 16:14:46 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5421, 0xffffffffffffffff) [ 56.472533][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.482293][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.491295][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.515125][ T7322] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.537116][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.562889][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.573629][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.584757][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.594920][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.623587][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.638985][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.646124][ T7306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.654740][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.662535][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.678772][ T7334] device bridge_slave_0 entered promiscuous mode [ 56.694501][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.725518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.734392][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.749324][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.757663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.764726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.773451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.782564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.791569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.800811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.809745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.817889][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.826281][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.833436][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.841430][ T7334] device bridge_slave_1 entered promiscuous mode [ 56.866850][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.883506][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.894938][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.905900][ T7322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.937435][ T7334] team0: Port device team_slave_0 added [ 56.945338][ T7322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.963138][ T7334] team0: Port device team_slave_1 added 16:14:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) [ 57.061385][ T7334] device hsr_slave_0 entered promiscuous mode [ 57.108470][ T7334] device hsr_slave_1 entered promiscuous mode [ 57.148115][ T7334] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.247612][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.270393][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.298690][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.306809][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.316230][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 16:14:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f000035bfbc)={{}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}}) 16:14:47 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 57.347526][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.358025][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.378896][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.386027][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.433960][ T7334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.507823][ T7334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.551528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.562836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.572860][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.583375][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.590470][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.615841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.637865][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.658943][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.678665][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.693495][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.715282][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.724227][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 16:14:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) 16:14:48 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5421, 0xffffffffffffffff) 16:14:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', 0x0, 0x2}) 16:14:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) 16:14:48 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 16:14:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f000035bfbc)={{}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}}) 16:14:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', 0x0, 0x2}) 16:14:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f000035bfbc)={{}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}}) 16:14:48 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5421, 0xffffffffffffffff) 16:14:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) 16:14:48 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 16:14:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg(r1, &(0x7f0000004500), 0x40000000000033e, 0x0) 16:14:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f000035bfbc)={{}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}}) 16:14:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) 16:14:48 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) 16:14:48 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) 16:14:49 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', 0x0, 0x2}) 16:14:49 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) 16:14:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f000035bfbc)={{}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}}) 16:14:49 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', 0x0, 0x2}) 16:14:49 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) 16:14:49 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) 16:14:49 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', 0x0, 0x2}) 16:14:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f000035bfbc)={{}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}}) 16:14:49 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7a, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x14) tkill(r0, 0x1002000000016) [ 59.377764][ T7493] ================================================================== [ 59.385899][ T7493] BUG: KCSAN: data-race in ext4_free_inodes_count / ext4_free_inodes_set [ 59.394298][ T7493] [ 59.396639][ T7493] write to 0xffff88821ff8c04e of 2 bytes by task 7300 on cpu 1: [ 59.404268][ T7493] ext4_free_inodes_set+0x29/0x90 [ 59.409294][ T7493] ext4_free_inode+0x675/0xaa0 [ 59.414054][ T7493] ext4_evict_inode+0x9a9/0xdb0 [ 59.418898][ T7493] evict+0x244/0x410 [ 59.422785][ T7493] iput+0x362/0x4a0 [ 59.426590][ T7493] dentry_unlink_inode+0x27a/0x2f0 [ 59.431689][ T7493] d_delete+0xdb/0xe0 [ 59.435661][ T7493] vfs_rmdir+0x2e2/0x300 [ 59.439893][ T7493] do_rmdir+0x2cb/0x300 [ 59.444042][ T7493] __x64_sys_rmdir+0x2f/0x40 [ 59.448625][ T7493] do_syscall_64+0xcf/0x2f0 [ 59.453123][ T7493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.458996][ T7493] [ 59.461324][ T7493] read to 0xffff88821ff8c04e of 2 bytes by task 7493 on cpu 0: [ 59.468858][ T7493] ext4_free_inodes_count+0x26/0x90 [ 59.474052][ T7493] __ext4_new_inode+0xb9f/0x3070 [ 59.478983][ T7493] ext4_symlink+0x30e/0x970 [ 59.483478][ T7493] vfs_symlink+0x218/0x310 [ 59.487889][ T7493] do_symlinkat+0x1a5/0x1e0 [ 59.492391][ T7493] __x64_sys_symlink+0x3f/0x50 [ 59.497152][ T7493] do_syscall_64+0xcf/0x2f0 [ 59.501653][ T7493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.507526][ T7493] [ 59.509838][ T7493] Reported by Kernel Concurrency Sanitizer on: [ 59.515985][ T7493] CPU: 0 PID: 7493 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 59.523428][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.533471][ T7493] ================================================================== [ 59.541538][ T7493] Kernel panic - not syncing: panic_on_warn set ... [ 59.548120][ T7493] CPU: 0 PID: 7493 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 59.555563][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.565609][ T7493] Call Trace: [ 59.568896][ T7493] dump_stack+0xf5/0x159 [ 59.573149][ T7493] panic+0x209/0x639 [ 59.577072][ T7493] ? vprintk_func+0x8d/0x140 [ 59.581661][ T7493] kcsan_report.cold+0xc/0x1b [ 59.586335][ T7493] __kcsan_setup_watchpoint+0x3ee/0x510 [ 59.591883][ T7493] __tsan_read2+0x2c/0x30 [ 59.596219][ T7493] ext4_free_inodes_count+0x26/0x90 [ 59.601533][ T7493] __ext4_new_inode+0xb9f/0x3070 [ 59.606476][ T7493] ? __kcsan_setup_watchpoint+0x96/0x510 [ 59.612103][ T7493] ext4_symlink+0x30e/0x970 [ 59.616614][ T7493] vfs_symlink+0x218/0x310 [ 59.621031][ T7493] do_symlinkat+0x1a5/0x1e0 [ 59.625535][ T7493] __x64_sys_symlink+0x3f/0x50 [ 59.630289][ T7493] do_syscall_64+0xcf/0x2f0 [ 59.634795][ T7493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.640679][ T7493] RIP: 0033:0x459787 [ 59.644571][ T7493] Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.664171][ T7493] RSP: 002b:00007ffef13b9668 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 59.672585][ T7493] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459787 [ 59.680549][ T7493] RDX: 00007ffef13b9707 RSI: 00000000004bf2ec RDI: 00007ffef13b96f0 [ 59.688536][ T7493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000017 [ 59.696607][ T7493] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000 [ 59.704569][ T7493] R13: 00007ffef13b96a0 R14: 0000000000000000 R15: 00007ffef13b96b0 [ 59.713753][ T7493] Kernel Offset: disabled [ 59.718083][ T7493] Rebooting in 86400 seconds..