[info] Using makefile-style concurrent boot in runlevel 2. [ 47.288309][ T27] audit: type=1800 audit(1578580347.182:21): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 47.341097][ T27] audit: type=1800 audit(1578580347.182:22): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.130' (ECDSA) to the list of known hosts. 2020/01/09 14:32:39 fuzzer started 2020/01/09 14:32:40 dialing manager at 10.128.0.105:46059 2020/01/09 14:32:41 syscalls: 2812 2020/01/09 14:32:41 code coverage: enabled 2020/01/09 14:32:41 comparison tracing: enabled 2020/01/09 14:32:41 extra coverage: enabled 2020/01/09 14:32:41 setuid sandbox: enabled 2020/01/09 14:32:41 namespace sandbox: enabled 2020/01/09 14:32:41 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/09 14:32:41 fault injection: enabled 2020/01/09 14:32:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/09 14:32:41 net packet injection: enabled 2020/01/09 14:32:41 net device setup: enabled 2020/01/09 14:32:41 concurrency sanitizer: enabled 2020/01/09 14:32:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/01/09 14:32:41 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'ext4_nonda_switch' 'ep_poll' 'blk_stat_add' 'tomoyo_supervisor' 14:32:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)) syzkaller login: [ 65.147516][ T8016] IPVS: ftp: loaded support on port[0] = 21 14:32:45 executing program 1: mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) write$nbd(0xffffffffffffffff, &(0x7f00000001c0)={0x67446698, 0x0, 0x3, 0x1, 0x4, "171e2639cc85917a7ee63725f323c8e29621d8e25028553a4c6d61d83f07"}, 0x2e) socket(0xf8728f6feca06f27, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x5) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000009600000000000000a4000000000000000000", 0xffffffe5}], 0x2) [ 65.218947][ T8016] chnl_net:caif_netlink_parms(): no params data found [ 65.271719][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.291713][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.311655][ T8016] device bridge_slave_0 entered promiscuous mode [ 65.319262][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.341283][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.349099][ T8016] device bridge_slave_1 entered promiscuous mode [ 65.393233][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.412382][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.440953][ T8019] IPVS: ftp: loaded support on port[0] = 21 [ 65.452214][ T8016] team0: Port device team_slave_0 added [ 65.460620][ T8016] team0: Port device team_slave_1 added 14:32:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000680)=""/248, &(0x7f0000000380)=0xf8) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000540)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x0, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd00"/35], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="4352bbd1b4c42af2f03b38ae44"], &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) close(r0) [ 65.523122][ T8016] device hsr_slave_0 entered promiscuous mode [ 65.592699][ T8016] device hsr_slave_1 entered promiscuous mode [ 65.676813][ T8021] IPVS: ftp: loaded support on port[0] = 21 [ 65.735196][ T8016] netdevsim netdevsim0 netdevsim0: renamed from eth0 14:32:45 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x2, 0x0, &(0x7f0000000040)) [ 65.786634][ T8016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.875196][ T8016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.938503][ T8019] chnl_net:caif_netlink_parms(): no params data found [ 65.952420][ T8016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.962727][ T8024] IPVS: ftp: loaded support on port[0] = 21 14:32:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x1}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8000000) [ 66.060393][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.067541][ T8016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.074911][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.081986][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.200695][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 66.202166][ T8029] IPVS: ftp: loaded support on port[0] = 21 [ 66.239131][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.261143][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.268967][ T8019] device bridge_slave_0 entered promiscuous mode [ 66.278715][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.287956][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.296449][ T8019] device bridge_slave_1 entered promiscuous mode [ 66.318413][ T2873] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.332004][ T2873] bridge0: port 2(bridge_slave_1) entered disabled state 14:32:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) [ 66.369224][ T8019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.416623][ T8019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.436793][ T8019] team0: Port device team_slave_0 added [ 66.450603][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.475117][ T8019] team0: Port device team_slave_1 added [ 66.483125][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.490193][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.499941][ T8021] device bridge_slave_0 entered promiscuous mode [ 66.519620][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.526847][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.534648][ T8021] device bridge_slave_1 entered promiscuous mode [ 66.542250][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.549865][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.558883][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.643428][ T8019] device hsr_slave_0 entered promiscuous mode [ 66.691386][ T8019] device hsr_slave_1 entered promiscuous mode [ 66.741226][ T8019] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.748743][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.757824][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.766204][ T2873] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.773278][ T2873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.785811][ T8032] IPVS: ftp: loaded support on port[0] = 21 [ 66.793584][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.804809][ T8024] chnl_net:caif_netlink_parms(): no params data found [ 66.814676][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.823421][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.831797][ T2873] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.839017][ T2873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.846842][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.855829][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.864845][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.873374][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.882371][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.890966][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.904765][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.928915][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.941303][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.949738][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.990427][ T8016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.001796][ T8016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.010471][ T8021] team0: Port device team_slave_0 added [ 67.021550][ T8021] team0: Port device team_slave_1 added [ 67.047063][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.055824][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.079977][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.087279][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.095052][ T8024] device bridge_slave_0 entered promiscuous mode [ 67.173718][ T8021] device hsr_slave_0 entered promiscuous mode [ 67.232801][ T8021] device hsr_slave_1 entered promiscuous mode [ 67.271223][ T8021] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.303274][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.310363][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.318702][ T8024] device bridge_slave_1 entered promiscuous mode [ 67.325547][ T8029] chnl_net:caif_netlink_parms(): no params data found [ 67.345818][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.353355][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.363844][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.398463][ T8021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.458819][ T8021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.504223][ T8021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.568653][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.576097][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.585713][ T8029] device bridge_slave_0 entered promiscuous mode [ 67.593179][ T8019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.644413][ T8024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.657085][ T8024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.681799][ T8016] device veth0_vlan entered promiscuous mode [ 67.688161][ T8021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.732979][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.740092][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.748212][ T8029] device bridge_slave_1 entered promiscuous mode [ 67.755197][ T8019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.822378][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.831351][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.840445][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.849223][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.857877][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.865903][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.889867][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.905657][ T8019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.965458][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.984796][ T8024] team0: Port device team_slave_0 added [ 67.990654][ T8019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.072946][ T8032] chnl_net:caif_netlink_parms(): no params data found [ 68.082781][ T8029] team0: Port device team_slave_0 added [ 68.089347][ T8024] team0: Port device team_slave_1 added [ 68.115547][ T8016] device veth1_vlan entered promiscuous mode [ 68.127660][ T8029] team0: Port device team_slave_1 added [ 68.163482][ T8024] device hsr_slave_0 entered promiscuous mode [ 68.191357][ T8024] device hsr_slave_1 entered promiscuous mode [ 68.221193][ T8024] debugfs: Directory 'hsr0' with parent '/' already present! [ 68.273114][ T8029] device hsr_slave_0 entered promiscuous mode [ 68.331430][ T8029] device hsr_slave_1 entered promiscuous mode [ 68.381152][ T8029] debugfs: Directory 'hsr0' with parent '/' already present! [ 68.404337][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.413171][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.491964][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.499054][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.509078][ T8032] device bridge_slave_0 entered promiscuous mode [ 68.519352][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.531316][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.539149][ T8032] device bridge_slave_1 entered promiscuous mode [ 68.558973][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.597218][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.625365][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 14:32:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)) [ 68.644940][ T8029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.693998][ T8029] netdevsim netdevsim4 netdevsim1: renamed from eth1 14:32:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)) [ 68.734729][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.742554][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:32:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)) [ 68.777814][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.788010][ T8029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.833258][ T8029] netdevsim netdevsim4 netdevsim3: renamed from eth3 14:32:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)) 14:32:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)) [ 68.880054][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.887663][ T8024] netdevsim netdevsim3 netdevsim0: renamed from eth0 14:32:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)) [ 68.963072][ T8024] netdevsim netdevsim3 netdevsim1: renamed from eth1 14:32:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000300)={0x8, 0x10001, 0x0, 'queue1\x00', 0x1}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x13, 0x9) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) open(0x0, 0x0, 0x0) [ 69.037195][ T8019] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.049504][ T8024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.090267][ T8024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.148349][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.164176][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.217503][ T8032] team0: Port device team_slave_0 added [ 69.235410][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.247824][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.256594][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.263695][ T8027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.291077][ C0] hrtimer: interrupt took 48484 ns [ 69.301744][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.309881][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 69.309943][ T27] audit: type=1804 audit(1578580369.202:31): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir491151781/syzkaller.epu4UZ/7/file0/file0" dev="loop0" ino=22 res=1 [ 69.341761][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.350372][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.357590][ T8027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.365588][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.378558][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.387278][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.398813][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.406080][ T8027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.421611][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.430125][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.438496][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.446072][ T8027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.457387][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.466634][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.478862][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.487673][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.510071][ T8032] team0: Port device team_slave_1 added [ 69.565970][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.574550][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.585539][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.600349][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.620089][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.629676][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.638458][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.647452][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.657371][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.723460][ T8032] device hsr_slave_0 entered promiscuous mode [ 69.751567][ T8032] device hsr_slave_1 entered promiscuous mode [ 69.811147][ T8032] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.819858][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.828433][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.836755][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.845066][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.853272][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.862101][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.878695][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.888952][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.922723][ T8019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.934681][ T8019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.956818][ T8029] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.966822][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.975353][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.983792][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.992593][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.000873][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.008657][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.016337][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.027800][ T8024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.045040][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.052667][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.060139][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.068920][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.077403][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.084611][ T8036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.092403][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.101173][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.109634][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.116712][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.124492][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.141019][ T8024] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.156173][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.166354][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.174215][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.181826][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.189473][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.198984][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.214739][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.223545][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.232822][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.240173][ T8030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.249995][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.258332][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.272555][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.285692][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.294480][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.301650][ T8027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.332823][ T8032] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.377653][ T8032] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.423271][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.432387][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.440980][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.449941][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.458722][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.467508][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.476664][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.485867][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.494627][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.503790][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.512518][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.529670][ T8019] device veth0_vlan entered promiscuous mode [ 70.542344][ T8032] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.582906][ T8032] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.623434][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.631982][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.640492][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.649477][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.657884][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.666681][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.675286][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.684524][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.693234][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.704714][ T8019] device veth1_vlan entered promiscuous mode [ 70.715583][ T8029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.727247][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.742847][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.750799][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.759444][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.767673][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.775449][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.783782][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.792156][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.800487][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.809506][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.827018][ T8021] device veth0_vlan entered promiscuous mode [ 70.844612][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.853638][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.862769][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.871491][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.894349][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.905215][ T8021] device veth1_vlan entered promiscuous mode [ 70.913894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.921620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.967272][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.979066][ T8024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.006448][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.018352][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.091293][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.100554][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.115900][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.131760][ T8024] device veth0_vlan entered promiscuous mode [ 71.143443][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.170262][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.200036][ T8032] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.214105][ T8024] device veth1_vlan entered promiscuous mode [ 71.231422][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.240552][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.248695][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.256868][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.264653][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.272480][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.281110][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.290131][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.297234][ T8030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.305400][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.314093][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.327921][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.335046][ T8030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.362157][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.396300][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.406182][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.415973][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.425397][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.434314][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.447031][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.456604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.473571][ T8029] device veth0_vlan entered promiscuous mode 14:32:51 executing program 1: mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) write$nbd(0xffffffffffffffff, &(0x7f00000001c0)={0x67446698, 0x0, 0x3, 0x1, 0x4, "171e2639cc85917a7ee63725f323c8e29621d8e25028553a4c6d61d83f07"}, 0x2e) socket(0xf8728f6feca06f27, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x5) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000009600000000000000a4000000000000000000", 0xffffffe5}], 0x2) 14:32:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000300)={0x8, 0x10001, 0x0, 'queue1\x00', 0x1}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x13, 0x9) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) open(0x0, 0x0, 0x0) [ 71.504589][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.515159][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.532485][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.552190][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.575028][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.605584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.624811][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.676220][ T8032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.724919][ T8032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.783106][ T8029] device veth1_vlan entered promiscuous mode [ 71.806419][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.857255][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.866625][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.878516][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.934930][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.948450][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.969991][ T2873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.984086][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0 14:32:52 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x2, 0x0, &(0x7f0000000040)) 14:32:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000680)=""/248, &(0x7f0000000380)=0xf8) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000540)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x0, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd00"/35], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="4352bbd1b4c42af2f03b38ae44"], &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) close(r0) [ 72.254850][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.277447][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.306348][ T8032] device veth0_vlan entered promiscuous mode [ 72.322445][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.330924][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.348383][ T8032] device veth1_vlan entered promiscuous mode [ 72.355421][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.363825][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.372372][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.671155][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 14:32:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000300)={0x8, 0x10001, 0x0, 'queue1\x00', 0x1}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x13, 0x9) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) open(0x0, 0x0, 0x0) 14:32:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) 14:32:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x1}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8000000) 14:32:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000680)=""/248, &(0x7f0000000380)=0xf8) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000540)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x0, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd00"/35], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="4352bbd1b4c42af2f03b38ae44"], &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) close(r0) 14:32:52 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x2, 0x0, &(0x7f0000000040)) 14:32:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x1}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8000000) 14:32:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) 14:32:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x1}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8000000) [ 73.321249][ T7] tipc: TX() has been purged, node left! [ 74.381450][ T8190] IPVS: ftp: loaded support on port[0] = 21 [ 74.632025][ T26] ================================================================== [ 74.640227][ T26] BUG: KCSAN: data-race in find_next_bit / rcu_report_exp_cpu_mult [ 74.648110][ T26] [ 74.650443][ T26] write to 0xffffffff85c7d080 of 8 bytes by interrupt on cpu 0: [ 74.658095][ T26] rcu_report_exp_cpu_mult+0x4f/0xa0 [ 74.663912][ T26] rcu_report_exp_rdp+0x6c/0x90 [ 74.668764][ T26] rcu_exp_handler+0xe5/0x190 [ 74.673439][ T26] flush_smp_call_function_queue+0x18c/0x2b0 [ 74.679420][ T26] generic_smp_call_function_single_interrupt+0x1c/0x49 [ 74.686355][ T26] smp_call_function_single_interrupt+0x3f/0x100 [ 74.692676][ T26] call_function_single_interrupt+0xf/0x20 [ 74.698487][ T26] __sanitizer_cov_trace_const_cmp4+0x11/0x20 [ 74.704563][ T26] tomoyo_domain_quota_is_ok+0x234/0x2b0 [ 74.710205][ T26] tomoyo_supervisor+0x22b/0xd20 [ 74.715150][ T26] tomoyo_path_permission+0x121/0x160 [ 74.720522][ T26] tomoyo_check_open_permission+0x2fd/0x320 [ 74.726411][ T26] tomoyo_file_open+0x75/0x90 [ 74.731092][ T26] security_file_open+0x69/0x210 [ 74.736029][ T26] do_dentry_open+0x211/0x970 [ 74.740709][ T26] vfs_open+0x62/0x80 [ 74.744694][ T26] path_openat+0xf9f/0x3580 [ 74.749196][ T26] do_filp_open+0x11e/0x1b0 [ 74.753849][ T26] do_sys_open+0x3b3/0x4f0 [ 74.758266][ T26] __x64_sys_open+0x55/0x70 [ 74.762780][ T26] do_syscall_64+0xcc/0x3a0 [ 74.767290][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 74.773186][ T26] [ 74.775523][ T26] read to 0xffffffff85c7d080 of 8 bytes by task 26 on cpu 1: [ 74.782897][ T26] find_next_bit+0x57/0xe0 [ 74.787319][ T26] sync_rcu_exp_select_node_cpus+0x28e/0x510 [ 74.793298][ T26] sync_rcu_exp_select_cpus+0x30c/0x590 [ 74.799076][ T26] wait_rcu_exp_gp+0x25/0x40 [ 74.803673][ T26] process_one_work+0x3d4/0x890 [ 74.808786][ T26] worker_thread+0xa0/0x800 [ 74.813286][ T26] kthread+0x1d4/0x200 [ 74.817358][ T26] ret_from_fork+0x1f/0x30 [ 74.821779][ T26] [ 74.824102][ T26] Reported by Kernel Concurrency Sanitizer on: [ 74.830254][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 5.5.0-rc1-syzkaller #0 [ 74.838399][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.848570][ T26] Workqueue: rcu_gp wait_rcu_exp_gp [ 74.853868][ T26] ================================================================== [ 74.861928][ T26] Kernel panic - not syncing: panic_on_warn set ... [ 74.868518][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 5.5.0-rc1-syzkaller #0 [ 74.876671][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.886738][ T26] Workqueue: rcu_gp wait_rcu_exp_gp [ 74.891930][ T26] Call Trace: [ 74.895234][ T26] dump_stack+0x11d/0x181 [ 74.899576][ T26] panic+0x210/0x640 [ 74.903482][ T26] ? vprintk_func+0x8d/0x140 [ 74.908085][ T26] kcsan_report.cold+0xc/0xd [ 74.912686][ T26] kcsan_setup_watchpoint+0x3fe/0x460 [ 74.918064][ T26] __tsan_read8+0xc6/0x100 [ 74.922483][ T26] find_next_bit+0x57/0xe0 [ 74.926908][ T26] sync_rcu_exp_select_node_cpus+0x28e/0x510 [ 74.932901][ T26] sync_rcu_exp_select_cpus+0x30c/0x590 [ 74.938456][ T26] wait_rcu_exp_gp+0x25/0x40 [ 74.943054][ T26] process_one_work+0x3d4/0x890 [ 74.947913][ T26] worker_thread+0xa0/0x800 [ 74.952432][ T26] kthread+0x1d4/0x200 [ 74.956507][ T26] ? rescuer_thread+0x6a0/0x6a0 [ 74.961362][ T26] ? kthread_unpark+0xe0/0xe0 [ 74.966056][ T26] ret_from_fork+0x1f/0x30 [ 74.972018][ T26] Kernel Offset: disabled [ 74.976375][ T26] Rebooting in 86400 seconds..