[ 53.966010][ T26] audit: type=1800 audit(1573196846.346:28): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 54.502712][ T7986] sshd (7986) used greatest stack depth: 10128 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.775003][ T26] audit: type=1800 audit(1573196847.226:29): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 54.796662][ T26] audit: type=1800 audit(1573196847.226:30): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2019/11/08 07:07:35 fuzzer started 2019/11/08 07:07:37 dialing manager at 10.128.0.105:41185 2019/11/08 07:07:37 syscalls: 2553 2019/11/08 07:07:37 code coverage: enabled 2019/11/08 07:07:37 comparison tracing: enabled 2019/11/08 07:07:37 extra coverage: extra coverage is not supported by the kernel 2019/11/08 07:07:37 setuid sandbox: enabled 2019/11/08 07:07:37 namespace sandbox: enabled 2019/11/08 07:07:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/08 07:07:37 fault injection: enabled 2019/11/08 07:07:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/08 07:07:37 net packet injection: enabled 2019/11/08 07:07:37 net device setup: enabled 2019/11/08 07:07:37 concurrency sanitizer: enabled 2019/11/08 07:07:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/11/08 07:07:37 adding functions to KCSAN blacklist: 'generic_permission' '__hrtimer_run_queues' 'tomoyo_supervisor' 'run_timer_softirq' 07:07:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000200)="1100000012005f0214f9f407000000000a", 0x11) 07:07:39 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x3) syzkaller login: [ 67.490672][ T8097] IPVS: ftp: loaded support on port[0] = 21 [ 67.585563][ T8097] chnl_net:caif_netlink_parms(): no params data found [ 67.618985][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.626180][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.634803][ T8097] device bridge_slave_0 entered promiscuous mode [ 67.642373][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.649905][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.659266][ T8097] device bridge_slave_1 entered promiscuous mode [ 67.696938][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.724436][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.747083][ T8097] team0: Port device team_slave_0 added [ 67.754825][ T8097] team0: Port device team_slave_1 added [ 67.780330][ T8100] IPVS: ftp: loaded support on port[0] = 21 07:07:40 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) ftruncate(r0, 0x0) [ 67.825400][ T8097] device hsr_slave_0 entered promiscuous mode [ 67.893850][ T8097] device hsr_slave_1 entered promiscuous mode [ 68.008352][ T8102] IPVS: ftp: loaded support on port[0] = 21 [ 68.021426][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.028595][ T8097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.036016][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.043128][ T8097] bridge0: port 1(bridge_slave_0) entered forwarding state 07:07:40 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) [ 68.353811][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.410665][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.444447][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.513952][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.534877][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.576813][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.603487][ T8100] chnl_net:caif_netlink_parms(): no params data found [ 68.708956][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.733653][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.773386][ T2850] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.780480][ T2850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.833921][ T8102] chnl_net:caif_netlink_parms(): no params data found [ 68.881149][ T8131] IPVS: ftp: loaded support on port[0] = 21 [ 68.915972][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.953015][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.960924][ T8100] device bridge_slave_0 entered promiscuous mode [ 68.998246][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.034587][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.074020][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.081432][ T8133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.165201][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.172515][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.210453][ T8100] device bridge_slave_1 entered promiscuous mode [ 69.236785][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 07:07:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x14, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 69.358011][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.374932][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.414564][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.455987][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.504017][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.544111][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.585592][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.618550][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.634953][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.662605][ T8102] device bridge_slave_0 entered promiscuous mode [ 69.686895][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.715934][ T8097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.740911][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.763763][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.775962][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.795774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.816240][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.823890][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.842348][ T8102] device bridge_slave_1 entered promiscuous mode [ 69.865159][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:07:42 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5) [ 69.920182][ T8138] IPVS: ftp: loaded support on port[0] = 21 [ 69.926318][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.959915][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.968010][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.049190][ T8102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.066009][ T8100] team0: Port device team_slave_0 added [ 70.073700][ T8100] team0: Port device team_slave_1 added [ 70.096707][ T8102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.140265][ T8102] team0: Port device team_slave_0 added [ 70.153980][ T8102] team0: Port device team_slave_1 added [ 70.166434][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 70.226236][ T8100] device hsr_slave_0 entered promiscuous mode [ 70.263428][ T8100] device hsr_slave_1 entered promiscuous mode [ 70.322967][ T8100] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.338112][ T8150] IPVS: ftp: loaded support on port[0] = 21 07:07:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000200)="1100000012005f0214f9f407000000000a", 0x11) [ 70.445351][ T8102] device hsr_slave_0 entered promiscuous mode [ 70.483276][ T8102] device hsr_slave_1 entered promiscuous mode [ 70.522998][ T8102] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.539356][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.552973][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.561301][ T8131] device bridge_slave_0 entered promiscuous mode [ 70.653772][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.661207][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.683756][ T8131] device bridge_slave_1 entered promiscuous mode [ 70.698345][ T8138] chnl_net:caif_netlink_parms(): no params data found 07:07:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000200)="1100000012005f0214f9f407000000000a", 0x11) [ 70.884876][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.003089][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.082975][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.090063][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.143833][ T8138] device bridge_slave_0 entered promiscuous mode [ 71.223876][ T8131] team0: Port device team_slave_0 added [ 71.237292][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state 07:07:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000200)="1100000012005f0214f9f407000000000a", 0x11) [ 71.277457][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.313910][ T8138] device bridge_slave_1 entered promiscuous mode [ 71.404603][ T8102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.416552][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.444717][ T8131] team0: Port device team_slave_1 added [ 71.504536][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.567795][ T8102] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.590026][ T8100] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.643534][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.656651][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.703480][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.753555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 07:07:44 executing program 0: writev(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x13, 0x803, 0xfc) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040004,user_il=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}], [{@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@measure='measure'}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) ioctl$RTC_UIE_OFF(r6, 0x7004) write$UHID_CREATE2(r5, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) lstat(0x0, &(0x7f0000002980)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x0, 0x0}, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) [ 71.794980][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.853104][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 71.923076][ T8131] device hsr_slave_0 entered promiscuous mode [ 71.955729][ T8131] device hsr_slave_1 entered promiscuous mode [ 71.962597][ T8212] mmap: syz-executor.0 (8212) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 72.013125][ T8131] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.037280][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.063541][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.113184][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.120536][ T8124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.139302][ C0] hrtimer: interrupt took 36668 ns [ 72.200764][ T8212] 9pnet: Insufficient options for proto=fd [ 72.203529][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.287155][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.303393][ T8212] fuse: Unknown parameter 'user_il' [ 72.317171][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.324287][ T8124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.344057][ T8213] 9pnet: Insufficient options for proto=fd [ 72.373644][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.403611][ T8213] 9pnet: Insufficient options for proto=fd [ 72.414072][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.454293][ T8216] fuse: Unknown parameter 'user_il' [ 72.473831][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.499933][ T8212] 9pnet: Insufficient options for proto=fd [ 72.543615][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.583840][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.643708][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 07:07:45 executing program 0: writev(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x13, 0x803, 0xfc) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040004,user_il=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}], [{@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@measure='measure'}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) ioctl$RTC_UIE_OFF(r6, 0x7004) write$UHID_CREATE2(r5, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) lstat(0x0, &(0x7f0000002980)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x0, 0x0}, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) [ 72.692954][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.702103][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.794835][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.802161][ T8124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.916804][ T8220] 9pnet: Insufficient options for proto=fd [ 72.923780][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.963411][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.025928][ T8222] fuse: Unknown parameter 'user_il' [ 73.036721][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.044028][ T8124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.075956][ T8222] 9pnet: Insufficient options for proto=fd [ 73.182674][ T8102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.232953][ T8102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 07:07:45 executing program 0: writev(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x13, 0x803, 0xfc) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040004,user_il=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}], [{@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@measure='measure'}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) ioctl$RTC_UIE_OFF(r6, 0x7004) write$UHID_CREATE2(r5, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) lstat(0x0, &(0x7f0000002980)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x0, 0x0}, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) [ 73.322553][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.369175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.434157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.478117][ T8233] 9pnet: Insufficient options for proto=fd [ 73.513461][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.555937][ T8230] fuse: Unknown parameter 'user_il' [ 73.563582][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.623819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.644661][ T8230] 9pnet: Insufficient options for proto=fd [ 73.678241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.745515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 07:07:46 executing program 0: writev(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x13, 0x803, 0xfc) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040004,user_il=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}], [{@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@measure='measure'}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) ioctl$RTC_UIE_OFF(r6, 0x7004) write$UHID_CREATE2(r5, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) lstat(0x0, &(0x7f0000002980)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x0, 0x0}, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) [ 73.817734][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.883172][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.891893][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.984185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.992813][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.043562][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.051557][ T8240] 9pnet: Insufficient options for proto=fd [ 74.074206][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.082826][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.165299][ T8240] fuse: Unknown parameter 'user_il' [ 74.183610][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.219882][ T8138] team0: Port device team_slave_0 added [ 74.223492][ T8240] 9pnet: Insufficient options for proto=fd [ 74.259369][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.319703][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.360702][ T8138] team0: Port device team_slave_1 added [ 74.401383][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.432336][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.478106][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.553341][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.623254][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.633544][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.656766][ T8150] device bridge_slave_0 entered promiscuous mode [ 74.805825][ T8138] device hsr_slave_0 entered promiscuous mode [ 74.837977][ T8138] device hsr_slave_1 entered promiscuous mode [ 74.903027][ T8138] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.910584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.933158][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.942715][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.965606][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.972757][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.995815][ T8150] device bridge_slave_1 entered promiscuous mode [ 75.095800][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.158969][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.204191][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.222378][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.300184][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.376560][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.392113][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.467874][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.475116][ T8133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.581158][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.643637][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.703339][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.710426][ T8133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.797840][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.838227][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.906967][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.971946][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.075270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.095363][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.158450][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.211581][ T8150] team0: Port device team_slave_0 added [ 76.232962][ T8150] team0: Port device team_slave_1 added [ 76.283306][ T8131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 07:07:48 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x3) 07:07:48 executing program 0: writev(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x64734a2e, 0x20000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x13, 0x803, 0xfc) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040004,user_il=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}], [{@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@measure='measure'}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) ioctl$RTC_UIE_OFF(r6, 0x7004) write$UHID_CREATE2(r5, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000bc0), 0x9) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) lstat(0x0, &(0x7f0000002980)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x0, 0x0}, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) [ 76.403059][ T8131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.536170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.560153][ T8313] 9pnet: Insufficient options for proto=fd [ 76.596855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.631615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.657842][ T8313] fuse: Unknown parameter 'user_il' [ 76.703694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.753389][ T8309] 9pnet: Insufficient options for proto=fd [ 76.762480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.839797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.945217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.997562][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.085496][ T8150] device hsr_slave_0 entered promiscuous mode [ 77.113275][ T8150] device hsr_slave_1 entered promiscuous mode [ 77.153010][ T8150] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.163914][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.183226][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.207738][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.322036][ T8138] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.377260][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.407453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.553001][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.561734][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.653480][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.660830][ T8132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.717576][ T8351] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.767630][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.807326][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.853566][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.860663][ T8132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.949089][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.014580][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.107959][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.159126][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.219721][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.287743][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.350558][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.410620][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.465696][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.522572][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.589383][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.644081][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.719812][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.780991][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.827204][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.843192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.887236][ T8138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.973780][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.981658][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.032535][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.057464][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.093801][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.102210][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.109392][ T8132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.214172][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.222135][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.263687][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.272384][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.279498][ T8133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.343606][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.352835][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.404223][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.432391][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.454154][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.469648][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.507353][ T8150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.520340][ T8150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.539166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.549353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.560812][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.587257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.597702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 07:07:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) [ 79.618615][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.629371][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.638953][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.651101][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.929470][ T8347] ================================================================== [ 79.937654][ T8347] BUG: KCSAN: data-race in do_nanosleep / do_task_stat [ 79.944497][ T8347] [ 79.946839][ T8347] write to 0xffff88812a22d024 of 4 bytes by task 8131 on cpu 0: [ 79.954481][ T8347] do_nanosleep+0x14d/0x320 [ 79.959104][ T8347] hrtimer_nanosleep+0x191/0x320 [ 79.964052][ T8347] __x64_sys_nanosleep+0x106/0x150 [ 79.969179][ T8347] do_syscall_64+0xcc/0x370 [ 79.973701][ T8347] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 79.979580][ T8347] [ 79.981917][ T8347] read to 0xffff88812a22d024 of 4 bytes by task 8347 on cpu 1: [ 79.989477][ T8347] do_task_stat+0x131/0x1370 [ 79.994082][ T8347] proc_tgid_stat+0x3d/0x60 [ 79.998597][ T8347] proc_single_show+0x89/0xe0 [ 80.003295][ T8347] seq_read+0x350/0x960 [ 80.007458][ T8347] __vfs_read+0x67/0xc0 [ 80.011626][ T8347] vfs_read+0x143/0x2c0 [ 80.016070][ T8347] ksys_read+0xd5/0x1b0 [ 80.020273][ T8347] __x64_sys_read+0x4c/0x60 [ 80.024800][ T8347] do_syscall_64+0xcc/0x370 [ 80.029329][ T8347] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 80.035209][ T8347] [ 80.037532][ T8347] Reported by Kernel Concurrency Sanitizer on: [ 80.043696][ T8347] CPU: 1 PID: 8347 Comm: ps Not tainted 5.4.0-rc6+ #0 [ 80.050458][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.060530][ T8347] ================================================================== [ 80.068595][ T8347] Kernel panic - not syncing: panic_on_warn set ... [ 80.075198][ T8347] CPU: 1 PID: 8347 Comm: ps Not tainted 5.4.0-rc6+ #0 [ 80.081958][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.092006][ T8347] Call Trace: [ 80.095321][ T8347] dump_stack+0xf5/0x159 [ 80.099573][ T8347] panic+0x210/0x640 [ 80.103491][ T8347] ? vprintk_func+0x8d/0x140 [ 80.108106][ T8347] kcsan_report.cold+0xc/0xe [ 80.112712][ T8347] kcsan_setup_watchpoint+0x3fe/0x410 [ 80.118103][ T8347] __tsan_read4+0x145/0x1f0 [ 80.122626][ T8347] do_task_stat+0x131/0x1370 [ 80.127322][ T8347] ? __rcu_read_unlock+0x66/0x3c0 [ 80.132367][ T8347] ? should_fail+0xd4/0x45d [ 80.136897][ T8347] ? __rcu_read_unlock+0x66/0x3c0 [ 80.141941][ T8347] proc_tgid_stat+0x3d/0x60 [ 80.146466][ T8347] proc_single_show+0x89/0xe0 [ 80.151158][ T8347] seq_read+0x350/0x960 [ 80.155482][ T8347] ? security_file_permission+0x88/0x280 [ 80.161152][ T8347] __vfs_read+0x67/0xc0 [ 80.165325][ T8347] ? seq_hlist_start_head_rcu+0x60/0x60 [ 80.170889][ T8347] vfs_read+0x143/0x2c0 [ 80.175068][ T8347] ksys_read+0xd5/0x1b0 [ 80.179242][ T8347] __x64_sys_read+0x4c/0x60 [ 80.183790][ T8347] do_syscall_64+0xcc/0x370 [ 80.188489][ T8347] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 80.194391][ T8347] RIP: 0033:0x7f70cc1f3310 [ 80.198829][ T8347] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 80.218442][ T8347] RSP: 002b:00007ffd8f46cb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.226869][ T8347] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f70cc1f3310 [ 80.234861][ T8347] RDX: 0000000000000fff RSI: 00007f70cc6c0d00 RDI: 0000000000000006 [ 80.244148][ T8347] RBP: 0000000000000fff R08: 0000000000000000 R09: 00007f70cc4bba10 [ 80.252131][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f70cc6c0d00 [ 80.260115][ T8347] R13: 000000000099c1c0 R14: 0000000000000005 R15: 0000000000000000 [ 80.269385][ T8347] Kernel Offset: disabled [ 80.273734][ T8347] Rebooting in 86400 seconds..