[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   36.444345][   T26] audit: type=1800 audit(1571797395.791:25): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   36.486504][   T26] audit: type=1800 audit(1571797395.791:26): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   36.528850][   T26] audit: type=1800 audit(1571797395.801:27): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts.
2019/10/23 02:23:26 fuzzer started
2019/10/23 02:23:27 dialing manager at 10.128.0.105:42531
2019/10/23 02:23:27 syscalls: 2524
2019/10/23 02:23:27 code coverage: enabled
2019/10/23 02:23:27 comparison tracing: enabled
2019/10/23 02:23:27 extra coverage: extra coverage is not supported by the kernel
2019/10/23 02:23:27 setuid sandbox: enabled
2019/10/23 02:23:27 namespace sandbox: enabled
2019/10/23 02:23:27 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/23 02:23:27 fault injection: enabled
2019/10/23 02:23:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/23 02:23:27 net packet injection: enabled
2019/10/23 02:23:27 net device setup: enabled
2019/10/23 02:23:27 concurrency sanitizer: enabled
syzkaller login: [   53.649570][ T7194] KCSAN: could not find function: 'poll_schedule_timeout'
2019/10/23 02:23:33 adding functions to KCSAN blacklist: 'tcp_poll' 'dd_has_work' 'tcp_add_backlog' '__splice_from_pipe' 'fasync_remove_entry' '__nf_ct_refresh_acct' 'blk_mq_run_hw_queue' '__tcp_select_window' 'generic_permission' 'wbt_issue' 'find_next_bit' 'mod_timer' '__nf_conntrack_find_get' 'padata_find_next' '__hrtimer_run_queues' 'find_get_pages_range_tag' 'ext4_has_free_clusters' 'pipe_poll' 'poll_schedule_timeout' 'ktime_get_real_seconds' 'ep_poll' 'generic_write_end' 
02:23:40 executing program 0:
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$unix(0x1, 0x104000000000001, 0x0)
getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080))
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$caif_stream(0x25, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[   61.808715][ T7198] IPVS: ftp: loaded support on port[0] = 21
02:23:41 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x250}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x607, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

[   61.924198][ T7198] chnl_net:caif_netlink_parms(): no params data found
[   62.001895][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.017663][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.046858][ T7198] device bridge_slave_0 entered promiscuous mode
[   62.054443][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.076823][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.084811][ T7198] device bridge_slave_1 entered promiscuous mode
[   62.120777][ T7198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.131696][ T7198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.154481][ T7201] IPVS: ftp: loaded support on port[0] = 21
[   62.156632][ T7198] team0: Port device team_slave_0 added
02:23:41 executing program 2:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20002152)

[   62.168354][ T7198] team0: Port device team_slave_1 added
[   62.289919][ T7198] device hsr_slave_0 entered promiscuous mode
[   62.327571][ T7198] device hsr_slave_1 entered promiscuous mode
[   62.401120][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.408277][ T7198] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.415641][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.417518][ T7203] IPVS: ftp: loaded support on port[0] = 21
[   62.422798][ T7198] bridge0: port 1(bridge_slave_0) entered forwarding state
02:23:41 executing program 3:
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000300)="0071d89c", 0x4, 0xffffffffffffffff)

[   62.537741][ T7201] chnl_net:caif_netlink_parms(): no params data found
[   62.607128][ T7198] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.660815][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.670412][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.699304][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.709190][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   62.741415][ T7198] 8021q: adding VLAN 0 to HW filter on device team0
[   62.773380][ T7210] IPVS: ftp: loaded support on port[0] = 21
[   62.784165][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.793496][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.800587][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.818899][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.826059][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.835031][ T7201] device bridge_slave_0 entered promiscuous mode
[   62.854145][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.865260][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.872348][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.886973][ T7203] chnl_net:caif_netlink_parms(): no params data found
[   62.902102][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.909876][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state
02:23:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r0, &(0x7f00000017c0), 0x39, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)

[   62.920215][ T7201] device bridge_slave_1 entered promiscuous mode
[   62.942252][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.993408][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.002370][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.012001][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.021748][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.030765][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.041278][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.050493][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.079023][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.100253][ T7198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.123144][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.194633][ T7201] team0: Port device team_slave_0 added
[   63.217605][ T7201] team0: Port device team_slave_1 added
[   63.234398][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.241921][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.252362][ T7203] device bridge_slave_0 entered promiscuous mode
[   63.270503][ T7198] 8021q: adding VLAN 0 to HW filter on device batadv0
02:23:42 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a0500000000000000422cb4963a160161b1cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x34d, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r1}, &(0x7f0000000240)=""/112, 0x2ae, &(0x7f0000000580)={&(0x7f0000000040)={'tgr160-generic\x00'}})

[   63.359989][ T7201] device hsr_slave_0 entered promiscuous mode
[   63.387295][ T7201] device hsr_slave_1 entered promiscuous mode
[   63.426823][ T7201] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.440088][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.447761][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.459862][ T7203] device bridge_slave_1 entered promiscuous mode
[   63.485892][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.497881][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.512198][ T7212] IPVS: ftp: loaded support on port[0] = 21
[   63.525729][ T7217] IPVS: ftp: loaded support on port[0] = 21
[   63.557208][ T7203] team0: Port device team_slave_0 added
[   63.564371][ T7203] team0: Port device team_slave_1 added
[   63.663831][ T7210] chnl_net:caif_netlink_parms(): no params data found
[   63.760644][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.768493][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.777941][ T7210] device bridge_slave_0 entered promiscuous mode
[   63.829169][ T7203] device hsr_slave_0 entered promiscuous mode
[   63.866740][    C0] hrtimer: interrupt took 39772 ns
[   63.872472][ T7203] device hsr_slave_1 entered promiscuous mode
[   63.926775][ T7203] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.939008][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.946196][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.956469][ T7210] device bridge_slave_1 entered promiscuous mode
[   63.987434][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.002899][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   64.049334][ T7201] 8021q: adding VLAN 0 to HW filter on device team0
[   64.060512][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.068555][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.079851][ T7210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.092111][ T7210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.119444][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.128160][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.136671][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.144063][ T7204] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.152121][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.160896][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.169435][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.176553][ T7204] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.177376][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.209343][ T7210] team0: Port device team_slave_0 added
[   64.220655][ T7210] team0: Port device team_slave_1 added
[   64.233949][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.253158][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0
02:23:43 executing program 0:
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$unix(0x1, 0x104000000000001, 0x0)
getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080))
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$caif_stream(0x25, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[   64.360303][ T7210] device hsr_slave_0 entered promiscuous mode
[   64.417202][ T7210] device hsr_slave_1 entered promiscuous mode
[   64.456924][ T7210] debugfs: Directory 'hsr0' with parent '/' already present!
[   64.466167][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.475685][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.484596][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.495836][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.504965][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.514263][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.523185][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.535479][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.548941][ T7201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.560334][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.584189][ T7212] chnl_net:caif_netlink_parms(): no params data found
[   64.596252][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.605197][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.647924][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.656576][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.670891][ T7217] chnl_net:caif_netlink_parms(): no params data found
[   64.721499][ T7203] 8021q: adding VLAN 0 to HW filter on device team0
[   64.735447][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.771969][ T7212] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.779166][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.787471][ T7212] device bridge_slave_0 entered promiscuous mode
[   64.794961][ T7212] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.802224][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.810524][ T7212] device bridge_slave_1 entered promiscuous mode
[   64.829742][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.837116][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.845168][ T7217] device bridge_slave_0 entered promiscuous mode
[   64.864514][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.871988][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.880133][ T7217] device bridge_slave_1 entered promiscuous mode
[   64.894628][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.903737][ T3501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.912933][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.919985][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.945147][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.960620][ T7210] 8021q: adding VLAN 0 to HW filter on device team0
[   64.975120][ T7212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.986486][ T7212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.999796][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   65.010639][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.022233][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.030846][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.062832][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.074550][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.087611][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.108351][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.127263][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.134361][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.154336][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.164304][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.173611][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.182392][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.192066][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.201245][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
02:23:44 executing program 0:
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$unix(0x1, 0x104000000000001, 0x0)
getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080))
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$caif_stream(0x25, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[   65.210529][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.217634][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.225751][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.235065][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.244538][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.253405][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.262475][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.271372][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.309032][ T7203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.322654][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.356113][ T7210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.371495][ T7210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.383102][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.392357][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.401532][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.408673][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.420455][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.429605][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.438189][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.446505][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.455599][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.464223][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.473318][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.481929][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.490955][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.499442][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.508334][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.517132][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.525703][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.534198][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.543891][ T7212] team0: Port device team_slave_0 added
[   65.551977][ T7217] team0: Port device team_slave_0 added
[   65.563675][ T7217] team0: Port device team_slave_1 added
[   65.582536][ T7212] team0: Port device team_slave_1 added
[   65.593211][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.613706][ T7210] 8021q: adding VLAN 0 to HW filter on device batadv0
02:23:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x250}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x607, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

[   65.739838][ T7212] device hsr_slave_0 entered promiscuous mode
[   65.802531][ T7212] device hsr_slave_1 entered promiscuous mode
[   65.860713][ T7212] debugfs: Directory 'hsr0' with parent '/' already present!
[   65.923173][ T7217] device hsr_slave_0 entered promiscuous mode
[   65.977172][ T7217] device hsr_slave_1 entered promiscuous mode
[   66.017528][ T7217] debugfs: Directory 'hsr0' with parent '/' already present!
02:23:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x250}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x607, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

[   66.173143][ T7212] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.221331][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.233774][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.270301][ T7268] dns_resolver: Unsupported content type (113)
[   66.306589][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.314243][ T7268] dns_resolver: Unsupported content type (113)
[   66.345470][ T7212] 8021q: adding VLAN 0 to HW filter on device team0
02:23:45 executing program 3:
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000300)="0071d89c", 0x4, 0xffffffffffffffff)

02:23:45 executing program 2:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20002152)

02:23:45 executing program 0:
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$unix(0x1, 0x104000000000001, 0x0)
getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080))
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$caif_stream(0x25, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[   66.557103][ T7277] dns_resolver: Unsupported content type (113)
[   66.599760][ T7165] ==================================================================
[   66.607888][ T7165] BUG: KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor
[   66.615599][ T7165] 
[   66.617923][ T7165] write to 0xffffffff86146f24 of 4 bytes by task 7164 on cpu 0:
[   66.625550][ T7165]  tomoyo_supervisor+0x1c9/0xd20
[   66.630482][ T7165]  tomoyo_path_permission+0x121/0x160
[   66.635850][ T7165]  tomoyo_path_perm+0x23e/0x390
[   66.640694][ T7165]  tomoyo_inode_getattr+0x26/0x40
[   66.645716][ T7165]  security_inode_getattr+0x9b/0xd0
[   66.650907][ T7165]  vfs_getattr+0x2e/0x70
[   66.655156][ T7165]  vfs_statx_fd+0x7a/0xd0
[   66.659477][ T7165]  __do_sys_newfstat+0x49/0xa0
[   66.664239][ T7165]  __x64_sys_newfstat+0x3a/0x50
[   66.669101][ T7165]  do_syscall_64+0xcc/0x370
[   66.673601][ T7165]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   66.679475][ T7165] 
[   66.681792][ T7165] read to 0xffffffff86146f24 of 4 bytes by task 7165 on cpu 1:
[   66.689325][ T7165]  tomoyo_supervisor+0x1b0/0xd20
[   66.694258][ T7165]  tomoyo_path2_perm+0x44a/0x4c0
[   66.699189][ T7165]  tomoyo_path_rename+0x95/0xd0
[   66.704037][ T7165]  security_path_rename+0x17e/0x1e0
[   66.709229][ T7165]  do_renameat2+0x6ea/0xa50
[   66.713728][ T7165]  __x64_sys_rename+0x47/0x60
[   66.718400][ T7165]  do_syscall_64+0xcc/0x370
[   66.722914][ T7165]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   66.728790][ T7165] 
[   66.731219][ T7165] Reported by Kernel Concurrency Sanitizer on:
[   66.732933][ T7283] dns_resolver: Unsupported content type (113)
[   66.737377][ T7165] CPU: 1 PID: 7165 Comm: udevd Not tainted 5.4.0-rc3+ #0
02:23:46 executing program 3:
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000300)="0071d89c", 0x4, 0xffffffffffffffff)

[   66.737385][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   66.737391][ T7165] ==================================================================
[   66.737398][ T7165] Kernel panic - not syncing: panic_on_warn set ...
[   66.737412][ T7165] CPU: 1 PID: 7165 Comm: udevd Not tainted 5.4.0-rc3+ #0
[   66.737420][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   66.737486][ T7165] Call Trace:
[   66.795582][ T7165]  dump_stack+0xf5/0x159
02:23:46 executing program 3:
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000300)="0071d89c", 0x4, 0xffffffffffffffff)

[   66.799945][ T7165]  panic+0x210/0x640
[   66.803958][ T7165]  ? vprintk_func+0x8d/0x140
[   66.808547][ T7165]  kcsan_report.cold+0xc/0x10
[   66.813218][ T7165]  __kcsan_setup_watchpoint+0x32e/0x4a0
[   66.818858][ T7165]  __tsan_read4+0x2c/0x30
[   66.823192][ T7165]  tomoyo_supervisor+0x1b0/0xd20
[   66.828128][ T7165]  ? __tsan_read4+0x2c/0x30
[   66.832634][ T7165]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[   66.838357][ T7165]  ? tomoyo_path_matches_pattern+0xa1/0x160
[   66.844257][ T7165]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   66.849893][ T7165]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[   66.856161][ T7165]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   66.861806][ T7165]  tomoyo_path2_perm+0x44a/0x4c0
[   66.866743][ T7165]  ? __kcsan_setup_watchpoint+0x21/0x4a0
[   66.872397][ T7165]  tomoyo_path_rename+0x95/0xd0
[   66.877257][ T7165]  security_path_rename+0x17e/0x1e0
[   66.882455][ T7165]  do_renameat2+0x6ea/0xa50
[   66.886969][ T7165]  __x64_sys_rename+0x47/0x60
[   66.891651][ T7165]  do_syscall_64+0xcc/0x370
[   66.896154][ T7165]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   66.902034][ T7165] RIP: 0033:0x7f915980c527
[   66.906450][ T7165] Code: 32 00 64 83 38 15 74 07 b8 ff ff ff ff 5b c3 48 89 df e8 1c c1 07 00 85 c0 75 ed 31 c0 eb d3 90 90 90 90 b8 52 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 f8 32 00 31 d2 48 29 c2 64
[   66.912858][ T7288] dns_resolver: Unsupported content type (113)
[   66.926045][ T7165] RSP: 002b:00007ffe790af548 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   66.926059][ T7165] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f915980c527
[   66.926067][ T7165] RDX: 00007f9159b3de98 RSI: 00007ffe790af580 RDI: 00007ffe790af980
[   66.926076][ T7165] RBP: 0000000001ade960 R08: 00007f915a17f7a0 R09: 0000000000000001
[   66.926084][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001ade3f0
[   66.926092][ T7165] R13: 0000000001acd250 R14: 00007ffe790af580 R15: 0000000000000001
[   66.933818][ T7165] Kernel Offset: disabled
[   66.986329][ T7165] Rebooting in 86400 seconds..