[info] Using makefile-style concurrent boot in runlevel 2. [ 53.984629][ T27] audit: type=1800 audit(1578875078.500:21): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 54.030968][ T27] audit: type=1800 audit(1578875078.510:22): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. 2020/01/13 00:24:51 fuzzer started 2020/01/13 00:24:53 dialing manager at 10.128.0.105:37253 2020/01/13 00:24:59 syscalls: 2814 2020/01/13 00:24:59 code coverage: enabled 2020/01/13 00:24:59 comparison tracing: enabled 2020/01/13 00:24:59 extra coverage: enabled 2020/01/13 00:24:59 setuid sandbox: enabled 2020/01/13 00:24:59 namespace sandbox: enabled 2020/01/13 00:24:59 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/13 00:24:59 fault injection: enabled 2020/01/13 00:24:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/13 00:24:59 net packet injection: enabled 2020/01/13 00:24:59 net device setup: enabled 2020/01/13 00:24:59 concurrency sanitizer: enabled 2020/01/13 00:24:59 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 79.668313][ T7932] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/13 00:25:05 adding functions to KCSAN blacklist: 'xas_clear_mark' 'tick_nohz_idle_stop_tick' 'do_syslog' 'ext4_has_free_clusters' 'ext4_nonda_switch' 'audit_log_start' 'blk_mq_run_hw_queue' 'find_next_bit' 'ext4_free_inode' 'vm_area_dup' 'd_instantiate_new' 'blk_mq_dispatch_rq_list' 'rcu_gp_fqs_loop' 'ext4_free_inodes_count' 'mod_timer' 'rcu_gp_fqs_check_wake' 'run_timer_softirq' 'tomoyo_supervisor' 'blk_mq_sched_dispatch_requests' 'iomap_dio_bio_actor' 'do_nanosleep' 'n_tty_receive_buf_common' '__ext4_new_inode' 'common_perm_cond' 'copy_process' '__mark_inode_dirty' 'taskstats_exit' 'tick_do_update_jiffies64' 'poll_schedule_timeout' 'blk_mq_get_request' 'kauditd_thread' 'ep_poll' 'add_timer' 'do_exit' 'dd_has_work' 'tick_sched_do_timer' 'wbt_issue' 'kcm_rcv_strparser' '__hrtimer_run_queues' 'find_get_pages_range_tag' 'generic_write_end' 'generic_fillattr' 00:26:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000006c0), 0x4) [ 162.443347][ T7936] IPVS: ftp: loaded support on port[0] = 21 00:26:27 executing program 1: unshare(0x400) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000300)='./file0/file0\x00', r0}, 0x10) [ 162.513160][ T7936] chnl_net:caif_netlink_parms(): no params data found [ 162.546774][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.554052][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.562105][ T7936] device bridge_slave_0 entered promiscuous mode [ 162.569424][ T7936] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.576505][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.584698][ T7936] device bridge_slave_1 entered promiscuous mode [ 162.602104][ T7936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.612674][ T7936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.633045][ T7936] team0: Port device team_slave_0 added [ 162.639931][ T7936] team0: Port device team_slave_1 added [ 162.679045][ T7936] device hsr_slave_0 entered promiscuous mode [ 162.717335][ T7936] device hsr_slave_1 entered promiscuous mode 00:26:27 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x2, 0xc) write(r3, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104fffff13b54c007110009f30501000b0005", 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 162.845148][ T7939] IPVS: ftp: loaded support on port[0] = 21 [ 162.947348][ T7936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.009343][ T7936] netdevsim netdevsim0 netdevsim1: renamed from eth1 00:26:27 executing program 3: epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000032001901000000000000000002000000040000001800010014001000100008000000000000000000000000a786ef00"], 0x30}}, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) [ 163.059799][ T7936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.127871][ T7936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.136645][ T7941] IPVS: ftp: loaded support on port[0] = 21 [ 163.194925][ T7943] IPVS: ftp: loaded support on port[0] = 21 [ 163.196982][ T7936] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.207918][ T7936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.215175][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.222279][ T7936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.302450][ T7939] chnl_net:caif_netlink_parms(): no params data found 00:26:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) [ 163.361791][ T7936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.397796][ T7936] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.408084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.426756][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.457362][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.478913][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 163.553866][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.562956][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.570032][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.578372][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.587851][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.594955][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.618373][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.625565][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.635187][ T7939] device bridge_slave_0 entered promiscuous mode [ 163.651710][ T7943] chnl_net:caif_netlink_parms(): no params data found [ 163.660819][ T7950] IPVS: ftp: loaded support on port[0] = 21 00:26:28 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./file0\x00') rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='./bus/file0\x00') [ 163.680002][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.691475][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.700690][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.711867][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.727188][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.734243][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.757709][ T7939] device bridge_slave_1 entered promiscuous mode [ 163.778631][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.786966][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.795986][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.806082][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.814867][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.824580][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.856923][ T7941] chnl_net:caif_netlink_parms(): no params data found [ 163.874299][ T7939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.890470][ T7952] IPVS: ftp: loaded support on port[0] = 21 [ 163.891614][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.903965][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.912518][ T7943] device bridge_slave_0 entered promiscuous mode [ 163.922546][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.929731][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.937688][ T7943] device bridge_slave_1 entered promiscuous mode [ 163.955995][ T7939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.980903][ T7943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.995309][ T7943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.033829][ T7943] team0: Port device team_slave_0 added [ 164.053585][ T7943] team0: Port device team_slave_1 added [ 164.060216][ T7939] team0: Port device team_slave_0 added [ 164.081389][ T7939] team0: Port device team_slave_1 added [ 164.098325][ T7936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.105628][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.113070][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.120938][ T7941] device bridge_slave_0 entered promiscuous mode [ 164.134518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.141882][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.176487][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.183864][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.191801][ T7941] device bridge_slave_1 entered promiscuous mode [ 164.212601][ T7950] chnl_net:caif_netlink_parms(): no params data found [ 164.258792][ T7943] device hsr_slave_0 entered promiscuous mode [ 164.307564][ T7943] device hsr_slave_1 entered promiscuous mode [ 164.357168][ T7943] debugfs: Directory 'hsr0' with parent '/' already present! [ 164.429482][ T7939] device hsr_slave_0 entered promiscuous mode [ 164.487383][ T7939] device hsr_slave_1 entered promiscuous mode [ 164.557114][ T7939] debugfs: Directory 'hsr0' with parent '/' already present! [ 164.580486][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.593351][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.648535][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.655756][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.663755][ T7950] device bridge_slave_0 entered promiscuous mode [ 164.671135][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.678517][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.686195][ T7950] device bridge_slave_1 entered promiscuous mode [ 164.708925][ T7941] team0: Port device team_slave_0 added [ 164.715553][ T7941] team0: Port device team_slave_1 added [ 164.734165][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.743251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.753106][ T7950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.819506][ T7941] device hsr_slave_0 entered promiscuous mode [ 164.857475][ T7941] device hsr_slave_1 entered promiscuous mode [ 164.917218][ T7941] debugfs: Directory 'hsr0' with parent '/' already present! [ 164.951255][ T7950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.974560][ T7939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.048895][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.057606][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.071157][ T7939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.113246][ T7939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.164885][ T7936] device veth0_vlan entered promiscuous mode [ 165.171538][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.179665][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.187989][ T7952] chnl_net:caif_netlink_parms(): no params data found [ 165.196277][ T7943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.249900][ T7950] team0: Port device team_slave_0 added [ 165.256849][ T7950] team0: Port device team_slave_1 added [ 165.263113][ T7939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.355216][ T7943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.404363][ T7943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.473675][ T7941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.538956][ T7943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.602622][ T7936] device veth1_vlan entered promiscuous mode [ 165.689513][ T7950] device hsr_slave_0 entered promiscuous mode [ 165.727381][ T7950] device hsr_slave_1 entered promiscuous mode [ 165.767108][ T7950] debugfs: Directory 'hsr0' with parent '/' already present! [ 165.774683][ T7941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.841202][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.873877][ T7941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.943734][ T7941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.015416][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.022821][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.030664][ T7952] device bridge_slave_0 entered promiscuous mode [ 166.046624][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.053824][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.061821][ T7952] device bridge_slave_1 entered promiscuous mode 00:26:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000006c0), 0x4) [ 166.141608][ T7943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.156316][ T7943] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.181582][ T7950] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:26:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000006c0), 0x4) [ 166.221857][ T7950] netdevsim netdevsim4 netdevsim1: renamed from eth1 00:26:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000006c0), 0x4) [ 166.271457][ T7939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.279297][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.287564][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 00:26:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x3a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) [ 166.317396][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.333404][ T7950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.379026][ T7950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.401525][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.410106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.418610][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.425877][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.433687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.443500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.467095][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.469327][ C1] hrtimer: interrupt took 24513 ns [ 166.474166][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.489806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.502220][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.531102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.540887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.551973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.562234][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.573209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.583745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.594788][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.616858][ T7939] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.646030][ T7943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.657357][ T7943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.673164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.684577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 00:26:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x3a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) [ 166.693228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.705958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.714782][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.726806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.735960][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.748486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.759218][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.766308][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.780420][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.788318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.797644][ T7952] team0: Port device team_slave_0 added [ 166.805266][ T7952] team0: Port device team_slave_1 added [ 166.843627][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.858017][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.866547][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.873625][ T3090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.885639][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.903540][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.912815][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.924884][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.941889][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.950943][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.962637][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.970311][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.983728][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 00:26:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x3a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) [ 167.031441][ T7952] device hsr_slave_0 entered promiscuous mode [ 167.077335][ T7952] device hsr_slave_1 entered promiscuous mode [ 167.107919][ T7952] debugfs: Directory 'hsr0' with parent '/' already present! [ 167.121922][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.133821][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.165095][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.180938][ T7941] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.198893][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.206470][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.214254][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.223066][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.235557][ T7939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.247619][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.269188][ T7950] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.276550][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.286307][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.298418][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.306107][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.316175][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.325807][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 00:26:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x3a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) [ 167.336249][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.343587][ T3090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.352672][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.362053][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.370873][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.378080][ T3090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.386350][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.399094][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.417150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.425835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.466173][ T7939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.473957][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.485452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.494279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.503161][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.510498][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.524266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.533264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.545408][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.552507][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.564156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.573671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.586287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.596388][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.609138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.620379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.631055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.642497][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.652456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.662640][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.675336][ T7941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.686656][ T7941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.711330][ T7943] device veth0_vlan entered promiscuous mode [ 167.718312][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.737844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.745772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.758171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.766789][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.776797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.788462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.799149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.809270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.818215][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.826322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.836079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.843799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.851543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.868350][ T7952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.921206][ T7952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.000754][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.009387][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.018433][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.026775][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.044869][ T7939] device veth0_vlan entered promiscuous mode [ 168.057957][ T7952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.099519][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.109624][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.118915][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.127824][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.135894][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.144518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.152166][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.161502][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.173412][ T7939] device veth1_vlan entered promiscuous mode [ 168.180248][ T7952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.246037][ T7950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.253523][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.263675][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.272862][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.281464][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.288971][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.297419][ T7943] device veth1_vlan entered promiscuous mode [ 168.328351][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.336434][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.345891][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.368979][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.386151][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.400921][ T7941] device veth0_vlan entered promiscuous mode [ 168.444467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.483193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.503051][ T7997] openvswitch: netlink: IP tunnel dst address not specified [ 168.514653][ T7941] device veth1_vlan entered promiscuous mode [ 168.539929][ T7998] openvswitch: netlink: IP tunnel dst address not specified 00:26:33 executing program 1: unshare(0x400) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000300)='./file0/file0\x00', r0}, 0x10) [ 168.540369][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.568870][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.581148][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.615148][ T7950] device veth0_vlan entered promiscuous mode [ 168.644990][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.675860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.685649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.695168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.704422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.712852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.729645][ T7950] device veth1_vlan entered promiscuous mode [ 168.752005][ T7952] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.762374][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.774676][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.783043][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.796228][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.867985][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.889476][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.906824][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.914010][ T3090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.914599][ T8009] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.946146][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.960707][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.969256][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.976653][ T3090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.988754][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.997491][ T8014] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 169.011827][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.023346][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.041554][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.051207][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.063070][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.071797][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.080350][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.089184][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.098141][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.109358][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.118562][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.126651][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.146200][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.159843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.167676][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.241339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.250917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.272675][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.281202][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.290994][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.299066][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.312185][ T7952] device veth0_vlan entered promiscuous mode [ 169.322181][ T7952] device veth1_vlan entered promiscuous mode [ 169.415806][ T8026] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:26:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x2, 0xc) write(r3, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104fffff13b54c007110009f30501000b0005", 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:26:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x3a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) 00:26:34 executing program 3: epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000032001901000000000000000002000000040000001800010014001000100008000000000000000000000000a786ef00"], 0x30}}, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 00:26:34 executing program 1: unshare(0x400) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000300)='./file0/file0\x00', r0}, 0x10) 00:26:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) 00:26:34 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./file0\x00') rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='./bus/file0\x00') [ 169.791032][ T8035] openvswitch: netlink: IP tunnel dst address not specified 00:26:34 executing program 3: epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000032001901000000000000000002000000040000001800010014001000100008000000000000000000000000a786ef00"], 0x30}}, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 00:26:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) [ 169.897529][ T8043] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 00:26:34 executing program 3: epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000032001901000000000000000002000000040000001800010014001000100008000000000000000000000000a786ef00"], 0x30}}, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 00:26:34 executing program 1: unshare(0x400) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000300)='./file0/file0\x00', r0}, 0x10) [ 169.962596][ T8046] openvswitch: netlink: IP tunnel dst address not specified [ 169.977311][ T8047] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:26:34 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./file0\x00') rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='./bus/file0\x00') [ 170.138477][ T8053] openvswitch: netlink: IP tunnel dst address not specified [ 170.147311][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.155811][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 00:26:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) 00:26:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x2, 0xc) write(r3, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104fffff13b54c007110009f30501000b0005", 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:26:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) 00:26:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) 00:26:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) 00:26:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x3a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) 00:26:35 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./file0\x00') rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='./bus/file0\x00') 00:26:35 executing program 4: socket$kcm(0x2b, 0x1, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(0x0) chown(&(0x7f0000000280)='./file0/file0/../file0\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580162", @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) ioctl$TCSBRKP(r4, 0x5425, 0x6) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000040)) 00:26:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) 00:26:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/71, 0x47) open_by_handle_at(r1, &(0x7f0000000100)={0x8, 0x1}, 0x0) [ 170.979850][ T8092] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.058275][ T7939] ================================================================== [ 171.066609][ T7939] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 171.073972][ T7939] [ 171.076305][ T7939] read to 0xffff88812c02a208 of 8 bytes by task 7943 on cpu 1: [ 171.083949][ T7939] has_bh_in_lru+0x44/0x90 [ 171.088457][ T7939] on_each_cpu_cond_mask+0xa3/0x150 [ 171.093659][ T7939] on_each_cpu_cond+0x44/0x60 [ 171.098345][ T7939] invalidate_bh_lrus+0x32/0x40 [ 171.103359][ T7939] kill_bdev+0x7f/0xb0 [ 171.107431][ T7939] __blkdev_put+0x138/0x420 [ 171.111933][ T7939] blkdev_put+0x89/0x2f0 [ 171.116348][ T7939] kill_block_super+0x90/0xb0 [ 171.121069][ T7939] deactivate_locked_super+0x64/0xb0 [ 171.126401][ T7939] deactivate_super+0xca/0xe0 [ 171.131091][ T7939] cleanup_mnt+0x27f/0x330 [ 171.135509][ T7939] __cleanup_mnt+0x1f/0x30 [ 171.140030][ T7939] task_work_run+0xf6/0x130 [ 171.144537][ T7939] exit_to_usermode_loop+0x2b4/0x2c0 [ 171.149828][ T7939] do_syscall_64+0x384/0x3a0 [ 171.154423][ T7939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 171.160307][ T7939] [ 171.162722][ T7939] write to 0xffff88812c02a208 of 8 bytes by task 7939 on cpu 0: [ 171.170442][ T7939] invalidate_bh_lru+0x83/0xf0 [ 171.175293][ T7939] on_each_cpu_mask+0xfb/0x150 [ 171.180072][ T7939] on_each_cpu_cond_mask+0xf7/0x150 [ 171.185269][ T7939] on_each_cpu_cond+0x44/0x60 [ 171.189952][ T7939] invalidate_bh_lrus+0x32/0x40 [ 171.194809][ T7939] kill_bdev+0x7f/0xb0 [ 171.198879][ T7939] __blkdev_put+0x138/0x420 [ 171.203380][ T7939] blkdev_put+0x89/0x2f0 [ 171.208668][ T7939] kill_block_super+0x90/0xb0 [ 171.213480][ T7939] deactivate_locked_super+0x64/0xb0 [ 171.218767][ T7939] deactivate_super+0xca/0xe0 [ 171.223454][ T7939] cleanup_mnt+0x27f/0x330 [ 171.227880][ T7939] __cleanup_mnt+0x1f/0x30 [ 171.232363][ T7939] task_work_run+0xf6/0x130 [ 171.236968][ T7939] exit_to_usermode_loop+0x2b4/0x2c0 [ 171.242460][ T7939] do_syscall_64+0x384/0x3a0 [ 171.247153][ T7939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 171.253035][ T7939] [ 171.255360][ T7939] Reported by Kernel Concurrency Sanitizer on: [ 171.261522][ T7939] CPU: 0 PID: 7939 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 171.270104][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.280375][ T7939] ================================================================== [ 171.288524][ T7939] Kernel panic - not syncing: panic_on_warn set ... [ 171.295205][ T7939] CPU: 0 PID: 7939 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 171.303836][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.314045][ T7939] Call Trace: [ 171.317343][ T7939] dump_stack+0x11d/0x181 [ 171.321683][ T7939] panic+0x210/0x640 [ 171.325584][ T7939] ? vprintk_func+0x8d/0x140 [ 171.330184][ T7939] kcsan_report.cold+0xc/0xd [ 171.334784][ T7939] kcsan_setup_watchpoint+0x3fe/0x460 [ 171.340250][ T7939] __tsan_unaligned_write8+0xc7/0x110 [ 171.345699][ T7939] invalidate_bh_lru+0x83/0xf0 [ 171.350473][ T7939] ? buffer_exit_cpu_dead+0x110/0x110 [ 171.355850][ T7939] on_each_cpu_mask+0xfb/0x150 [ 171.360625][ T7939] ? constant_test_bit+0x30/0x30 [ 171.365568][ T7939] on_each_cpu_cond_mask+0xf7/0x150 [ 171.370771][ T7939] ? buffer_exit_cpu_dead+0x110/0x110 [ 171.376336][ T7939] ? constant_test_bit+0x30/0x30 [ 171.381402][ T7939] ? buffer_exit_cpu_dead+0x110/0x110 [ 171.386791][ T7939] on_each_cpu_cond+0x44/0x60 [ 171.391484][ T7939] invalidate_bh_lrus+0x32/0x40 [ 171.396430][ T7939] kill_bdev+0x7f/0xb0 [ 171.400502][ T7939] __blkdev_put+0x138/0x420 [ 171.405347][ T7939] ? constant_test_bit+0x12/0x30 [ 171.410305][ T7939] blkdev_put+0x89/0x2f0 [ 171.414614][ T7939] kill_block_super+0x90/0xb0 [ 171.419302][ T7939] deactivate_locked_super+0x64/0xb0 [ 171.424597][ T7939] deactivate_super+0xca/0xe0 [ 171.429315][ T7939] cleanup_mnt+0x27f/0x330 [ 171.433740][ T7939] __cleanup_mnt+0x1f/0x30 [ 171.438160][ T7939] task_work_run+0xf6/0x130 [ 171.442678][ T7939] exit_to_usermode_loop+0x2b4/0x2c0 [ 171.448019][ T7939] do_syscall_64+0x384/0x3a0 [ 171.452618][ T7939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 171.458511][ T7939] RIP: 0033:0x45d977 [ 171.462501][ T7939] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 171.482108][ T7939] RSP: 002b:00007fffbc5fc018 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 171.490524][ T7939] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045d977 [ 171.498560][ T7939] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007fffbc5fc0c0 [ 171.506535][ T7939] RBP: 000000000000000d R08: 0000000000000000 R09: 0000000000000009 [ 171.514662][ T7939] R10: 0000000000000005 R11: 0000000000000202 R12: 00007fffbc5fd150 [ 171.522808][ T7939] R13: 00000000028a1940 R14: 0000000000000000 R15: 00007fffbc5fd150 [ 171.532309][ T7939] Kernel Offset: disabled [ 171.536776][ T7939] Rebooting in 86400 seconds..