[info] Using makefile-style concurrent boot in runlevel 2. [ 49.877496][ T26] audit: type=1800 audit(1574981720.885:21): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.218' (ECDSA) to the list of known hosts. 2019/11/28 22:55:33 fuzzer started 2019/11/28 22:55:34 dialing manager at 10.128.0.105:46851 2019/11/28 22:55:34 syscalls: 2589 2019/11/28 22:55:34 code coverage: enabled 2019/11/28 22:55:34 comparison tracing: enabled 2019/11/28 22:55:34 extra coverage: extra coverage is not supported by the kernel 2019/11/28 22:55:34 setuid sandbox: enabled 2019/11/28 22:55:34 namespace sandbox: enabled 2019/11/28 22:55:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/28 22:55:34 fault injection: enabled 2019/11/28 22:55:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/28 22:55:34 net packet injection: enabled 2019/11/28 22:55:34 net device setup: enabled 2019/11/28 22:55:34 concurrency sanitizer: enabled 2019/11/28 22:55:34 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 66.870705][ T7541] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/28 22:55:40 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'pipe_poll' 'vm_area_dup' 'find_get_pages_range_tag' 'kauditd_thread' 'blk_mq_dispatch_rq_list' 'common_perm_cond' 'tick_do_update_jiffies64' 'run_timer_softirq' 'page_counter_try_charge' 'ext4_has_free_clusters' 'wbt_done' 'ext4_free_inode' 'timer_clear_idle' 'futex_wait_queue_me' 'ep_poll' 'wbt_issue' 'taskstats_exit' 'blk_mq_run_hw_queue' 'generic_write_end' '__ext4_new_inode' 'blk_mq_get_request' 'tick_sched_do_timer' 'blk_mq_sched_dispatch_requests' 'poll_schedule_timeout' 'process_srcu' 'xas_clear_mark' 'ip_finish_output2' 'sctp_assoc_migrate' 'tomoyo_supervisor' 'tcp_add_backlog' 'find_next_bit' 'rcu_gp_fqs_loop' 'mm_update_next_owner' 22:56:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) [ 98.096077][ T7545] IPVS: ftp: loaded support on port[0] = 21 22:56:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)) [ 98.171335][ T7545] chnl_net:caif_netlink_parms(): no params data found [ 98.234487][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.251061][ T7545] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.280531][ T7545] device bridge_slave_0 entered promiscuous mode [ 98.288140][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.306069][ T7545] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.314235][ T7545] device bridge_slave_1 entered promiscuous mode [ 98.326864][ T7548] IPVS: ftp: loaded support on port[0] = 21 [ 98.345828][ T7545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 22:56:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x0) [ 98.372163][ T7545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.411233][ T7545] team0: Port device team_slave_0 added [ 98.436945][ T7545] team0: Port device team_slave_1 added [ 98.502547][ T7545] device hsr_slave_0 entered promiscuous mode [ 98.560834][ T7545] device hsr_slave_1 entered promiscuous mode 22:56:09 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) r2 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x100000003, 0x1, 0x4f, 0x0, 0x400000000}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, &(0x7f0000000240), 0x4000000000dc) dup3(r0, r2, 0x80000) write$P9_RXATTRWALK(r0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) r5 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) sendfile(r5, r6, &(0x7f0000000240), 0x4000000000dc) dup3(r4, r5, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000000300)='st\x87{\xa7+E\xc5\xb1V\x94d\x85\x1e\xe4\xc4(\x00\x00\x82\xf24\x9b/\xd2l\\\xd8\xc7\xc1j\xa5p\x90u\xfc\xab\xb0>\xf3\b6ZEq\x92\xfc\xfbq+\xe68\xd9') sendfile(r7, r9, 0x0, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000055c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)}, 0x0) rmdir(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') [ 98.634160][ T7548] chnl_net:caif_netlink_parms(): no params data found [ 98.683131][ T7551] IPVS: ftp: loaded support on port[0] = 21 [ 98.767707][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.831923][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.869757][ T7548] device bridge_slave_0 entered promiscuous mode [ 98.939231][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.980500][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.988378][ T7548] device bridge_slave_1 entered promiscuous mode [ 99.035632][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.042758][ T7545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.050117][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.057211][ T7545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.142450][ T7576] IPVS: ftp: loaded support on port[0] = 21 [ 99.163929][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.184814][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.242232][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.250271][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state 22:56:10 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x84003ff) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000140)=r3) capget(&(0x7f00000000c0)={0x20080522, r3}, &(0x7f0000000200)={0x101, 0x3, 0x7fffffff, 0x1ff, 0xffffff81, 0x800}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)={0x2}) capget(&(0x7f0000000000)={0x40013548}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x3, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc)) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x9, 0x4efd3349, 0xd8e5}, &(0x7f0000000340)=0x10) [ 99.343520][ T7548] team0: Port device team_slave_0 added [ 99.350325][ T7548] team0: Port device team_slave_1 added [ 99.440131][ T7545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.532638][ T7548] device hsr_slave_0 entered promiscuous mode [ 99.571633][ T7548] device hsr_slave_1 entered promiscuous mode [ 99.610729][ T7548] debugfs: Directory 'hsr0' with parent '/' already present! [ 99.626220][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 99.687960][ T7545] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.733475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.771190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.842042][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.871077][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.872095][ T7582] IPVS: ftp: loaded support on port[0] = 21 [ 99.913378][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.920479][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.009359][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.052718][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.101151][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.108416][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.228659][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.271417][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.313816][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.362435][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.418045][ T7545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 22:56:11 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYPTR], 0x8) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000004800)='/dev/loop-control\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 100.471890][ T7545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.518721][ T7576] chnl_net:caif_netlink_parms(): no params data found [ 100.584386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.603585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.671243][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.691271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.731010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.763005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.782830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.818007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.863198][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.870370][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.901260][ T7551] device bridge_slave_0 entered promiscuous mode [ 100.932951][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.952421][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.972455][ T7551] device bridge_slave_1 entered promiscuous mode [ 101.010723][ T7545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.057714][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.063035][ T7613] IPVS: ftp: loaded support on port[0] = 21 [ 101.090674][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.098497][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.114210][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.140531][ T7576] device bridge_slave_0 entered promiscuous mode [ 101.189280][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.216018][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.223420][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.241068][ T7576] device bridge_slave_1 entered promiscuous mode [ 101.289548][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.325688][ T7548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.392061][ T7576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.422413][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.451062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.484531][ T7551] team0: Port device team_slave_0 added [ 101.490299][ T7582] chnl_net:caif_netlink_parms(): no params data found [ 101.515907][ T7548] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.533421][ T7576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.559975][ T7551] team0: Port device team_slave_1 added [ 101.606133][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.630401][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.648512][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.655652][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.666445][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.675503][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.686743][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.694227][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state 22:56:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) [ 101.755644][ T7576] team0: Port device team_slave_0 added [ 101.812227][ T7551] device hsr_slave_0 entered promiscuous mode [ 101.823217][ C0] hrtimer: interrupt took 35214 ns 22:56:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) [ 101.860758][ T7551] device hsr_slave_1 entered promiscuous mode [ 101.900562][ T7551] debugfs: Directory 'hsr0' with parent '/' already present! [ 101.911875][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.920552][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.929585][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.942467][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.953274][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 22:56:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) [ 101.962643][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.973537][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.982644][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.991141][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.999406][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.010341][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.024453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.045435][ T7576] team0: Port device team_slave_1 added [ 102.055243][ T7548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.067485][ T7613] chnl_net:caif_netlink_parms(): no params data found 22:56:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) [ 102.123030][ T7576] device hsr_slave_0 entered promiscuous mode [ 102.180778][ T7576] device hsr_slave_1 entered promiscuous mode [ 102.200512][ T7576] debugfs: Directory 'hsr0' with parent '/' already present! [ 102.219846][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.243090][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.251375][ T7582] device bridge_slave_0 entered promiscuous mode [ 102.333959][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.353843][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.396809][ T7582] device bridge_slave_1 entered promiscuous mode [ 102.436183][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state 22:56:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) [ 102.473426][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.505892][ T7613] device bridge_slave_0 entered promiscuous mode [ 102.574421][ T7671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.581994][ T7671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.621491][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.629022][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.659248][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.689205][ T7613] device bridge_slave_1 entered promiscuous mode [ 102.816544][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.965052][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.005180][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.071741][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.188738][ T7613] team0: Port device team_slave_0 added [ 103.243557][ T7613] team0: Port device team_slave_1 added [ 103.255946][ T7582] team0: Port device team_slave_0 added 22:56:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) [ 103.320626][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.331442][ T7582] team0: Port device team_slave_1 added [ 103.394801][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.482828][ T7582] device hsr_slave_0 entered promiscuous mode [ 103.531097][ T7582] device hsr_slave_1 entered promiscuous mode [ 103.570577][ T7582] debugfs: Directory 'hsr0' with parent '/' already present! 22:56:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)) [ 103.609541][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.624260][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.695764][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.752477][ T7613] device hsr_slave_0 entered promiscuous mode [ 103.792412][ T7613] device hsr_slave_1 entered promiscuous mode [ 103.832455][ T7613] debugfs: Directory 'hsr0' with parent '/' already present! 22:56:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)) [ 104.014659][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.042779][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.131034][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.138104][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.286722][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.327496][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.389281][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.396428][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.530951][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.584245][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.651908][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.723911][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.784695][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.843819][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.904229][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.971071][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.030973][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.091016][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.151762][ T7580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.170851][ T7580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.361503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.369146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.469188][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.490563][ T7580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.497987][ T7580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.672190][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.681098][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.689688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.791570][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.798632][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.913080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.991065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.034071][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.041157][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.131291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.140096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.231474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.239958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.347396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.391067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.399641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.490963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.507397][ T7576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.561176][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.616335][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.634020][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.681308][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.720905][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.902172][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.913941][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.964211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.984116][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.033135][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.044695][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.095074][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.131355][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.190176][ T7582] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.270490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.278469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.348002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.400967][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.448098][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.455204][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.524380][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 22:56:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x0) [ 107.574084][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.599326][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.606412][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.661241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.694335][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.731740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.740432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.775327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.829797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.876933][ T7613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.960400][ T7613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.025857][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.041834][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.053118][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.076851][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.126410][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.133676][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.195992][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.234913][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.261021][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.268111][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.296396][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.317298][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.326575][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.335812][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.345214][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.354293][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.363564][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.371994][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.387699][ T7582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.398520][ T7582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.415902][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.426141][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.434342][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.442098][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.451164][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.459898][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.468875][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.477289][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.485998][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.494135][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.501595][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.509400][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.530056][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.565047][ T7582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.576475][ T7671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.590653][ T7671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:56:19 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) r2 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x100000003, 0x1, 0x4f, 0x0, 0x400000000}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, &(0x7f0000000240), 0x4000000000dc) dup3(r0, r2, 0x80000) write$P9_RXATTRWALK(r0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) r5 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) sendfile(r5, r6, &(0x7f0000000240), 0x4000000000dc) dup3(r4, r5, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000000300)='st\x87{\xa7+E\xc5\xb1V\x94d\x85\x1e\xe4\xc4(\x00\x00\x82\xf24\x9b/\xd2l\\\xd8\xc7\xc1j\xa5p\x90u\xfc\xab\xb0>\xf3\b6ZEq\x92\xfc\xfbq+\xe68\xd9') sendfile(r7, r9, 0x0, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000055c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)}, 0x0) rmdir(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') [ 108.933949][ T7844] debugfs: Directory 'pts0' with parent 'caif_serial' already present! 22:56:20 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x84003ff) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000140)=r3) capget(&(0x7f00000000c0)={0x20080522, r3}, &(0x7f0000000200)={0x101, 0x3, 0x7fffffff, 0x1ff, 0xffffff81, 0x800}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)={0x2}) capget(&(0x7f0000000000)={0x40013548}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x3, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc)) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x9, 0x4efd3349, 0xd8e5}, &(0x7f0000000340)=0x10) [ 110.188779][ T7867] ================================================================== [ 110.196914][ T7867] BUG: KCSAN: data-race in pid_update_inode / pid_update_inode [ 110.204452][ T7867] [ 110.206782][ T7867] read to 0xffff888125734048 of 2 bytes by task 7860 on cpu 1: [ 110.214360][ T7867] pid_update_inode+0x25/0x70 [ 110.219032][ T7867] pid_revalidate+0x91/0xd0 [ 110.223533][ T7867] lookup_fast+0x618/0x700 [ 110.227953][ T7867] path_openat+0x2ac/0x36e0 [ 110.232458][ T7867] do_filp_open+0x11e/0x1b0 [ 110.236961][ T7867] do_sys_open+0x3b3/0x4f0 [ 110.241376][ T7867] __x64_sys_open+0x55/0x70 [ 110.245880][ T7867] do_syscall_64+0xcc/0x370 [ 110.250385][ T7867] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 110.256277][ T7867] [ 110.258608][ T7867] write to 0xffff888125734048 of 2 bytes by task 7867 on cpu 0: [ 110.266245][ T7867] pid_update_inode+0x51/0x70 [ 110.270928][ T7867] pid_revalidate+0x91/0xd0 [ 110.275438][ T7867] lookup_fast+0x618/0x700 [ 110.279857][ T7867] path_openat+0x2ac/0x36e0 [ 110.284362][ T7867] do_filp_open+0x11e/0x1b0 [ 110.288866][ T7867] do_sys_open+0x3b3/0x4f0 [ 110.293294][ T7867] __x64_sys_open+0x55/0x70 [ 110.297852][ T7867] do_syscall_64+0xcc/0x370 [ 110.302356][ T7867] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 110.308233][ T7867] [ 110.310550][ T7867] Reported by Kernel Concurrency Sanitizer on: [ 110.316710][ T7867] CPU: 0 PID: 7867 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 110.323911][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.333956][ T7867] ================================================================== [ 110.342014][ T7867] Kernel panic - not syncing: panic_on_warn set ... [ 110.348744][ T7867] CPU: 0 PID: 7867 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 110.355955][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.366011][ T7867] Call Trace: [ 110.369331][ T7867] dump_stack+0x11d/0x181 [ 110.373664][ T7867] panic+0x210/0x640 [ 110.377568][ T7867] ? vprintk_func+0x8d/0x140 [ 110.382188][ T7867] kcsan_report.cold+0xc/0xd [ 110.386789][ T7867] kcsan_setup_watchpoint+0x3fe/0x460 [ 110.392343][ T7867] __tsan_unaligned_write2+0xc4/0x100 [ 110.397721][ T7867] pid_update_inode+0x51/0x70 [ 110.402401][ T7867] pid_revalidate+0x91/0xd0 [ 110.406908][ T7867] lookup_fast+0x618/0x700 [ 110.411339][ T7867] path_openat+0x2ac/0x36e0 [ 110.415919][ T7867] ? proc_pid_status+0xee1/0x1000 [ 110.420954][ T7867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 110.427203][ T7867] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 110.433107][ T7867] ? __read_once_size+0x41/0xe0 [ 110.437967][ T7867] do_filp_open+0x11e/0x1b0 [ 110.442474][ T7867] ? __alloc_fd+0x2ef/0x3b0 [ 110.446987][ T7867] do_sys_open+0x3b3/0x4f0 [ 110.451415][ T7867] __x64_sys_open+0x55/0x70 [ 110.455925][ T7867] do_syscall_64+0xcc/0x370 [ 110.460440][ T7867] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 110.466479][ T7867] RIP: 0033:0x7f9dd2824120 [ 110.470904][ T7867] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 110.490507][ T7867] RSP: 002b:00007fff39e4f1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 110.499021][ T7867] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f9dd2824120 [ 110.507424][ T7867] RDX: 00007fff39e4f232 RSI: 0000000000000000 RDI: 00007fff39e4f220 [ 110.515386][ T7867] RBP: 0000000000020000 R08: 0000000000000000 R09: 00007f9dd2aec55f [ 110.523354][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000ef9240 [ 110.531499][ T7867] R13: 0000000000000020 R14: 00007f9dd2ed9010 R15: 0000000000000000 [ 110.541238][ T7867] Kernel Offset: disabled [ 110.545604][ T7867] Rebooting in 86400 seconds..