[ 42.284326][ T26] audit: type=1800 audit(1574287784.414:21): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 42.335024][ T26] audit: type=1800 audit(1574287784.424:22): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 43.217849][ T7537] sshd (7537) used greatest stack depth: 10128 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. 2019/11/20 22:09:55 fuzzer started 2019/11/20 22:09:56 dialing manager at 10.128.0.105:37585 2019/11/20 22:09:57 syscalls: 2566 2019/11/20 22:09:57 code coverage: enabled 2019/11/20 22:09:57 comparison tracing: enabled 2019/11/20 22:09:57 extra coverage: extra coverage is not supported by the kernel 2019/11/20 22:09:57 setuid sandbox: enabled 2019/11/20 22:09:57 namespace sandbox: enabled 2019/11/20 22:09:57 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/20 22:09:57 fault injection: enabled 2019/11/20 22:09:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/20 22:09:57 net packet injection: enabled 2019/11/20 22:09:57 net device setup: enabled 2019/11/20 22:09:57 concurrency sanitizer: enabled 2019/11/20 22:09:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/11/20 22:09:57 adding functions to KCSAN blacklist: 'tcp_add_backlog' '__hrtimer_run_queues' 'rcu_gp_fqs_check_wake' 22:09:59 executing program 0: creat(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_setup(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) syzkaller login: [ 57.523449][ T7639] IPVS: ftp: loaded support on port[0] = 21 22:09:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x20040880, &(0x7f0000000040)={0xa, 0x4004e22, 0x0, @loopback}, 0x1c) [ 57.600400][ T7639] chnl_net:caif_netlink_parms(): no params data found [ 57.664204][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.688074][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.696405][ T7639] device bridge_slave_0 entered promiscuous mode [ 57.718660][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.726096][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.748753][ T7639] device bridge_slave_1 entered promiscuous mode [ 57.798588][ T7639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.815390][ T7639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.832159][ T7643] IPVS: ftp: loaded support on port[0] = 21 22:10:00 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom}, [@null, @default, @null, @bcast, @remote, @rose, @remote, @default]}, 0x10) [ 57.855389][ T7639] team0: Port device team_slave_0 added [ 57.865576][ T7639] team0: Port device team_slave_1 added [ 57.959764][ T7639] device hsr_slave_0 entered promiscuous mode [ 58.037794][ T7639] device hsr_slave_1 entered promiscuous mode 22:10:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x188, 0x0, 0x0) dup2(r2, r3) shutdown(r3, 0x0) [ 58.186762][ T7645] IPVS: ftp: loaded support on port[0] = 21 [ 58.358157][ T7643] chnl_net:caif_netlink_parms(): no params data found [ 58.411960][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.419715][ T7639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.427640][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.434990][ T7639] bridge0: port 1(bridge_slave_0) entered forwarding state 22:10:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x20000000003e, 0x10d, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) [ 58.594931][ T7643] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.637420][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.646420][ T7643] device bridge_slave_0 entered promiscuous mode [ 58.715214][ T7650] IPVS: ftp: loaded support on port[0] = 21 [ 58.729513][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.758246][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.798957][ T7643] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.806116][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.848452][ T7643] device bridge_slave_1 entered promiscuous mode [ 58.968843][ T7639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.007513][ T7643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.055156][ T7639] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.065932][ T7673] IPVS: ftp: loaded support on port[0] = 21 [ 59.083550][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.091872][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.132175][ T7643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.181439][ T7645] chnl_net:caif_netlink_parms(): no params data found [ 59.214777][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.238839][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.258751][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.265820][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.308064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.338970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.359028][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.366382][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.418977][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.448462][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.496555][ T7639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.537537][ T7639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 22:10:01 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {}]}, 0x108) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000022a, 0x2, 0x0) [ 59.596153][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.615790][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.649643][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.670058][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.689959][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.717986][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.729265][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.758113][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.780404][ T7643] team0: Port device team_slave_0 added [ 59.801101][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.816598][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 59.830305][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.841177][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.848991][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.860081][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.868690][ T7643] team0: Port device team_slave_1 added [ 59.894394][ T7686] IPVS: ftp: loaded support on port[0] = 21 [ 59.916048][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.924353][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.932821][ T7645] device bridge_slave_0 entered promiscuous mode [ 59.999863][ T7643] device hsr_slave_0 entered promiscuous mode [ 60.058223][ T7643] device hsr_slave_1 entered promiscuous mode [ 60.097515][ T7643] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.121179][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.128549][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.136694][ T7645] device bridge_slave_1 entered promiscuous mode [ 60.154349][ T7645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.200438][ T7645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.246344][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.274801][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.286362][ T7650] device bridge_slave_0 entered promiscuous mode [ 60.360088][ T7645] team0: Port device team_slave_0 added [ 60.370652][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.399375][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.411984][ T7650] device bridge_slave_1 entered promiscuous mode [ 60.456689][ T7645] team0: Port device team_slave_1 added [ 60.489832][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 60.556889][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.599654][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.679598][ T7645] device hsr_slave_0 entered promiscuous mode [ 60.767630][ T7645] device hsr_slave_1 entered promiscuous mode [ 60.797480][ T7645] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.845313][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.870637][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.898752][ T7673] device bridge_slave_0 entered promiscuous mode [ 60.938689][ T7650] team0: Port device team_slave_0 added [ 60.960812][ T7686] chnl_net:caif_netlink_parms(): no params data found [ 61.007834][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.014934][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.090340][ T7673] device bridge_slave_1 entered promiscuous mode [ 61.122002][ T7643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.158506][ T7650] team0: Port device team_slave_1 added [ 61.222632][ T7643] 8021q: adding VLAN 0 to HW filter on device team0 22:10:03 executing program 0: creat(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_setup(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) [ 61.286287][ T7673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.369143][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.377021][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.539568][ T7650] device hsr_slave_0 entered promiscuous mode [ 61.597675][ T7650] device hsr_slave_1 entered promiscuous mode [ 61.647426][ T7650] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.674246][ T7673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.709864][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.753730][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.810753][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.817871][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.903060][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.959809][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.966905][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.013454][ T7686] device bridge_slave_0 entered promiscuous mode [ 62.091411][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.113671][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.180929][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.188526][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.274811][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.342001][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 22:10:04 executing program 0: creat(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_setup(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) [ 62.393804][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.458179][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.504492][ T7643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.539442][ T7643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.586178][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.606482][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.650531][ T7686] device bridge_slave_1 entered promiscuous mode [ 62.672764][ T7673] team0: Port device team_slave_0 added [ 62.697446][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.719034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.753061][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.781324][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.830580][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.859941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.901421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.982082][ T7673] team0: Port device team_slave_1 added [ 63.001663][ C1] hrtimer: interrupt took 25351 ns [ 63.008887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.030066][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.074458][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.129445][ T7643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.185585][ T7645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.240134][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.320450][ T7673] device hsr_slave_0 entered promiscuous mode [ 63.358319][ T7673] device hsr_slave_1 entered promiscuous mode [ 63.397940][ T7673] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.418501][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 22:10:05 executing program 0: creat(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_setup(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) [ 63.454125][ T7645] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.485633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.519222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.624378][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.670743][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.730820][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.737956][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.830472][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.898477][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.938493][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.945574][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.038412][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.098773][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.174464][ T7645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.208389][ T7645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.281390][ T7686] team0: Port device team_slave_0 added [ 64.297307][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.312678][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.324368][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.392318][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.441014][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.481421][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.541670][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.560954][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.588321][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.620637][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.701335][ T7645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.758514][ T7686] team0: Port device team_slave_1 added [ 64.775622][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.795490][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.815006][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.857918][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.865555][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.907579][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.915319][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:10:07 executing program 0: creat(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_setup(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) [ 65.039778][ T7686] device hsr_slave_0 entered promiscuous mode [ 65.102017][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 65.115581][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 65.157906][ T7686] device hsr_slave_1 entered promiscuous mode [ 65.177559][ T7686] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.185118][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.207923][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.216730][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.224914][ T7819] bridge0: port 1(bridge_slave_0) entered forwarding state 22:10:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x20040880, &(0x7f0000000040)={0xa, 0x4004e22, 0x0, @loopback}, 0x1c) [ 65.373817][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.399464][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 65.439776][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.518894][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.526141][ T7819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.579945][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.651852][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.703200][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.768352][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.792787][ T7650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.833036][ T7650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.934989][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.962160][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.981172][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.011865][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.061685][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.107500][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.126369][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.181996][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.217010][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.264150][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.312142][ T7673] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.377539][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.410720][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.433522][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.455723][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.477052][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.551167][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.591252][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.631179][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.640712][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.691190][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.711744][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.750531][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.758987][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.817957][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.858531][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.898498][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.948451][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.968450][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.997638][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.039063][ T7673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.090170][ T7673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.131620][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.148146][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.156583][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 22:10:09 executing program 0: creat(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_setup(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) 22:10:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x20040880, &(0x7f0000000040)={0xa, 0x4004e22, 0x0, @loopback}, 0x1c) [ 67.208130][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.262275][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.289186][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 67.301801][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.343961][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.366568][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.451169][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.478731][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.521955][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.620008][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.636742][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.655161][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.732290][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.767150][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.808945][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.816226][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.873055][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.902187][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.938836][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.946187][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.010268][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.022325][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.033716][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.044909][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 22:10:10 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom}, [@null, @default, @null, @bcast, @remote, @rose, @remote, @default]}, 0x10) 22:10:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x20040880, &(0x7f0000000040)={0xa, 0x4004e22, 0x0, @loopback}, 0x1c) [ 68.055894][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.079985][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.110903][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 68.124827][ T7686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.169009][ T7686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.221344][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.257839][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.271728][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.293725][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.311259][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.330840][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.355257][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.370488][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.382580][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.395954][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:10:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x188, 0x0, 0x0) dup2(r2, r3) shutdown(r3, 0x0) 22:10:11 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom}, [@null, @default, @null, @bcast, @remote, @rose, @remote, @default]}, 0x10) 22:10:11 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom}, [@null, @default, @null, @bcast, @remote, @rose, @remote, @default]}, 0x10) 22:10:11 executing program 0: creat(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_setup(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) 22:10:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x20000000003e, 0x10d, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 22:10:11 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {}]}, 0x108) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000022a, 0x2, 0x0) [ 69.009480][ T7606] ================================================================== [ 69.017774][ T7606] BUG: KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor [ 69.025642][ T7606] [ 69.028083][ T7606] read to 0xffffffff86142124 of 4 bytes by task 7944 on cpu 0: [ 69.035863][ T7606] tomoyo_supervisor+0x1b0/0xd20 [ 69.040907][ T7606] tomoyo_path_permission+0x121/0x160 [ 69.046308][ T7606] tomoyo_path_perm+0x2c6/0x390 [ 69.051318][ T7606] tomoyo_path_symlink+0x69/0xa0 [ 69.056391][ T7606] security_path_symlink+0xab/0xe0 [ 69.061616][ T7606] do_symlinkat+0xcd/0x1e0 [ 69.066373][ T7606] __x64_sys_symlink+0x3f/0x50 [ 69.071152][ T7606] do_syscall_64+0xcc/0x370 [ 69.076165][ T7606] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.082222][ T7606] [ 69.084558][ T7606] write to 0xffffffff86142124 of 4 bytes by task 7606 on cpu 1: [ 69.092377][ T7606] tomoyo_supervisor+0x1c9/0xd20 [ 69.097428][ T7606] tomoyo_path_permission+0x121/0x160 [ 69.103243][ T7606] tomoyo_path_perm+0x23e/0x390 [ 69.108129][ T7606] tomoyo_inode_getattr+0x26/0x40 [ 69.113301][ T7606] security_inode_getattr+0x9b/0xd0 [ 69.118627][ T7606] vfs_getattr+0x2e/0x70 [ 69.122889][ T7606] vfs_statx_fd+0x7a/0xd0 [ 69.127413][ T7606] __do_sys_newfstat+0x49/0xa0 [ 69.132230][ T7606] __x64_sys_newfstat+0x3a/0x50 [ 69.137117][ T7606] do_syscall_64+0xcc/0x370 [ 69.141808][ T7606] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.148047][ T7606] [ 69.150710][ T7606] Reported by Kernel Concurrency Sanitizer on: [ 69.157062][ T7606] CPU: 1 PID: 7606 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 69.164261][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.174969][ T7606] ================================================================== [ 69.183625][ T7606] Kernel panic - not syncing: panic_on_warn set ... [ 69.190319][ T7606] CPU: 1 PID: 7606 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 69.197785][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.209548][ T7606] Call Trace: [ 69.212863][ T7606] dump_stack+0x11d/0x181 [ 69.217689][ T7606] panic+0x210/0x640 [ 69.223152][ T7606] ? vprintk_func+0x8d/0x140 [ 69.228871][ T7606] kcsan_report.cold+0xc/0xd [ 69.236702][ T7606] kcsan_setup_watchpoint+0x3fe/0x460 [ 69.247639][ T7606] __tsan_unaligned_write4+0xc4/0x100 [ 69.253488][ T7606] tomoyo_supervisor+0x1c9/0xd20 [ 69.261899][ T7606] ? tomoyo_path_matches_pattern+0xa1/0x160 [ 69.271351][ T7606] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 69.281588][ T7606] ? tomoyo_compare_name_union+0x4c/0xa0 [ 69.289979][ T7606] ? __read_once_size.constprop.0+0x12/0x20 [ 69.298536][ T7606] ? tomoyo_compare_name_union+0xa0/0xa0 [ 69.306082][ T7606] tomoyo_path_permission+0x121/0x160 [ 69.312526][ T7606] tomoyo_path_perm+0x23e/0x390 [ 69.318571][ T7606] tomoyo_inode_getattr+0x26/0x40 [ 69.324486][ T7606] security_inode_getattr+0x9b/0xd0 [ 69.330537][ T7606] vfs_getattr+0x2e/0x70 [ 69.335235][ T7606] vfs_statx_fd+0x7a/0xd0 [ 69.341505][ T7606] __do_sys_newfstat+0x49/0xa0 [ 69.347321][ T7606] ? putname+0xb1/0xe0 [ 69.351592][ T7606] ? do_sys_open+0x2d8/0x4f0 [ 69.356402][ T7606] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 69.365853][ T7606] ? debug_smp_processor_id+0x4c/0x172 [ 69.376619][ T7606] __x64_sys_newfstat+0x3a/0x50 [ 69.381750][ T7606] do_syscall_64+0xcc/0x370 [ 69.386295][ T7606] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.392945][ T7606] RIP: 0033:0x7fe048de1cb4 [ 69.397612][ T7606] Code: 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 90 90 83 ff 01 89 f0 77 19 48 63 f8 48 89 d6 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 18 f3 c3 66 90 48 8b 05 51 51 2b 00 64 c7 00 [ 69.419488][ T7606] RSP: 002b:00007ffdb12ea2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 69.428498][ T7606] RAX: ffffffffffffffda RBX: 0000000001fbc760 RCX: 00007fe048de1cb4 [ 69.436690][ T7606] RDX: 00007ffdb12ea2f0 RSI: 00007ffdb12ea2f0 RDI: 0000000000000005 [ 69.445345][ T7606] RBP: 0000000000003fff R08: 0000000000000001 R09: 0000000000000000 [ 69.454540][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 69.464814][ T7606] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdb12ea880 [ 69.475676][ T7606] Kernel Offset: disabled [ 69.480532][ T7606] Rebooting in 86400 seconds..