[ 43.995615][ T25] audit: type=1800 audit(1572322264.512:21): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 44.042155][ T25] audit: type=1800 audit(1572322264.512:22): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 45.086499][ T7252] sshd (7252) used greatest stack depth: 10136 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. 2019/10/29 04:11:16 fuzzer started 2019/10/29 04:11:18 dialing manager at 10.128.0.105:40771 2019/10/29 04:11:18 syscalls: 2540 2019/10/29 04:11:18 code coverage: enabled 2019/10/29 04:11:18 comparison tracing: enabled 2019/10/29 04:11:18 extra coverage: extra coverage is not supported by the kernel 2019/10/29 04:11:18 setuid sandbox: enabled 2019/10/29 04:11:18 namespace sandbox: enabled 2019/10/29 04:11:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/29 04:11:18 fault injection: enabled 2019/10/29 04:11:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/29 04:11:18 net packet injection: enabled 2019/10/29 04:11:18 net device setup: enabled 2019/10/29 04:11:18 concurrency sanitizer: enabled 2019/10/29 04:11:20 adding functions to KCSAN blacklist: 'generic_permission' 'do_nanosleep' '__hrtimer_run_queues' 'do_exit' 'tomoyo_supervisor' '__nf_conntrack_find_get' 'tcp_add_backlog' 'task_dump_owner' 04:11:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1fe, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, @fd}]}, 0x1c}}, 0x0) syzkaller login: [ 64.023734][ T7347] IPVS: ftp: loaded support on port[0] = 21 04:11:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') lseek(r0, 0x20400000, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/138, 0x8a) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{}]}) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200a01, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) close(r0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0xffffffff}, 0x28, 0x1) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) fstat(r3, &(0x7f0000000280)) geteuid() openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-control\x00', 0xb862850348cd7c69, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@empty, @in=@remote}}, {{@in=@local}}}, &(0x7f0000000400)=0xe8) getgroups(0x4000000000000217, &(0x7f0000000880)) r5 = geteuid() r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) io_setup(0x8, &(0x7f0000000280)=0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x8888, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB="3a67726f75705f69643d775a725697cab24ae9c097b0e367467e340eb382c621c1249de09ee3bf0254ab927137b02279ce5d84666d4003255e69a7e91026e8f72e5c3f59b37ab5f7224733f7d567858ff7341f6ad22af2918472b2cb4754b8759358260daa9f812737cd257a98c115c3b769a368384bad8845615eea541a046d05d47c5e7df8257ce90b920dd0dfa98a669348f642477f9b845c95d66043642c1aaa9ae00f6565ec43ecba4a49fa2ae85094a9063e77c7ea2efef300004ab2bcf77f80bcb7b87b5b86688b9802a320938264022713612fb455c64511a5b7a7ec418645000000000000000000", @ANYRESDEC=r10, @ANYBLOB=',allow_other,fu']) r11 = shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r11, 0x1, &(0x7f00000001c0)={{0x6, 0x0, r10, r5, 0xee01, 0x80, 0x8}, 0x81, 0x7, 0x1, 0x20, 0x0, r6, 0x200}) geteuid() r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) io_setup(0x8, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000580)=""/229) [ 64.136194][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 64.227328][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.252663][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.263250][ T7347] device bridge_slave_0 entered promiscuous mode [ 64.272115][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.280164][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.290013][ T7347] device bridge_slave_1 entered promiscuous mode [ 64.327542][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.340313][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:11:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = dup(r0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x70e000) [ 64.384373][ T7347] team0: Port device team_slave_0 added [ 64.393502][ T7347] team0: Port device team_slave_1 added [ 64.424438][ T7351] IPVS: ftp: loaded support on port[0] = 21 [ 64.473902][ T7347] device hsr_slave_0 entered promiscuous mode [ 64.532085][ T7347] device hsr_slave_1 entered promiscuous mode [ 64.619342][ T7353] IPVS: ftp: loaded support on port[0] = 21 [ 64.792283][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.799880][ T7347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.807610][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.815696][ T7347] bridge0: port 1(bridge_slave_0) entered forwarding state 04:11:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1=0xac14140d}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4048d28}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xcc, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd5f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0xcc}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x3f000000a0df0500, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018025021700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0xac03000000000000}, 0x0) [ 65.087691][ T7347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.142984][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.192356][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.221694][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.262663][ T7351] chnl_net:caif_netlink_parms(): no params data found [ 65.367810][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.381991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.432999][ T7347] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.492135][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.521049][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.530592][ T7351] device bridge_slave_0 entered promiscuous mode [ 65.562384][ T7353] chnl_net:caif_netlink_parms(): no params data found [ 65.584040][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.601052][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.642091][ T7351] device bridge_slave_1 entered promiscuous mode [ 65.713988][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.752555][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.783416][ T2404] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.791740][ T2404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.868774][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.884498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.931870][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.939669][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.003187][ T7382] IPVS: ftp: loaded support on port[0] = 21 [ 66.006002][ T7351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.064832][ T7351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.104189][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.132715][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.165279][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.192382][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.220284][ T7347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.253917][ T7347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.282980][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.290091][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.306512][ T7353] device bridge_slave_0 entered promiscuous mode [ 66.319895][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.327230][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.338527][ T7353] device bridge_slave_1 entered promiscuous mode 04:11:26 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r1, r1}, &(0x7f0000000280)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000540)={'rmd128\x00'}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) [ 66.356120][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.364905][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.376862][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.387474][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.399263][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.422758][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.461580][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.517488][ T7351] team0: Port device team_slave_0 added [ 66.544588][ T7351] team0: Port device team_slave_1 added [ 66.559864][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.625685][ T7347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.678880][ T7353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.702882][ T7353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.886559][ T7351] device hsr_slave_0 entered promiscuous mode [ 66.951529][ T7351] device hsr_slave_1 entered promiscuous mode [ 66.981286][ T7351] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.006612][ T7353] team0: Port device team_slave_0 added [ 67.043401][ T7353] team0: Port device team_slave_1 added [ 67.286196][ T7353] device hsr_slave_0 entered promiscuous mode [ 67.333060][ T7353] device hsr_slave_1 entered promiscuous mode [ 67.371206][ T7353] debugfs: Directory 'hsr0' with parent '/' already present! 04:11:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1fe, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, @fd}]}, 0x1c}}, 0x0) [ 67.463942][ T7395] IPVS: ftp: loaded support on port[0] = 21 [ 67.497503][ T7382] chnl_net:caif_netlink_parms(): no params data found [ 67.676127][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.766028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.781810][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.856241][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 04:11:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f0000000380)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\'\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9y\x14\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99&\xe5#\xacH\xbf\\\xb9`\xcd\xce\x10\xf2\x02y\x97Ap\xd5\x7f\xf5\t\xb8\x8aR\x04\x8bS\xd5\xf9R\x0e\x9e8\xda\xf2\xfd\x92\\\x9c\x90\xf2\xee\x1al&\xa2\x04+\xa9\xa2\x82\b5`\x96\xff\x1a\x12\xd4\x12\b\xcf\xa0\f\xf7W\x9f\x83\x97\x10\x92\n>\xad\x81fpa_\x01\x00]&O:%\xd2\x8f\xf6\xdc\xd0I\xd2}\x1fj#_\x1eB\xdbGs\nv\x87!\xb0\xf8x\xad&\xb3\xb3\xb8\x1b\x0f\xca\x15\xdc\x88\xe1[\x8f\xaa6Q^\xed\xd4U\xa5\xba\xc7sN\x84\xe4\x1d\xfc\x00'/541) 04:11:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1fe, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, @fd}]}, 0x1c}}, 0x0) [ 68.001043][ T7382] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.008310][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.072042][ T7382] device bridge_slave_0 entered promiscuous mode [ 68.132619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.151714][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.160252][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.167395][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.291884][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.300836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.385842][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.392988][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state 04:11:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1fe, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, @fd}]}, 0x1c}}, 0x0) [ 68.450530][ T7353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.541180][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.548286][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.612162][ T7382] device bridge_slave_1 entered promiscuous mode [ 68.622502][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.630710][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.692547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.752377][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.806993][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 04:11:29 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 68.862374][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.932010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.006909][ T7353] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.070937][ T7454] IPVS: ftp: loaded support on port[0] = 21 [ 69.071125][ T7351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.160962][ T7351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.226368][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.244392][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 04:11:29 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 69.297403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.352203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.360819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.475160][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.511802][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.576245][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.611735][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.651616][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.660243][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.667612][ T7383] bridge0: port 1(bridge_slave_0) entered forwarding state 04:11:30 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 69.752681][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.826710][ T7382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.967901][ T7382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.026994][ T7351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.051645][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.060495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 04:11:30 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 70.134668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.142317][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.216859][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.304875][ T7395] chnl_net:caif_netlink_parms(): no params data found [ 70.405363][ T7382] team0: Port device team_slave_0 added [ 70.465572][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.496881][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.591159][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.681908][ T7382] team0: Port device team_slave_1 added [ 70.740129][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.864268][ T7382] device hsr_slave_0 entered promiscuous mode [ 70.925771][ T7382] device hsr_slave_1 entered promiscuous mode [ 71.021140][ T7382] debugfs: Directory 'hsr0' with parent '/' already present! [ 71.031754][ T7353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.088437][ T7353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.145024][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.164957][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.225077][ C0] hrtimer: interrupt took 42766 ns [ 71.271832][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.342455][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.400767][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.455382][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.501000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 71.506926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 71.520386][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.621079][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 71.626912][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 71.740998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 71.746821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 71.811524][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.818617][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.854289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 71.860971][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 71.860998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 71.872506][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 71.929001][ T7395] device bridge_slave_0 entered promiscuous mode [ 72.052369][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.059469][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.148918][ T7395] device bridge_slave_1 entered promiscuous mode [ 72.215554][ T7353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.302810][ T7454] chnl_net:caif_netlink_parms(): no params data found 04:11:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') lseek(r0, 0x20400000, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/138, 0x8a) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{}]}) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200a01, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) close(r0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0xffffffff}, 0x28, 0x1) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) fstat(r3, &(0x7f0000000280)) geteuid() openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-control\x00', 0xb862850348cd7c69, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@empty, @in=@remote}}, {{@in=@local}}}, &(0x7f0000000400)=0xe8) getgroups(0x4000000000000217, &(0x7f0000000880)) r5 = geteuid() r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) io_setup(0x8, &(0x7f0000000280)=0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x8888, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB="3a67726f75705f69643d775a725697cab24ae9c097b0e367467e340eb382c621c1249de09ee3bf0254ab927137b02279ce5d84666d4003255e69a7e91026e8f72e5c3f59b37ab5f7224733f7d567858ff7341f6ad22af2918472b2cb4754b8759358260daa9f812737cd257a98c115c3b769a368384bad8845615eea541a046d05d47c5e7df8257ce90b920dd0dfa98a669348f642477f9b845c95d66043642c1aaa9ae00f6565ec43ecba4a49fa2ae85094a9063e77c7ea2efef300004ab2bcf77f80bcb7b87b5b86688b9802a320938264022713612fb455c64511a5b7a7ec418645000000000000000000", @ANYRESDEC=r10, @ANYBLOB=',allow_other,fu']) r11 = shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r11, 0x1, &(0x7f00000001c0)={{0x6, 0x0, r10, r5, 0xee01, 0x80, 0x8}, 0x81, 0x7, 0x1, 0x20, 0x0, r6, 0x200}) geteuid() r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) io_setup(0x8, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000580)=""/229) [ 72.367574][ T7395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.470540][ T7395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.573833][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.588905][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.639003][ T7454] device bridge_slave_0 entered promiscuous mode [ 72.693439][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.749798][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.795554][ T7454] device bridge_slave_1 entered promiscuous mode [ 72.837001][ T7395] team0: Port device team_slave_0 added [ 72.920796][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.946975][ T7395] team0: Port device team_slave_1 added [ 73.007379][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.080006][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.173697][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.218369][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.287766][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:11:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = dup(r0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x70e000) [ 73.375590][ T7395] device hsr_slave_0 entered promiscuous mode [ 73.566890][ T7395] device hsr_slave_1 entered promiscuous mode [ 73.621199][ T7395] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.640655][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.664740][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.702648][ T2404] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.709786][ T2404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.750426][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.789655][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.849881][ T2404] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.857045][ T2404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.896835][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.040584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.049361][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.123859][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.156349][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.243022][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.332178][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.392285][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.461199][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.474904][ T7382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.541991][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.582491][ T7454] team0: Port device team_slave_0 added [ 74.677157][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.702593][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.763122][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.818346][ T7454] team0: Port device team_slave_1 added [ 74.909451][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.984330][ T7454] device hsr_slave_0 entered promiscuous mode [ 75.021809][ T7454] device hsr_slave_1 entered promiscuous mode [ 75.041329][ T7454] debugfs: Directory 'hsr0' with parent '/' already present! [ 75.111441][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.212919][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.240445][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.277754][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.372888][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.399348][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.431710][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.438831][ T7537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.490501][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.553837][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.611456][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.618555][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.671794][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.778250][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.802499][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.868260][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.923960][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.971488][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.032125][ T7593] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 76.051062][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.117668][ T7395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.185348][ T7395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.273496][ T7595] Started in network mode [ 76.278357][ T7595] Own node identity ac14140d, cluster identity 4711 [ 76.325707][ T7595] vcan0: MTU too low for tipc bearer [ 76.361139][ T7595] Enabling of bearer rejected, failed to enable media [ 76.412097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.431370][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.486263][ T7597] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 76.488614][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.574957][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.618064][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.674097][ T7593] vcan0: MTU too low for tipc bearer [ 76.679465][ T7593] Enabling of bearer rejected, failed to enable media [ 76.681023][ C1] net_ratelimit: 19 callbacks suppressed [ 76.681036][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 76.698829][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 76.758068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.811323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 76.817140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 76.840823][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.931640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 76.937459][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 76.955889][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.050980][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 77.051137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 77.056871][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 77.062556][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 77.076957][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.085831][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.125049][ T7454] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.261553][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.270650][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.345812][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.352962][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.396664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.442522][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.505933][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.513176][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.586446][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.637063][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.682433][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.731545][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.800818][ T7454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.835775][ T7454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.865558][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.884735][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.910427][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.945632][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.966345][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.988124][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 04:11:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1=0xac14140d}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4048d28}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xcc, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd5f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0xcc}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x3f000000a0df0500, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018025021700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0xac03000000000000}, 0x0) [ 78.037271][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.066429][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.147526][ T7614] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 78.189409][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.224494][ T7609] vcan0: MTU too low for tipc bearer [ 78.230034][ T7609] Enabling of bearer rejected, failed to enable media [ 78.266613][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.619014][ T7589] ================================================================== [ 78.627337][ T7589] BUG: KCSAN: data-race in pid_update_inode / security_file_permission [ 78.635756][ T7589] [ 78.638137][ T7589] write to 0xffff888123908d18 of 2 bytes by task 7587 on cpu 1: [ 78.646070][ T7589] pid_update_inode+0x51/0x70 [ 78.650951][ T7589] pid_revalidate+0x91/0xd0 [ 78.655488][ T7589] lookup_fast+0x618/0x700 [ 78.659938][ T7589] path_openat+0x2ac/0x36e0 [ 78.664696][ T7589] do_filp_open+0x11e/0x1b0 [ 78.669286][ T7589] do_sys_open+0x3b3/0x4f0 [ 78.673701][ T7589] __x64_sys_open+0x55/0x70 [ 78.678418][ T7589] do_syscall_64+0xcc/0x370 [ 78.683137][ T7589] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 78.689164][ T7589] [ 78.691515][ T7589] read to 0xffff888123908d18 of 2 bytes by task 7589 on cpu 0: [ 78.699068][ T7589] security_file_permission+0x157/0x280 [ 78.704967][ T7589] rw_verify_area+0xe1/0x250 [ 78.709556][ T7589] vfs_read+0xf0/0x2c0 [ 78.715030][ T7589] ksys_read+0xd5/0x1b0 [ 78.719444][ T7589] __x64_sys_read+0x4c/0x60 [ 78.724132][ T7589] do_syscall_64+0xcc/0x370 [ 78.728731][ T7589] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 78.734787][ T7589] [ 78.737108][ T7589] Reported by Kernel Concurrency Sanitizer on: [ 78.743374][ T7589] CPU: 0 PID: 7589 Comm: ps Not tainted 5.4.0-rc3+ #0 [ 78.750300][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.761227][ T7589] ================================================================== [ 78.769284][ T7589] Kernel panic - not syncing: panic_on_warn set ... [ 78.776186][ T7589] CPU: 0 PID: 7589 Comm: ps Not tainted 5.4.0-rc3+ #0 [ 78.783036][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.793452][ T7589] Call Trace: [ 78.796750][ T7589] dump_stack+0xf5/0x159 [ 78.801005][ T7589] panic+0x210/0x640 [ 78.805080][ T7589] ? vprintk_func+0x8d/0x140 [ 78.809671][ T7589] kcsan_report.cold+0xc/0x10 [ 78.814362][ T7589] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 78.819914][ T7589] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 78.826159][ T7589] __tsan_read2+0x2c/0x30 [ 78.830782][ T7589] security_file_permission+0x157/0x280 [ 78.836601][ T7589] rw_verify_area+0xe1/0x250 [ 78.841192][ T7589] vfs_read+0xf0/0x2c0 [ 78.845257][ T7589] ksys_read+0xd5/0x1b0 [ 78.849414][ T7589] __x64_sys_read+0x4c/0x60 [ 78.853924][ T7589] do_syscall_64+0xcc/0x370 [ 78.858617][ T7589] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 78.864693][ T7589] RIP: 0033:0x7f411a5f9310 [ 78.869211][ T7589] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 78.889460][ T7589] RSP: 002b:00007ffd526a1f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.898571][ T7589] RAX: ffffffffffffffda RBX: 00007f411acae010 RCX: 00007f411a5f9310 [ 78.906648][ T7589] RDX: 0000000000020000 RSI: 00007f411acae010 RDI: 0000000000000006 [ 78.914793][ T7589] RBP: 0000000000020000 R08: 0000000000000000 R09: 00007f411a8c155f [ 78.922937][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.930918][ T7589] R13: 0000000000000006 R14: 00007f411acae010 R15: 0000000000000000 [ 78.940430][ T7589] Kernel Offset: disabled [ 78.944847][ T7589] Rebooting in 86400 seconds..