[ 42.464716][ T26] audit: type=1800 audit(1575950952.574:21): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 42.491170][ T26] audit: type=1800 audit(1575950952.574:22): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[ 43.034455][ T7509] rsyslogd (7509) used greatest stack depth: 10128 bytes left [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts. 2019/12/10 04:09:23 fuzzer started 2019/12/10 04:09:26 dialing manager at 10.128.0.105:43773 2019/12/10 04:09:26 syscalls: 2689 2019/12/10 04:09:26 code coverage: enabled 2019/12/10 04:09:26 comparison tracing: enabled 2019/12/10 04:09:26 extra coverage: extra coverage is not supported by the kernel 2019/12/10 04:09:26 setuid sandbox: enabled 2019/12/10 04:09:26 namespace sandbox: enabled 2019/12/10 04:09:26 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/10 04:09:26 fault injection: enabled 2019/12/10 04:09:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/10 04:09:26 net packet injection: enabled 2019/12/10 04:09:26 net device setup: enabled 2019/12/10 04:09:26 concurrency sanitizer: enabled 2019/12/10 04:09:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/12/10 04:09:28 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'ext4_nonda_switch' 'tick_do_update_jiffies64' 'run_timer_softirq' 'find_next_bit' 'blk_mq_get_request' 'generic_fillattr' 'tcp_add_backlog' '__splice_from_pipe' 'ep_poll' 'find_get_pages_range_tag' '__delete_from_page_cache' 'blk_mq_dispatch_rq_list' 'tomoyo_supervisor' 'taskstats_exit' 'wbt_done' 'do_nanosleep' 04:09:34 executing program 0: io_setup(0x9, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x8, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="100000000600"/16, 0x10}]) 04:09:34 executing program 1: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000380)={0x0}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={r1, 0x6def7f441c98454f}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000004c0)=0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194cf5d912e2249d01df96b530978d73e591622040bd56f90000002d008801cf03"], 0x15) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x60e442, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) syzkaller login: [ 64.882503][ T7647] IPVS: ftp: loaded support on port[0] = 21 [ 64.954505][ T7649] IPVS: ftp: loaded support on port[0] = 21 [ 65.024965][ T7647] chnl_net:caif_netlink_parms(): no params data found 04:09:35 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000240)={0x7ff}) [ 65.089342][ T7649] chnl_net:caif_netlink_parms(): no params data found [ 65.099519][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.106590][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.114822][ T7647] device bridge_slave_0 entered promiscuous mode [ 65.138105][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.155064][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.169057][ T7647] device bridge_slave_1 entered promiscuous mode [ 65.224573][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.248389][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.255482][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.275161][ T7649] device bridge_slave_0 entered promiscuous mode [ 65.283826][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.293192][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.303897][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.312057][ T7649] device bridge_slave_1 entered promiscuous mode [ 65.350984][ T7653] IPVS: ftp: loaded support on port[0] = 21 [ 65.360327][ T7647] team0: Port device team_slave_0 added [ 65.367620][ T7647] team0: Port device team_slave_1 added [ 65.385615][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.396217][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:09:35 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x10, 0x0}, 0x10) [ 65.434955][ T7649] team0: Port device team_slave_0 added [ 65.480260][ T7647] device hsr_slave_0 entered promiscuous mode [ 65.508550][ T7647] device hsr_slave_1 entered promiscuous mode [ 65.580993][ T7649] team0: Port device team_slave_1 added [ 65.592959][ T7655] IPVS: ftp: loaded support on port[0] = 21 [ 65.640144][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.647244][ T7647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.654671][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.661731][ T7647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.791110][ T7649] device hsr_slave_0 entered promiscuous mode [ 65.829432][ T7649] device hsr_slave_1 entered promiscuous mode [ 65.869216][ T7649] debugfs: Directory 'hsr0' with parent '/' already present! 04:09:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000a00000a1f00000a002808000800180006000500280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) [ 65.946566][ T7653] chnl_net:caif_netlink_parms(): no params data found [ 66.037091][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.114557][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.160620][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.199902][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.272922][ T7647] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.298921][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.306051][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.318354][ T7653] device bridge_slave_0 entered promiscuous mode [ 66.372854][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.416873][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.538539][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.545684][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.599146][ T7653] device bridge_slave_1 entered promiscuous mode [ 66.659545][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.690042][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.730209][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.737279][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.818759][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.869938][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.909985][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.917252][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.988856][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.030336][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 04:09:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) getgid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) fchown(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(0x0, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80000) [ 67.152234][ T7701] IPVS: ftp: loaded support on port[0] = 21 [ 67.164825][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.210372][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.240217][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.290471][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.339125][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.378727][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.441032][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.490096][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.546448][ T7647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.584696][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.640952][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.650998][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.700380][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.757548][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.816103][ T7709] IPVS: ftp: loaded support on port[0] = 21 [ 67.839744][ T7655] chnl_net:caif_netlink_parms(): no params data found [ 67.889765][ T7647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.902829][ T7649] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.919151][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.926621][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.956204][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.980426][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.989290][ T7653] team0: Port device team_slave_0 added [ 68.010537][ T7653] team0: Port device team_slave_1 added [ 68.027484][ T7649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.088325][ T7649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.115963][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.130159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.148923][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.155991][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.178746][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.205855][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.222688][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.229811][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.241629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.250531][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.259629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.268035][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.276876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.285676][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.294496][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.303137][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.311422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.320131][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.328649][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.337014][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.345190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.450429][ T7653] device hsr_slave_0 entered promiscuous mode [ 68.488559][ T7653] device hsr_slave_1 entered promiscuous mode [ 68.538621][ T7653] debugfs: Directory 'hsr0' with parent '/' already present! [ 68.563308][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.572093][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.579963][ T7655] device bridge_slave_0 entered promiscuous mode [ 68.587144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.596185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.609560][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 68.619706][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.626844][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.636131][ T7655] device bridge_slave_1 entered promiscuous mode [ 68.694501][ T7655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.710569][ T7655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.737388][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.757467][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.766754][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.775783][ T7701] device bridge_slave_0 entered promiscuous mode 04:09:39 executing program 0: io_setup(0x9, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x8, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="100000000600"/16, 0x10}]) [ 68.850662][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.864429][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.919698][ T7701] device bridge_slave_1 entered promiscuous mode [ 68.980317][ T7655] team0: Port device team_slave_0 added [ 69.003003][ T7655] team0: Port device team_slave_1 added [ 69.032038][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 69.107201][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 04:09:39 executing program 0: io_setup(0x9, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x8, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="100000000600"/16, 0x10}]) [ 69.149729][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.240594][ T7655] device hsr_slave_0 entered promiscuous mode [ 69.272274][ T7655] device hsr_slave_1 entered promiscuous mode [ 69.321082][ T7655] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.361834][ T7701] team0: Port device team_slave_0 added [ 69.409659][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.428330][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.436110][ T7709] device bridge_slave_0 entered promiscuous mode 04:09:39 executing program 0: io_setup(0x9, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x8, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="100000000600"/16, 0x10}]) [ 69.479251][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.487462][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.519157][ T7709] device bridge_slave_1 entered promiscuous mode [ 69.568345][ T7701] team0: Port device team_slave_1 added [ 69.720484][ T7701] device hsr_slave_0 entered promiscuous mode [ 69.758554][ T7701] device hsr_slave_1 entered promiscuous mode [ 69.802676][ T7701] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.820268][ C0] hrtimer: interrupt took 25731 ns [ 69.857685][ T7653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.893109][ T7709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.973330][ T7653] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.043392][ T7709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:09:40 executing program 0: io_setup(0x9, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x8, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="100000000600"/16, 0x10}]) [ 70.229176][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.268699][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.373610][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.418696][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.427088][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.434165][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.546576][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 70.546593][ T26] audit: type=1804 audit(1575950980.644:31): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir973299270/syzkaller.qX98h2/0/file0/file0" dev="loop1" ino=23 res=1 [ 70.608939][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.617542][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.828674][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.835792][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state 04:09:41 executing program 1: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000380)={0x0}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={r1, 0x6def7f441c98454f}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000004c0)=0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194cf5d912e2249d01df96b530978d73e591622040bd56f90000002d008801cf03"], 0x15) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x60e442, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 70.918919][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.979110][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.061323][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.135578][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.244731][ T7653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.329546][ T7653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.444303][ T7709] team0: Port device team_slave_0 added [ 71.455442][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.472181][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.536183][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 04:09:41 executing program 0: io_setup(0x9, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x8, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="100000000600"/16, 0x10}]) [ 71.628619][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.712895][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.769878][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.810870][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.868975][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.921896][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.949849][ T7709] team0: Port device team_slave_1 added [ 71.976480][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.076564][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.091407][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.170566][ T7709] device hsr_slave_0 entered promiscuous mode 04:09:42 executing program 0: io_setup(0x9, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x8, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="100000000600"/16, 0x10}]) 04:09:42 executing program 1: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000380)={0x0}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={r1, 0x6def7f441c98454f}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000004c0)=0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240380, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194cf5d912e2249d01df96b530978d73e591622040bd56f90000002d008801cf03"], 0x15) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x60e442, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) [ 72.228596][ T7709] device hsr_slave_1 entered promiscuous mode [ 72.267455][ T7709] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.316196][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.410851][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.422624][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.480394][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.554763][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.639356][ T7655] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.699557][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.707840][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.828279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.836925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.991296][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.998441][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.118862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.212161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.288633][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.295919][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.408975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.482556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.550351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.610946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.681710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.755630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.829162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.841592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.928739][ T7701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.988792][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.062677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.084105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.129145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.174957][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 04:09:44 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000240)={0x7ff}) [ 74.217528][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.224819][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.304149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.342346][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.369614][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.376675][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.428898][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.438015][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.499218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.507565][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.540403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.558609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.591256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.643284][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.699120][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.710623][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.718026][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.748405][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.765870][ T7885] ================================================================== [ 74.773993][ T7885] BUG: KCSAN: data-race in may_open.isra.0 / pid_update_inode [ 74.781436][ T7885] [ 74.781536][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.783781][ T7885] read to 0xffff888129694ac8 of 2 bytes by task 7881 on cpu 0: [ 74.799106][ T7885] may_open.isra.0+0x4a/0x250 [ 74.803783][ T7885] path_openat+0xf05/0x36e0 [ 74.808286][ T7885] do_filp_open+0x11e/0x1b0 [ 74.809367][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.812819][ T7885] do_sys_open+0x3b3/0x4f0 [ 74.825004][ T7885] __x64_sys_open+0x55/0x70 [ 74.829514][ T7885] do_syscall_64+0xcc/0x370 [ 74.834033][ T7885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 74.840865][ T7885] [ 74.843199][ T7885] write to 0xffff888129694ac8 of 2 bytes by task 7885 on cpu 1: [ 74.850838][ T7885] pid_update_inode+0x51/0x70 [ 74.855622][ T7885] pid_revalidate+0x91/0xd0 [ 74.860130][ T7885] lookup_fast+0x618/0x700 [ 74.862440][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.864554][ T7885] path_openat+0x2ac/0x36e0 [ 74.876743][ T7885] do_filp_open+0x11e/0x1b0 [ 74.881262][ T7885] do_sys_open+0x3b3/0x4f0 [ 74.885680][ T7885] __x64_sys_open+0x55/0x70 [ 74.890188][ T7885] do_syscall_64+0xcc/0x370 [ 74.894694][ T7885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 74.900570][ T7885] [ 74.902883][ T7885] Reported by Kernel Concurrency Sanitizer on: [ 74.909042][ T7885] CPU: 1 PID: 7885 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 74.916233][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.926287][ T7885] ================================================================== [ 74.934360][ T7885] Kernel panic - not syncing: panic_on_warn set ... [ 74.940956][ T7885] CPU: 1 PID: 7885 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 74.948157][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.958204][ T7885] Call Trace: [ 74.961501][ T7885] dump_stack+0x11d/0x181 [ 74.965835][ T7885] panic+0x210/0x640 [ 74.969734][ T7885] ? vprintk_func+0x8d/0x140 [ 74.974349][ T7885] kcsan_report.cold+0xc/0xd [ 74.978968][ T7885] kcsan_setup_watchpoint+0x3fe/0x460 [ 74.984349][ T7885] __tsan_unaligned_write2+0xc4/0x100 [ 74.989715][ T7885] pid_update_inode+0x51/0x70 [ 74.994478][ T7885] pid_revalidate+0x91/0xd0 [ 74.998984][ T7885] lookup_fast+0x618/0x700 [ 75.003407][ T7885] path_openat+0x2ac/0x36e0 [ 75.007943][ T7885] ? proc_pid_status+0xee1/0x1000 [ 75.013171][ T7885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 75.019412][ T7885] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 75.025311][ T7885] ? __read_once_size+0x41/0xe0 [ 75.030171][ T7885] do_filp_open+0x11e/0x1b0 [ 75.034677][ T7885] ? __alloc_fd+0x2ef/0x3b0 [ 75.039191][ T7885] do_sys_open+0x3b3/0x4f0 [ 75.043615][ T7885] __x64_sys_open+0x55/0x70 [ 75.048117][ T7885] do_syscall_64+0xcc/0x370 [ 75.052624][ T7885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 75.058523][ T7885] RIP: 0033:0x7fbb5813e120 [ 75.062945][ T7885] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 75.082670][ T7885] RSP: 002b:00007ffd284af518 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 75.091103][ T7885] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007fbb5813e120 [ 75.099096][ T7885] RDX: 00007ffd284af552 RSI: 0000000000000000 RDI: 00007ffd284af540 [ 75.107240][ T7885] RBP: 0000000000020000 R08: 0000000000000000 R09: 00007fbb5840655f [ 75.115403][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000019e2220 [ 75.123371][ T7885] R13: 0000000000000020 R14: 00007fbb587f3010 R15: 0000000000000000 [ 75.132864][ T7885] Kernel Offset: disabled [ 75.137209][ T7885] Rebooting in 86400 seconds..