Warning: Permanently added '10.128.0.150' (ECDSA) to the list of known hosts. 2020/01/16 16:36:35 fuzzer started 2020/01/16 16:36:37 dialing manager at 10.128.0.105:44889 2020/01/16 16:36:37 syscalls: 2836 2020/01/16 16:36:37 code coverage: enabled 2020/01/16 16:36:37 comparison tracing: enabled 2020/01/16 16:36:37 extra coverage: enabled 2020/01/16 16:36:37 setuid sandbox: enabled 2020/01/16 16:36:37 namespace sandbox: enabled 2020/01/16 16:36:37 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/16 16:36:37 fault injection: enabled 2020/01/16 16:36:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/16 16:36:37 net packet injection: enabled 2020/01/16 16:36:37 net device setup: enabled 2020/01/16 16:36:37 concurrency sanitizer: enabled 2020/01/16 16:36:37 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 72.728694][ T8022] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/16 16:36:46 adding functions to KCSAN blacklist: 'tick_do_update_jiffies64' 'file_update_time' 'dd_has_work' 'tomoyo_supervisor' 'do_nanosleep' 'ext4_mb_good_group' '__ext4_new_inode' 'echo_char' '__perf_event_overflow' 'tick_nohz_idle_stop_tick' 'n_tty_receive_buf_common' '__hrtimer_run_queues' '__snd_rawmidi_transmit_ack' 'smpboot_thread_fn' 'poll_schedule_timeout' 'generic_fillattr' 'sit_tunnel_xmit' 'page_counter_try_charge' 'ext4_free_inode' 'find_get_pages_range_tag' 'ext4_free_inodes_count' 'tick_sched_do_timer' 'rcu_gp_fqs_loop' 'mod_timer' 'run_timer_softirq' 'process_srcu' '__mark_inode_dirty' 'pid_update_inode' 'ep_poll' 'rcu_gp_fqs_check_wake' 'common_perm_cond' 'add_timer' 'kauditd_thread' '__skb_try_recv_from_queue' 'ext4_mark_iloc_dirty' 'mm_update_next_owner' 'install_new_memslots' 'xas_find_marked' 'blk_mq_get_request' 'taskstats_exit' 'pcpu_alloc' 'audit_log_start' 'blk_mq_run_hw_queue' 'generic_write_end' 'blk_mq_dispatch_rq_list' 'copy_process' 'kvm_mmu_notifier_change_pte' 'blk_mq_sched_dispatch_requests' 'xas_clear_mark' '__delete_from_page_cache' 'ext4_has_free_clusters' 'vm_area_dup' 'delete_from_page_cache_batch' '__add_to_page_cache_locked' 'find_next_bit' 'wbt_issue' 'ktime_get_real_seconds' 'ext4_nonda_switch' 'do_syslog' 'filemap_map_pages' '__d_lookup_done' 'shmem_file_read_iter' 'futex_wait_queue_me' 16:40:03 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x141a82) r0 = memfd_create(0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0xe3) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) read$eventfd(r1, 0x0, 0x0) fallocate(r0, 0x800000000000003, 0xfa9, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000002c0)=""/106) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) msgsnd(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000000a398e6a9fc2ad063d9ded8d7b6e6b44100009deebf1a78f934068d3cf07b681e10d8052c7a9758bbabf9248f56b0dc9a3d21591f4c20f3d931cc7aa76f1321fa282c3de8dffeec681e8abe74ffc1134c022d09e7c0979efaf020b4f006f94884315e5199d83d0908975ca97e5b1f8cc20c63bbfc57abc65b42467921894de863661595a4c6c11b52ad0051d044cbdd9d4ca644711abfe6eea53c5db304c789e016ad91b48f35cdb500bda671470323122fd873975a45adc1806e4d6d647637f45d9450ec902703062ea3a540221f044f8258c45aa32d"], 0xa7, 0x800) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x832}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x800fe) stat(&(0x7f0000002300)='./bus\x00', &(0x7f0000002340)) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x41) sendfile(r5, r6, 0x0, 0x8000fffffffe) 16:40:03 executing program 1: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) r2 = creat(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) fsetxattr$system_posix_acl(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket(0x10, 0x0, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000003c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000cab000)=0x5aa297dfa92e1053) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 276.036456][ T8026] IPVS: ftp: loaded support on port[0] = 21 [ 276.171794][ T8026] chnl_net:caif_netlink_parms(): no params data found 16:40:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') pipe(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) clone(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x8, 0xfffffffff7fffffb, 0x4}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x200, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0x6}}, 0xe8) shmget(0x2, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) [ 276.213934][ T8029] IPVS: ftp: loaded support on port[0] = 21 [ 276.221311][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.232703][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.241514][ T8026] device bridge_slave_0 entered promiscuous mode [ 276.261991][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.286086][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.294369][ T8026] device bridge_slave_1 entered promiscuous mode [ 276.358187][ T8026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.384661][ T8026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.388024][ T8031] IPVS: ftp: loaded support on port[0] = 21 [ 276.439496][ T8029] chnl_net:caif_netlink_parms(): no params data found [ 276.453599][ T8026] team0: Port device team_slave_0 added [ 276.477426][ T8026] team0: Port device team_slave_1 added 16:40:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000300)) [ 276.557825][ T8026] device hsr_slave_0 entered promiscuous mode [ 276.606974][ T8026] device hsr_slave_1 entered promiscuous mode [ 276.696173][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.703307][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.722284][ T8029] device bridge_slave_0 entered promiscuous mode [ 276.747935][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.755127][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.763240][ T8029] device bridge_slave_1 entered promiscuous mode [ 276.838815][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.867273][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 16:40:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) io_setup(0xb, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x1}) creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe216}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) [ 276.889055][ T8031] chnl_net:caif_netlink_parms(): no params data found [ 276.893348][ T8034] IPVS: ftp: loaded support on port[0] = 21 [ 276.957291][ T8026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.005659][ T8026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.058398][ T8029] team0: Port device team_slave_0 added [ 277.076339][ T8026] netdevsim netdevsim0 netdevsim2: renamed from eth2 16:40:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) [ 277.120491][ T8026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.188794][ T8029] team0: Port device team_slave_1 added [ 277.210373][ T8037] IPVS: ftp: loaded support on port[0] = 21 [ 277.297529][ T8029] device hsr_slave_0 entered promiscuous mode [ 277.356060][ T8029] device hsr_slave_1 entered promiscuous mode [ 277.395671][ T8029] debugfs: Directory 'hsr0' with parent '/' already present! [ 277.413576][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.420752][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.428869][ T8031] device bridge_slave_0 entered promiscuous mode [ 277.443176][ T8040] IPVS: ftp: loaded support on port[0] = 21 [ 277.458161][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.466025][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.473938][ T8031] device bridge_slave_1 entered promiscuous mode [ 277.499641][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.512504][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.578523][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 277.605225][ T8031] team0: Port device team_slave_0 added [ 277.612196][ T8031] team0: Port device team_slave_1 added [ 277.648461][ T8029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.689777][ T8029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.751906][ T8029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.840004][ T8029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.888717][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.895862][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.903770][ T8034] device bridge_slave_0 entered promiscuous mode [ 277.967592][ T8031] device hsr_slave_0 entered promiscuous mode [ 277.996079][ T8031] device hsr_slave_1 entered promiscuous mode [ 278.036013][ T8031] debugfs: Directory 'hsr0' with parent '/' already present! [ 278.060591][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 278.069719][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.077281][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.085288][ T8034] device bridge_slave_1 entered promiscuous mode [ 278.126240][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 278.152959][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.170733][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.200591][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.226056][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.250675][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.258091][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.266110][ T8040] device bridge_slave_0 entered promiscuous mode [ 278.273699][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.280979][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.288825][ T8040] device bridge_slave_1 entered promiscuous mode [ 278.298123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.306009][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.313878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.322630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.331299][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.338475][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.346554][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.355523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.364057][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.371887][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.379946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.400617][ T8034] team0: Port device team_slave_0 added [ 278.429492][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.439683][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.448702][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.457380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.466988][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.475223][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.482492][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.490570][ T8037] device bridge_slave_0 entered promiscuous mode [ 278.502372][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.510003][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.518620][ T8037] device bridge_slave_1 entered promiscuous mode [ 278.526182][ T8034] team0: Port device team_slave_1 added [ 278.531936][ T8031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.589366][ T8031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.637932][ T8031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.680760][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.702235][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.711063][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.724041][ T8026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.735129][ T8026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.750545][ T8031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.801303][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.847581][ T8034] device hsr_slave_0 entered promiscuous mode [ 278.886003][ T8034] device hsr_slave_1 entered promiscuous mode [ 278.925697][ T8034] debugfs: Directory 'hsr0' with parent '/' already present! [ 278.934488][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.944178][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.952656][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.961205][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.970033][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.000991][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.010558][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.019066][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.026546][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.059250][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.079490][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.090041][ T8040] team0: Port device team_slave_0 added [ 279.098318][ T8040] team0: Port device team_slave_1 added [ 279.108875][ T8029] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.119673][ T8037] team0: Port device team_slave_0 added [ 279.127376][ T8037] team0: Port device team_slave_1 added [ 279.137464][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.146257][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.154145][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.162965][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.171567][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.178620][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.258048][ T8040] device hsr_slave_0 entered promiscuous mode [ 279.305921][ T8040] device hsr_slave_1 entered promiscuous mode [ 279.355875][ T8040] debugfs: Directory 'hsr0' with parent '/' already present! [ 279.386087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.394484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.403736][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.412424][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.419610][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.427909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.436900][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.485679][ T8034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.541676][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.550605][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.559517][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.567920][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.576788][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.585503][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.594457][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.603007][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.611459][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.620287][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.628834][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.637254][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.646058][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.654275][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.662520][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.673727][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.687685][ T8026] device veth0_vlan entered promiscuous mode [ 279.706007][ T8034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.797802][ T8037] device hsr_slave_0 entered promiscuous mode [ 279.896059][ T8037] device hsr_slave_1 entered promiscuous mode [ 279.935730][ T8037] debugfs: Directory 'hsr0' with parent '/' already present! [ 279.961550][ T8034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.011325][ T8026] device veth1_vlan entered promiscuous mode [ 280.023297][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.042902][ T8034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.083285][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.093465][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.102448][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.110114][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.121541][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.129803][ T8040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.193475][ T8040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.241543][ T8040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.301874][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.324423][ T8040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.354242][ T8048] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 280.367909][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.382708][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.390807][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.399933][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.412114][ T8037] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 280.455613][ C0] hrtimer: interrupt took 57732 ns [ 280.472765][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.493180][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 16:40:08 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x141a82) r0 = memfd_create(0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0xe3) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) read$eventfd(r1, 0x0, 0x0) fallocate(r0, 0x800000000000003, 0xfa9, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000002c0)=""/106) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) msgsnd(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000000a398e6a9fc2ad063d9ded8d7b6e6b44100009deebf1a78f934068d3cf07b681e10d8052c7a9758bbabf9248f56b0dc9a3d21591f4c20f3d931cc7aa76f1321fa282c3de8dffeec681e8abe74ffc1134c022d09e7c0979efaf020b4f006f94884315e5199d83d0908975ca97e5b1f8cc20c63bbfc57abc65b42467921894de863661595a4c6c11b52ad0051d044cbdd9d4ca644711abfe6eea53c5db304c789e016ad91b48f35cdb500bda671470323122fd873975a45adc1806e4d6d647637f45d9450ec902703062ea3a540221f044f8258c45aa32d"], 0xa7, 0x800) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x832}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x800fe) stat(&(0x7f0000002300)='./bus\x00', &(0x7f0000002340)) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x41) sendfile(r5, r6, 0x0, 0x8000fffffffe) [ 280.506924][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.513996][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.524975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.533570][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.545083][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.552213][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.563289][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.572601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.605155][ T8037] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 280.647945][ T8037] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 280.714138][ T8029] device veth0_vlan entered promiscuous mode [ 280.734712][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.743946][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.753410][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:40:08 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x141a82) r0 = memfd_create(0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0xe3) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) read$eventfd(r1, 0x0, 0x0) fallocate(r0, 0x800000000000003, 0xfa9, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000002c0)=""/106) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) msgsnd(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000000a398e6a9fc2ad063d9ded8d7b6e6b44100009deebf1a78f934068d3cf07b681e10d8052c7a9758bbabf9248f56b0dc9a3d21591f4c20f3d931cc7aa76f1321fa282c3de8dffeec681e8abe74ffc1134c022d09e7c0979efaf020b4f006f94884315e5199d83d0908975ca97e5b1f8cc20c63bbfc57abc65b42467921894de863661595a4c6c11b52ad0051d044cbdd9d4ca644711abfe6eea53c5db304c789e016ad91b48f35cdb500bda671470323122fd873975a45adc1806e4d6d647637f45d9450ec902703062ea3a540221f044f8258c45aa32d"], 0xa7, 0x800) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x832}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x800fe) stat(&(0x7f0000002300)='./bus\x00', &(0x7f0000002340)) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x41) sendfile(r5, r6, 0x0, 0x8000fffffffe) [ 280.762534][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.771478][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.780717][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.789537][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.797825][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.809136][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.817700][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.829657][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.838595][ T8037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.880191][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.895374][ T8029] device veth1_vlan entered promiscuous mode [ 280.911800][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.920022][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.933719][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.941875][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 16:40:08 executing program 0: [ 281.011904][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.020855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 16:40:08 executing program 0: [ 281.056670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.064208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.109722][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.134216][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.189981][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.204318][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 16:40:08 executing program 0: [ 281.234856][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.247432][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.256694][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.265327][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.272518][ T8041] bridge0: port 1(bridge_slave_0) entered forwarding state 16:40:08 executing program 1: [ 281.281753][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.290447][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.300900][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.308034][ T8041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.349396][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.368880][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 16:40:09 executing program 1: 16:40:09 executing program 0: [ 281.419985][ T8040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.445679][ T8040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.477001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.485086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.516838][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.538770][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.556294][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.573797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.592330][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.601810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.610754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.620111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.628044][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.635980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.644579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.653166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.661554][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.677442][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.686212][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.693795][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.703336][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.711871][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.718919][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.726759][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.735467][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.744048][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.751152][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.759308][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.767077][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.778305][ T8031] device veth0_vlan entered promiscuous mode [ 281.789286][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.813643][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.821743][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.830429][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.839452][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.848496][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.857505][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.866328][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.875162][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.883895][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.893168][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.901934][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.910553][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.919488][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.928305][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.936623][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.944379][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.954592][ T8031] device veth1_vlan entered promiscuous mode [ 281.965276][ T8034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.975536][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.984855][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.992580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.001282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.009970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.018948][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.026276][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.035542][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.044401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.055259][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.075727][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.084508][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.093589][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.101334][ T8041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.109589][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.119343][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.128892][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.137897][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.147309][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.156622][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.165891][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.174807][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.184201][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.203079][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.214603][ T8037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.229732][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.238078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.246041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.253990][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.263176][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.307176][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.320702][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.335110][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.349467][ T8034] device veth0_vlan entered promiscuous mode [ 282.370305][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.379398][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.387988][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.397705][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.414492][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.433256][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.452917][ T8034] device veth1_vlan entered promiscuous mode [ 282.464134][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.473081][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.484567][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.493239][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.504528][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.512934][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.523333][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.532349][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.542772][ T8040] device veth0_vlan entered promiscuous mode [ 282.560044][ T8040] device veth1_vlan entered promiscuous mode 16:40:10 executing program 2: [ 282.618522][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.643080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.699225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.726277][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.735780][ T8037] device veth0_vlan entered promiscuous mode 16:40:10 executing program 3: [ 282.762465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.782356][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.789616][ T8037] device veth1_vlan entered promiscuous mode 16:40:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) io_setup(0xb, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x1}) creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe216}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) 16:40:11 executing program 0: 16:40:11 executing program 2: 16:40:11 executing program 1: 16:40:11 executing program 3: 16:40:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:11 executing program 3: 16:40:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@sbsector={'sbsector'}}]}) 16:40:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000600)="0ebd820ada6a39d8bfb780ec5322a14f869a89f3de4e50e544dcec469fc2488892f3f205e821c048ea7190f6842de6c8035c22da463400c00f073c712c56", 0x3e}], 0x1) [ 283.595936][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 283.604649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 16:40:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x8) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 16:40:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:11 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01"], 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) prctl$PR_CAPBSET_DROP(0x18, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) openat$full(0xffffffffffffff9c, 0x0, 0x10100, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 283.872268][ T27] audit: type=1804 audit(1579192811.453:31): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir203429678/syzkaller.Af49EH/4/file0" dev="sda1" ino=16549 res=1 [ 283.956501][ T27] audit: type=1804 audit(1579192811.533:32): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir203429678/syzkaller.Af49EH/4/file0" dev="sda1" ino=16549 res=1 [ 283.981185][ T27] audit: type=1804 audit(1579192811.553:33): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir203429678/syzkaller.Af49EH/4/file0" dev="sda1" ino=16549 res=1 [ 284.017906][ T8130] ISOFS: Unable to identify CD-ROM format. 16:40:11 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r1, &(0x7f0000000100)='=', 0x1, 0x582774fe0c0db1f1, 0x0, 0x0) 16:40:11 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 16:40:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x8) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) [ 284.209619][ T27] audit: type=1804 audit(1579192811.793:34): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir043724017/syzkaller.bbv66v/4/bus" dev="sda1" ino=16541 res=1 16:40:11 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0x7ff}) [ 284.317045][ T27] audit: type=1804 audit(1579192811.833:35): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir043724017/syzkaller.bbv66v/4/bus" dev="sda1" ino=16541 res=1 16:40:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0xc0fe) 16:40:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000002a80)=[{&(0x7f0000001680)=""/230, 0xfdbd}], 0x1) writev(r1, &(0x7f0000001980)=[{&(0x7f0000000380)="b4", 0x1}], 0x1) 16:40:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x3, &(0x7f0000000680)=[{0x0, 0x4}, {0x0, 0x40, 0x3f, 0x4}, {0x0, 0x3f, 0x1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000eed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)="af22d7abc7c99cd0ef7f7993f68393e8cac585de7b6f1d", 0x17}], 0x2}}], 0x1, 0x4001) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffde5, 0x0, 0x0, 0x39, 0x2, 0x0, 0x6, 0x40, 0x8, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, @perf_bp={0x0, 0x8}, 0x190, 0x0, 0xafc, 0x0, 0x0, 0xfffffffc, 0xa3}, 0x0, 0x4000009, 0xffffffffffffffff, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) memfd_create(&(0x7f0000000600)='+lo.cpusetvboxnet1&\x00', 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100)) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x80, 0x3, 0x8}}, 0x14) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x483) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000100)) write$P9_RAUTH(r3, &(0x7f00000000c0)={0x14, 0x67, 0x0, {0x80, 0x3, 0x8}}, 0x14) r4 = getpid() sched_setattr(r4, &(0x7f00000005c0)={0x30, 0x1, 0x0, 0x3, 0x45, 0x4, 0x0, 0xfffffffffffffff4}, 0x0) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000180)={&(0x7f0000000040)=""/80, 0x41}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f00000004c0)={0x0, 0xb50, 0x3, 0xbb, &(0x7f00000002c0)=""/187, 0x15, &(0x7f0000000380)=""/21, 0x17, &(0x7f0000000440)=""/23}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 16:40:12 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0x7ff}) 16:40:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:14 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01"], 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) prctl$PR_CAPBSET_DROP(0x18, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) openat$full(0xffffffffffffff9c, 0x0, 0x10100, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 16:40:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0xc0fe) 16:40:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr="39aa622bc2625ef5403659401ba8500a"}, 0x20) 16:40:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:40:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be4870d317f676244e47e0e68ac76493a5c06ad656a0b792f46753ecff3376b3887dfe913b3df4c6a80af3c1606a9b98315b9d8d1e84df6cc6eb9", 0x41}], 0x1) 16:40:14 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01"], 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) prctl$PR_CAPBSET_DROP(0x18, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) openat$full(0xffffffffffffff9c, 0x0, 0x10100, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 16:40:14 executing program 0: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000480), &(0x7f0000000540)=""/74) fdatasync(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) [ 287.003509][ T27] audit: type=1804 audit(1579192814.583:36): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir203429678/syzkaller.Af49EH/5/file0" dev="sda1" ino=16565 res=1 16:40:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:14 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lsetxattr(0x0, &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f00000001c0)='+@md5sum\x00', 0x9, 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) [ 287.145951][ T27] audit: type=1804 audit(1579192814.733:37): pid=8225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir339276975/syzkaller.TwDHN9/5/file0" dev="sda1" ino=16549 res=1 [ 287.247860][ T27] audit: type=1804 audit(1579192814.773:38): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir651922499/syzkaller.I7rE7X/12/bus" dev="sda1" ino=16554 res=1 16:40:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:14 executing program 2: clock_adjtime(0x0, &(0x7f0000001140)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 287.330063][ T27] audit: type=1804 audit(1579192814.913:39): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir651922499/syzkaller.I7rE7X/12/bus" dev="sda1" ino=16554 res=1 16:40:17 executing program 3: syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8000, 0x17e) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x160) fallocate(r3, 0x0, 0x0, 0x2000002) read$eventfd(r3, &(0x7f00000003c0), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="89b10000002f66696efeab3f1d8dd8102a15ff8fe9331542f2fdfef9251a6ca1eb09d763ce2600823b80d27f1240d7e32e77e5f258d1890bac02faac11ba1ac01576e4994cbec304000000cf7f5a07e8bea8"], 0x52) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1, 0xfffbc000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) poll(&(0x7f0000000100)=[{r5, 0x4000}, {r0, 0x104}, {r2, 0x80}], 0x3, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_BMAP(r6, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000080)='./bus\x00', 0xa1) r8 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x3) listen(r9, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, 0x0, 0x0) close(r9) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r10 = dup(r8) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FICLONE(r12, 0x40049409, r0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r13 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r7, 0x800fe) sendfile(r10, r13, 0x0, 0x8000fffffffe) 16:40:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:40:17 executing program 0: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000480), &(0x7f0000000540)=""/74) fdatasync(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 16:40:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x45, 0x4b, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66}, [{}]}, 0x78) 16:40:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 290.015707][ C1] ================================================================== [ 290.024611][ C1] BUG: KCSAN: data-race in yama_ptracer_del / yama_ptracer_del [ 290.024614][ C1] [ 290.024627][ C1] read to 0xffff8880a0f65c10 of 1 bytes by interrupt on cpu 0: [ 290.024646][ C1] yama_ptracer_del+0xd6/0x1a0 [ 290.024663][ C1] yama_task_free+0x22/0x30 [ 290.024678][ C1] security_task_free+0x43/0xa0 [ 290.024696][ C1] __put_task_struct+0xcd/0x360 [ 290.024711][ C1] delayed_put_task_struct+0x1a5/0x1d0 [ 290.024727][ C1] rcu_do_batch+0x256/0x5b0 [ 290.024740][ C1] rcu_core+0x365/0x4c0 [ 290.024752][ C1] rcu_core_si+0x12/0x20 [ 290.024765][ C1] __do_softirq+0x115/0x33f [ 290.024786][ C1] irq_exit+0xbb/0xe0 [ 290.024802][ C1] smp_apic_timer_interrupt+0xe6/0x280 [ 290.024814][ C1] apic_timer_interrupt+0xf/0x20 [ 290.024831][ C1] __sanitizer_cov_trace_const_cmp1+0x0/0x20 [ 290.024846][ C1] snprintf+0x6f/0xa0 [ 290.024861][ C1] tomoyo_init_log+0x372/0x10d0 [ 290.024878][ C1] tomoyo_supervisor+0x290/0xd20 [ 290.024895][ C1] tomoyo_path_permission+0x121/0x160 [ 290.024912][ C1] tomoyo_path_perm+0x2c6/0x390 [ 290.024932][ C1] tomoyo_path_symlink+0x69/0xa0 [ 290.024946][ C1] security_path_symlink+0xab/0xe0 [ 290.024962][ C1] do_symlinkat+0xcd/0x1e0 [ 290.024976][ C1] __x64_sys_symlink+0x3f/0x50 [ 290.024991][ C1] do_syscall_64+0xcc/0x3a0 [ 290.025014][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 290.025017][ C1] [ 290.025028][ C1] write to 0xffff8880a0f65c10 of 1 bytes by interrupt on cpu 1: [ 290.025042][ C1] yama_ptracer_del+0x119/0x1a0 [ 290.025060][ C1] yama_task_free+0x22/0x30 [ 290.025075][ C1] security_task_free+0x43/0xa0 [ 290.025091][ C1] __put_task_struct+0xcd/0x360 [ 290.025106][ C1] delayed_put_task_struct+0x1a5/0x1d0 [ 290.025119][ C1] rcu_do_batch+0x256/0x5b0 [ 290.025130][ C1] rcu_core+0x365/0x4c0 [ 290.025142][ C1] rcu_core_si+0x12/0x20 [ 290.025153][ C1] __do_softirq+0x115/0x33f [ 290.025164][ C1] irq_exit+0xbb/0xe0 [ 290.025176][ C1] smp_apic_timer_interrupt+0xe6/0x280 [ 290.025188][ C1] apic_timer_interrupt+0xf/0x20 [ 290.025205][ C1] __sanitizer_cov_trace_pc+0xd/0x50 [ 290.025217][ C1] tomoyo_domain_quota_is_ok+0x220/0x2b0 [ 290.025230][ C1] tomoyo_supervisor+0x22b/0xd20 [ 290.025243][ C1] tomoyo_path_permission+0x121/0x160 [ 290.025258][ C1] tomoyo_check_open_permission+0x2fd/0x320 [ 290.025268][ C1] tomoyo_file_open+0x75/0x90 [ 290.025282][ C1] security_file_open+0x69/0x210 [ 290.025297][ C1] do_dentry_open+0x211/0x970 [ 290.025312][ C1] vfs_open+0x62/0x80 [ 290.025326][ C1] path_openat+0xf9f/0x3580 [ 290.025341][ C1] do_filp_open+0x11e/0x1b0 [ 290.025357][ C1] do_sys_open+0x3b3/0x4f0 [ 290.025371][ C1] __x64_sys_open+0x55/0x70 [ 290.025389][ C1] do_syscall_64+0xcc/0x3a0 [ 290.025407][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 290.025410][ C1] [ 290.025414][ C1] Reported by Kernel Concurrency Sanitizer on: [ 290.025429][ C1] CPU: 1 PID: 7993 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 290.025437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.025443][ C1] ================================================================== [ 290.025451][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 290.025465][ C1] CPU: 1 PID: 7993 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 290.025473][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.025477][ C1] Call Trace: [ 290.025489][ C1] [ 290.025506][ C1] dump_stack+0x11d/0x181 [ 290.025526][ C1] panic+0x210/0x640 [ 290.025543][ C1] ? vprintk_func+0x8d/0x140 [ 290.025567][ C1] kcsan_report.cold+0xc/0xd [ 290.025587][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 290.025607][ C1] __tsan_unaligned_write1+0xc3/0x100 [ 290.025626][ C1] yama_ptracer_del+0x119/0x1a0 [ 290.025647][ C1] yama_task_free+0x22/0x30 [ 290.025661][ C1] security_task_free+0x43/0xa0 [ 290.025676][ C1] __put_task_struct+0xcd/0x360 [ 290.025693][ C1] delayed_put_task_struct+0x1a5/0x1d0 [ 290.025709][ C1] ? __write_once_size.constprop.0+0x20/0x20 [ 290.025725][ C1] rcu_do_batch+0x256/0x5b0 [ 290.025749][ C1] rcu_core+0x365/0x4c0 [ 290.025769][ C1] rcu_core_si+0x12/0x20 [ 290.025808][ C1] __do_softirq+0x115/0x33f [ 290.025825][ C1] irq_exit+0xbb/0xe0 [ 290.025838][ C1] smp_apic_timer_interrupt+0xe6/0x280 [ 290.025852][ C1] apic_timer_interrupt+0xf/0x20 [ 290.025857][ C1] [ 290.025875][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xd/0x50 [ 290.025897][ C1] Code: 04 25 40 8c 01 00 48 8b 80 48 0a 00 00 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 65 48 8b 04 25 40 8c 01 00 <65> 8b 15 a4 85 bc 7e 81 e2 00 01 1f 00 48 8b 75 08 75 2b 8b 90 30 [ 290.025906][ C1] RSP: 0018:ffffc900015f37d8 EFLAGS: 00000283 ORIG_RAX: ffffffffffffff13 [ 290.025923][ C1] RAX: ffff88811f4aa0c0 RBX: 0000000000000002 RCX: ffffffff82350687 [ 290.025933][ C1] RDX: 0000000000000002 RSI: 0000000000000010 RDI: 0000000000000001 [ 290.025944][ C1] RBP: ffffc900015f37d8 R08: ffff88811f4aa0c0 R09: 000088812512b09a [ 290.025953][ C1] R10: 000088812512b099 R11: 000088812512b09b R12: 0000000000000022 [ 290.025962][ C1] R13: 00000000000001fb R14: ffff88812512b080 R15: 0000000000000001 [ 290.025983][ C1] ? tomoyo_domain_quota_is_ok+0x257/0x2b0 [ 290.026005][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 290.026020][ C1] tomoyo_domain_quota_is_ok+0x220/0x2b0 [ 290.026040][ C1] tomoyo_supervisor+0x22b/0xd20 [ 290.026055][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 290.026074][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 290.026092][ C1] ? __read_once_size.constprop.0+0x12/0x20 [ 290.026115][ C1] tomoyo_path_permission+0x121/0x160 [ 290.026133][ C1] tomoyo_check_open_permission+0x2fd/0x320 [ 290.026163][ C1] tomoyo_file_open+0x75/0x90 [ 290.026180][ C1] security_file_open+0x69/0x210 [ 290.026198][ C1] do_dentry_open+0x211/0x970 [ 290.026214][ C1] ? security_inode_permission+0xa5/0xc0 [ 290.026236][ C1] vfs_open+0x62/0x80 [ 290.026250][ C1] path_openat+0xf9f/0x3580 [ 290.026269][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 290.026288][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 290.026306][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 290.026333][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 290.026354][ C1] ? __read_once_size+0x41/0xe0 [ 290.026373][ C1] do_filp_open+0x11e/0x1b0 [ 290.026393][ C1] ? __alloc_fd+0x2ef/0x3b0 [ 290.026413][ C1] do_sys_open+0x3b3/0x4f0 [ 290.026431][ C1] __x64_sys_open+0x55/0x70 [ 290.026449][ C1] do_syscall_64+0xcc/0x3a0 [ 290.026472][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 290.026483][ C1] RIP: 0033:0x7f7fd4f41120 [ 290.026506][ C1] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 290.026516][ C1] RSP: 002b:00007ffd1a96a8c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 290.026532][ C1] RAX: ffffffffffffffda RBX: 00000000009ad4b0 RCX: 00007f7fd4f41120 [ 290.026541][ C1] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffd1a96a9a0 [ 290.026551][ C1] RBP: 00007ffd1a96a940 R08: 0000000000000008 R09: 0000000000000001 [ 290.026560][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 290.026569][ C1] R13: 000000000041f57a R14: 000000000098f250 R15: 000000000000000b [ 290.028438][ C1] Kernel Offset: disabled [ 290.796178][ C1] Rebooting in 86400 seconds..