[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.484564][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 52.484578][ T26] audit: type=1800 audit(1576228503.644:29): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 52.510893][ T26] audit: type=1800 audit(1576228503.644:30): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. 2019/12/13 09:15:13 fuzzer started 2019/12/13 09:15:15 dialing manager at 10.128.0.105:44831 2019/12/13 09:15:19 syscalls: 2686 2019/12/13 09:15:19 code coverage: enabled 2019/12/13 09:15:19 comparison tracing: enabled 2019/12/13 09:15:19 extra coverage: enabled 2019/12/13 09:15:19 setuid sandbox: enabled 2019/12/13 09:15:19 namespace sandbox: enabled 2019/12/13 09:15:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/13 09:15:19 fault injection: enabled 2019/12/13 09:15:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/13 09:15:19 net packet injection: enabled 2019/12/13 09:15:19 net device setup: enabled 2019/12/13 09:15:19 concurrency sanitizer: enabled 2019/12/13 09:15:19 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 75.945519][ T7775] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/13 09:15:27 adding functions to KCSAN blacklist: 'kcm_rfree' 'xas_find_marked' 'ext4_mb_good_group' 'wbt_done' 'do_nanosleep' 'kauditd_thread' 'ext4_has_free_clusters' 'pcpu_alloc' 'do_try_to_free_pages' 'pid_update_inode' 'lruvec_lru_size' 'generic_fillattr' 'xas_clear_mark' 'mod_timer' 'run_timer_softirq' 'tick_sched_do_timer' 'blk_mq_sched_dispatch_requests' 'virtqueue_enable_cb_delayed' '__rb_erase_color' 'tick_do_update_jiffies64' 'echo_char' 'ep_poll' 'tomoyo_supervisor' 'taskstats_exit' 'generic_file_read_iter' 'audit_log_start' 'sit_tunnel_xmit' '__hrtimer_run_queues' 'generic_write_end' 'ext4_nonda_switch' 'iomap_dio_bio_actor' '__ext4_new_inode' '__rb_insert_augmented' 'ext4_free_inode' 'smpboot_thread_fn' 'ext4_free_inodes_count' 'add_timer' 'dd_has_work' 'fasync_remove_entry' 'blk_mq_dispatch_rq_list' '__snd_rawmidi_transmit_ack' 'tick_nohz_idle_stop_tick' 'poll_schedule_timeout' 'find_next_bit' 'mm_update_next_owner' 'rcu_gp_fqs_check_wake' 'common_perm_cond' 'timer_clear_idle' 09:16:30 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r3, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6800010}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x88, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 09:16:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f0000000040)={0x2}) [ 139.968609][ T7777] IPVS: ftp: loaded support on port[0] = 21 [ 140.088548][ T7777] chnl_net:caif_netlink_parms(): no params data found [ 140.143416][ T7777] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.161414][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.169288][ T7777] device bridge_slave_0 entered promiscuous mode [ 140.181807][ T7780] IPVS: ftp: loaded support on port[0] = 21 09:16:31 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r1 = socket(0x840000000002, 0x3, 0xff) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x93, "48d023ecf5bca701d20a8f86c850713cae1181edf3394538af64b955e913b67729291e43c09e316eb97176cf8b15c7745c5af13ea75fa6e0303f9c43067242a2db208e8dccc6a2548f525de9dae984cb7e7a34fef2145f1ea2fa8ef8965a7cf501c9d2a69a11a4e30db16618431f1be35ff69201e1a4c376dbb7a64b9eb2762ea02d2e53184778e7b216b029a604920b44f91d"}, &(0x7f00000002c0)=0x9b) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r2, 0x1}, &(0x7f0000000340)=0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)=@gcm_256={{0x7}, "e1a6555de5740775", "cd17bb3624520076c8b655aa7ea09212bb5211c82a4a0a880218d319586c6a4e", "9c26edd8", "0f9165c4fbcfa252"}, 0x38) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000, 0x1}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000400)=0x1f, 0x4) r6 = syz_open_dev$sndpcmc(0x0, 0xffff, 0x40802) openat$userio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/userio\x00', 0x2000, 0x0) read$alg(r6, &(0x7f0000003580)=""/102, 0x66) socket(0x10, 0x0, 0x8) [ 140.188337][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.199533][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.207473][ T7777] device bridge_slave_1 entered promiscuous mode [ 140.258353][ T7777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.288344][ T7777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.335870][ T7777] team0: Port device team_slave_0 added [ 140.369953][ T7777] team0: Port device team_slave_1 added 09:16:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0xffffffffffffffff, 0x0) [ 140.485396][ T7777] device hsr_slave_0 entered promiscuous mode [ 140.523780][ T7777] device hsr_slave_1 entered promiscuous mode [ 140.569653][ T7783] IPVS: ftp: loaded support on port[0] = 21 [ 140.572767][ T7785] IPVS: ftp: loaded support on port[0] = 21 [ 140.577797][ T7780] chnl_net:caif_netlink_parms(): no params data found [ 140.670625][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.677903][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.686044][ T7780] device bridge_slave_0 entered promiscuous mode 09:16:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x5d) [ 140.723634][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.730728][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.738760][ T7780] device bridge_slave_1 entered promiscuous mode [ 140.746176][ T7777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.795593][ T7777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.875575][ T7777] netdevsim netdevsim0 netdevsim2: renamed from eth2 09:16:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)="201ebb3c96a94db1c1af", 0xa}]) [ 141.008565][ T7780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.023846][ T7777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.031660][ T7788] IPVS: ftp: loaded support on port[0] = 21 [ 141.090675][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.097737][ T7777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.106049][ T7777] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.113112][ T7777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.142074][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.150017][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.169609][ T7780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.209941][ T7780] team0: Port device team_slave_0 added [ 141.225930][ T7783] chnl_net:caif_netlink_parms(): no params data found [ 141.230081][ T7790] IPVS: ftp: loaded support on port[0] = 21 [ 141.244409][ T7780] team0: Port device team_slave_1 added [ 141.250186][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 141.309023][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.316166][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.324103][ T7785] device bridge_slave_0 entered promiscuous mode [ 141.405510][ T7780] device hsr_slave_0 entered promiscuous mode [ 141.463791][ T7780] device hsr_slave_1 entered promiscuous mode [ 141.513803][ T7780] debugfs: Directory 'hsr0' with parent '/' already present! [ 141.526637][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.535439][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.543031][ T7785] device bridge_slave_1 entered promiscuous mode [ 141.550013][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.557128][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.567111][ T7783] device bridge_slave_0 entered promiscuous mode [ 141.606267][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.613600][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.621219][ T7783] device bridge_slave_1 entered promiscuous mode [ 141.659156][ T7785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.670337][ T7785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.695365][ T7783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.721743][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.747727][ T7783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.768883][ T7785] team0: Port device team_slave_0 added [ 141.776306][ T7785] team0: Port device team_slave_1 added [ 141.788317][ T7780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.836109][ T7783] team0: Port device team_slave_0 added [ 141.841862][ T7780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.897421][ T7780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.959995][ T7790] chnl_net:caif_netlink_parms(): no params data found [ 141.976006][ T7783] team0: Port device team_slave_1 added [ 141.983448][ T7788] chnl_net:caif_netlink_parms(): no params data found [ 141.991959][ T7780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.105437][ T7785] device hsr_slave_0 entered promiscuous mode [ 142.155785][ T7785] device hsr_slave_1 entered promiscuous mode [ 142.203634][ T7785] debugfs: Directory 'hsr0' with parent '/' already present! [ 142.259186][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.266422][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.274287][ T7788] device bridge_slave_0 entered promiscuous mode [ 142.315360][ T7783] device hsr_slave_0 entered promiscuous mode [ 142.353915][ T7783] device hsr_slave_1 entered promiscuous mode [ 142.393877][ T7783] debugfs: Directory 'hsr0' with parent '/' already present! [ 142.401606][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.409380][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.422593][ T7777] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.436402][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.443920][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.451643][ T7788] device bridge_slave_1 entered promiscuous mode [ 142.468587][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.478283][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.486376][ T7790] device bridge_slave_0 entered promiscuous mode [ 142.494366][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.502904][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.511568][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.518688][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.546770][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.556242][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.564495][ T7790] device bridge_slave_1 entered promiscuous mode [ 142.576125][ T7783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.625765][ T7783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.676398][ T7783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.717583][ T7788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.736751][ T7790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.748156][ T7790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.757420][ T7783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.806445][ T7788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.820436][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.829156][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.837927][ T2875] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.844979][ T2875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.860054][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.871549][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.893203][ T7790] team0: Port device team_slave_0 added [ 142.903654][ T7790] team0: Port device team_slave_1 added [ 142.909331][ T7785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 142.975821][ T7785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.025966][ T7785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.105857][ T7785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.166487][ T7788] team0: Port device team_slave_0 added [ 143.225889][ T7790] device hsr_slave_0 entered promiscuous mode [ 143.254108][ T7790] device hsr_slave_1 entered promiscuous mode [ 143.293651][ T7790] debugfs: Directory 'hsr0' with parent '/' already present! [ 143.315129][ T7788] team0: Port device team_slave_1 added [ 143.338782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.347643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.356309][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.365101][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.406573][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.414905][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.423233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.431651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.440195][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.449295][ T7777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.460929][ T7790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.585340][ T7788] device hsr_slave_0 entered promiscuous mode [ 143.623967][ T7788] device hsr_slave_1 entered promiscuous mode [ 143.663614][ T7788] debugfs: Directory 'hsr0' with parent '/' already present! [ 143.679464][ T7780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.687214][ T7790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.766418][ T7790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.807043][ T7790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.881468][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.889061][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.896735][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.904996][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.922523][ T7788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.968634][ T7788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.017593][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.031448][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.038991][ T7788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.085593][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.093375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.104946][ T7780] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.129581][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.137072][ T7788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.184003][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.192768][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.203685][ T2875] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.210714][ T2875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.218729][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.227233][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.235504][ T2875] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.242611][ T2875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.250493][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.259017][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.267573][ T2875] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.274701][ T2875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.282457][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.291434][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.303272][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.324893][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.332952][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.341160][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.349833][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.358766][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.367570][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.376595][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.385443][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.393985][ T2875] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.401024][ T2875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.409909][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.425074][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.433356][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.442002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.450150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.470333][ T7780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.482907][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.496510][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.505485][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.514748][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.529108][ T7785] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.551638][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.568382][ T7783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.590577][ T7783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.624241][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.631235][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.639779][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.652009][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.653522][ C0] hrtimer: interrupt took 28958 ns [ 144.661122][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.673818][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.682168][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.690711][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.699401][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.707768][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.716210][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.724713][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.731781][ T7786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.739555][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.748342][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.757100][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.764142][ T7786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.771851][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.789288][ T7780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.810629][ T7790] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.823417][ T7801] bond0: (slave bond_slave_1): Releasing backup interface [ 144.898671][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.907210][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.918700][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.926716][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.938424][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 09:16:36 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r3, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6800010}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x88, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 144.945888][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.962110][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.970766][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.982732][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.991887][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:16:36 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r3, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6800010}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x88, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 145.016750][ T7806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.032419][ T7785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.046745][ T7785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.066467][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.089106][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.110930][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.119953][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.129084][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.137959][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.146790][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.155556][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 09:16:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f0000000040)={0x2}) [ 145.197649][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.226081][ T7810] bond0: (slave bond_slave_1): Releasing backup interface 09:16:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f0000000040)={0x2}) 09:16:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f0000000040)={0x2}) 09:16:36 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r3, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6800010}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x88, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 145.399131][ T7788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.425709][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.433222][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 09:16:36 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r3, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6800010}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x88, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 145.458056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.469334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.494201][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.501369][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.518925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.539744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.550824][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.558020][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.566155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.575419][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.584469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.592843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.603299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.611501][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.626586][ T7790] ================================================================== [ 145.634732][ T7790] BUG: KCSAN: data-race in del_timer / enqueue_timer [ 145.642017][ T7790] [ 145.644351][ T7790] write to 0xffffffff85e135e8 of 8 bytes by task 2875 on cpu 0: [ 145.652081][ T7790] enqueue_timer+0x9c/0x210 [ 145.656581][ T7790] __internal_add_timer+0x4f/0x60 [ 145.661605][ T7790] add_timer+0x250/0x550 [ 145.665843][ T7790] __queue_delayed_work+0x13b/0x1d0 [ 145.671572][ T7790] queue_delayed_work_on+0xf3/0x110 [ 145.677370][ T7790] check_lifetime+0x325/0x5a0 [ 145.682037][ T7790] process_one_work+0x3d4/0x890 [ 145.686881][ T7790] worker_thread+0xa0/0x800 [ 145.691983][ T7790] kthread+0x1d4/0x200 [ 145.696477][ T7790] ret_from_fork+0x1f/0x30 [ 145.700873][ T7790] [ 145.703195][ T7790] read to 0xffffffff85e135e8 of 8 bytes by task 7790 on cpu 1: [ 145.710759][ T7790] del_timer+0x3b/0xb0 [ 145.720126][ T7790] try_to_grab_pending+0x22d/0x3e0 [ 145.725230][ T7790] cancel_delayed_work+0x45/0x1c0 [ 145.730335][ T7790] __inet_insert_ifa+0x4a1/0x650 [ 145.735264][ T7790] inet_rtm_newaddr+0x8a5/0xaa0 [ 145.740103][ T7790] rtnetlink_rcv_msg+0x1d3/0x500 [ 145.745035][ T7790] netlink_rcv_skb+0xb0/0x260 [ 145.749700][ T7790] rtnetlink_rcv+0x26/0x30 [ 145.754106][ T7790] netlink_unicast+0x3a6/0x4d0 [ 145.759119][ T7790] netlink_sendmsg+0x4d3/0x8b0 [ 145.763878][ T7790] sock_sendmsg+0x9f/0xc0 [ 145.768197][ T7790] __sys_sendto+0x21f/0x320 [ 145.772687][ T7790] __x64_sys_sendto+0x89/0xb0 [ 145.778137][ T7790] do_syscall_64+0xcc/0x3a0 [ 145.782723][ T7790] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 145.788595][ T7790] [ 145.790993][ T7790] Reported by Kernel Concurrency Sanitizer on: [ 145.797136][ T7790] CPU: 1 PID: 7790 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 145.805704][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.815940][ T7790] ================================================================== [ 145.824261][ T7790] Kernel panic - not syncing: panic_on_warn set ... [ 145.830841][ T7790] CPU: 1 PID: 7790 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 145.839416][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.849464][ T7790] Call Trace: [ 145.852746][ T7790] dump_stack+0x11d/0x181 [ 145.857076][ T7790] panic+0x210/0x640 [ 145.861061][ T7790] ? vprintk_func+0x8d/0x140 [ 145.874242][ T7790] kcsan_report.cold+0xc/0xd [ 145.878827][ T7790] kcsan_setup_watchpoint+0x3fe/0x460 [ 145.884192][ T7790] __tsan_read8+0xc6/0x100 [ 145.888776][ T7790] del_timer+0x3b/0xb0 [ 145.893293][ T7790] try_to_grab_pending+0x22d/0x3e0 [ 145.898483][ T7790] ? find_next_bit+0xcb/0xe0 [ 145.903068][ T7790] cancel_delayed_work+0x45/0x1c0 [ 145.908089][ T7790] __inet_insert_ifa+0x4a1/0x650 [ 145.913030][ T7790] inet_rtm_newaddr+0x8a5/0xaa0 [ 145.918572][ T7790] ? __mutex_lock.isra.0+0x2fd/0x740 [ 145.923873][ T7790] ? inet_set_link_af+0x1f0/0x1f0 [ 145.928892][ T7790] rtnetlink_rcv_msg+0x1d3/0x500 [ 145.933841][ T7790] ? rtnetlink_rcv_msg+0x1d3/0x500 [ 145.938960][ T7790] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 145.944680][ T7790] ? __rcu_read_unlock+0x66/0x3d0 [ 145.951175][ T7790] netlink_rcv_skb+0xb0/0x260 [ 145.955847][ T7790] ? rtnl_calcit.isra.0+0x220/0x220 [ 145.961038][ T7790] rtnetlink_rcv+0x26/0x30 [ 145.965535][ T7790] netlink_unicast+0x3a6/0x4d0 [ 145.970657][ T7790] netlink_sendmsg+0x4d3/0x8b0 [ 145.975417][ T7790] ? netlink_unicast+0x4d0/0x4d0 [ 145.980350][ T7790] sock_sendmsg+0x9f/0xc0 [ 145.984670][ T7790] __sys_sendto+0x21f/0x320 [ 145.989180][ T7790] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 145.995241][ T7790] ? _raw_spin_unlock_irq+0x68/0x80 [ 146.000472][ T7790] ? mem_cgroup_handle_over_high+0x50/0x180 [ 146.006369][ T7790] __x64_sys_sendto+0x89/0xb0 [ 146.011053][ T7790] do_syscall_64+0xcc/0x3a0 [ 146.015668][ T7790] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 146.021730][ T7790] RIP: 0033:0x414603 [ 146.025630][ T7790] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 6d 3e 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 146.045521][ T7790] RSP: 002b:00007ffc9386a498 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 146.053925][ T7790] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414603 [ 146.061885][ T7790] RDX: 0000000000000028 RSI: 0000000000a72250 RDI: 0000000000000003 [ 146.069950][ T7790] RBP: 0000000000000000 R08: 00007ffc9386a4a0 R09: 000000000000000c [ 146.077951][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.086202][ T7790] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 146.095995][ T7790] Kernel Offset: disabled [ 146.100342][ T7790] Rebooting in 86400 seconds..