[info] Using makefile-style concurrent boot in runlevel 2. [ 42.024700][ T26] audit: type=1800 audit(1575549225.642:21): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 42.054274][ T26] audit: type=1800 audit(1575549225.652:22): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.130' (ECDSA) to the list of known hosts. 2019/12/05 12:33:57 fuzzer started 2019/12/05 12:33:59 dialing manager at 10.128.0.105:33795 2019/12/05 12:34:02 syscalls: 2684 2019/12/05 12:34:02 code coverage: enabled 2019/12/05 12:34:02 comparison tracing: enabled 2019/12/05 12:34:02 extra coverage: extra coverage is not supported by the kernel 2019/12/05 12:34:02 setuid sandbox: enabled 2019/12/05 12:34:02 namespace sandbox: enabled 2019/12/05 12:34:02 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/05 12:34:02 fault injection: enabled 2019/12/05 12:34:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/05 12:34:02 net packet injection: enabled 2019/12/05 12:34:02 net device setup: enabled 2019/12/05 12:34:02 concurrency sanitizer: enabled 2019/12/05 12:34:02 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 61.861789][ T7569] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/05 12:34:10 adding functions to KCSAN blacklist: 'copy_process' 'dd_has_work' 'xas_clear_mark' 'xas_find_marked' 'mod_timer' 'echo_char' 'taskstats_exit' 'blk_mq_run_hw_queue' 'common_perm_cond' 'find_get_pages_range_tag' 'add_timer' 'poll_schedule_timeout' 'tomoyo_supervisor' 'ep_poll' 'do_nanosleep' 'generic_write_end' 'ext4_nonda_switch' 'blk_mq_get_request' 'tick_sched_do_timer' 'ext4_has_free_clusters' '__hrtimer_run_queues' 'tick_do_update_jiffies64' 'blk_mq_sched_dispatch_requests' 'run_timer_softirq' 'wbt_done' 'blk_mq_dispatch_rq_list' 'n_tty_receive_buf_common' 'timer_clear_idle' '__perf_event_overflow' 'find_next_bit' 'rcu_gp_fqs_loop' 'pcpu_alloc' 'page_counter_try_charge' 'pipe_wait' '__snd_rawmidi_transmit_ack' 'lruvec_lru_size' 'rcu_gp_fqs_check_wake' '__rb_rotate_set_parents' 'exit_signals' 'wbt_issue' 'tcp_add_backlog' '__ext4_new_inode' 'ext4_free_inode' 'list_lru_count_one' 'tick_nohz_idle_stop_tick' 'pipe_poll' 'do_syslog' '__tty_hangup' 12:35:23 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 12:35:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0xd3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}}) syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000240)=""/130, 0x82) [ 139.751647][ T7572] IPVS: ftp: loaded support on port[0] = 21 [ 139.861718][ T7572] chnl_net:caif_netlink_parms(): no params data found [ 139.928782][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.936062][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.943699][ T7572] device bridge_slave_0 entered promiscuous mode [ 139.951670][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.958780][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.966347][ T7572] device bridge_slave_1 entered promiscuous mode [ 139.983234][ T7572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.985462][ T7575] IPVS: ftp: loaded support on port[0] = 21 [ 139.993799][ T7572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.018488][ T7572] team0: Port device team_slave_0 added [ 140.027425][ T7572] team0: Port device team_slave_1 added 12:35:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x3, @ipv4=@multicast1=0xa000000}]}]}, 0x24}}, 0x0) [ 140.088690][ T7572] device hsr_slave_0 entered promiscuous mode [ 140.196856][ T7572] device hsr_slave_1 entered promiscuous mode 12:35:23 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc040564a, &(0x7f0000001340)={0x0, 0x1, 0x0, [], 0x0}) [ 140.272983][ T7577] IPVS: ftp: loaded support on port[0] = 21 [ 140.420329][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.427582][ T7572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.434904][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.442075][ T7572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.662055][ T7575] chnl_net:caif_netlink_parms(): no params data found [ 140.683934][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.719373][ T7577] chnl_net:caif_netlink_parms(): no params data found [ 140.751598][ T7572] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.778549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.787286][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.818037][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.857906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 140.891476][ T7605] IPVS: ftp: loaded support on port[0] = 21 [ 140.919828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.941494][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.948590][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 12:35:24 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4094, &(0x7f0000001080)=0xffe) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xfffffffffdfffffb, 0x32, 0xffffffffffffffff, 0x0) [ 140.988291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.016275][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.023473][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.132153][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.148213][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.197010][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.205613][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.257328][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.287731][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.328854][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.397705][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.404790][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.447131][ T7575] device bridge_slave_0 entered promiscuous mode [ 141.486183][ T7572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.507382][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.538897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.549727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.587166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.624317][ T7608] IPVS: ftp: loaded support on port[0] = 21 [ 141.630458][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.653170][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.687920][ T7577] device bridge_slave_0 entered promiscuous mode [ 141.697239][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.704290][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.737088][ T7575] device bridge_slave_1 entered promiscuous mode 12:35:25 executing program 5: getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x4000800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r8}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r10}}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r12}}, 0x48) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r13, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r14}}, 0x48) r15 = getpid() sched_setattr(r15, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r15) r16 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r17, 0x0) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r18, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r19}}, 0x48) inotify_init1(0x0) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r20, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r20, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r21}}, 0x48) r22 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0xba, 0xfa00, {0x0, &(0x7f0000000f80)={0xffffffffffffffff}}}, 0xffffffffffffff40) write$RDMA_USER_CM_CMD_RESOLVE_IP(r22, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r23}}, 0x48) r24 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r24, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r24, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) r25 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r25, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r25, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r26}}, 0x48) r27 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r27, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r27, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r28}}, 0x48) r29 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r29, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r29, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r30}}, 0x48) r31 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r31, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r31, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r32}}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept$alg(0xffffffffffffffff, 0x0, 0x0) r33 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r33, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800070400"/20, @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, @empty, @loopback}) pread64(r3, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e) syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) [ 141.757387][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.764503][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.783618][ T7577] device bridge_slave_1 entered promiscuous mode [ 141.812385][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.856122][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.871092][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.882353][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.898206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.905730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.928440][ T7619] IPVS: ftp: loaded support on port[0] = 21 [ 141.933998][ T7572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.954623][ T7577] team0: Port device team_slave_0 added [ 141.971598][ T7575] team0: Port device team_slave_0 added [ 141.978087][ T7577] team0: Port device team_slave_1 added [ 141.984826][ T7575] team0: Port device team_slave_1 added [ 142.058668][ T7575] device hsr_slave_0 entered promiscuous mode [ 142.126645][ T7575] device hsr_slave_1 entered promiscuous mode [ 142.166495][ T7575] debugfs: Directory 'hsr0' with parent '/' already present! [ 142.268263][ T7577] device hsr_slave_0 entered promiscuous mode [ 142.306690][ T7577] device hsr_slave_1 entered promiscuous mode [ 142.356449][ T7577] debugfs: Directory 'hsr0' with parent '/' already present! [ 142.408847][ T7605] chnl_net:caif_netlink_parms(): no params data found [ 142.448949][ T7608] chnl_net:caif_netlink_parms(): no params data found 12:35:26 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 142.721448][ T7619] chnl_net:caif_netlink_parms(): no params data found [ 142.869107][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.876361][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.927069][ T7605] device bridge_slave_0 entered promiscuous mode [ 142.966819][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.973911][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.009736][ T7608] device bridge_slave_0 entered promiscuous mode [ 143.047195][ T7608] bridge0: port 2(bridge_slave_1) entered blocking state 12:35:26 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 143.054253][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.117322][ T7608] device bridge_slave_1 entered promiscuous mode [ 143.166996][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.174100][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.237346][ T7605] device bridge_slave_1 entered promiscuous mode 12:35:27 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 143.344958][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.432133][ T7608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.488697][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.519346][ T7577] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.556265][ T7605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.587538][ T7608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.617188][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.625000][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:35:27 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 143.673831][ T7575] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.704254][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.728941][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.777409][ T7619] device bridge_slave_0 entered promiscuous mode [ 143.785621][ T7605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.821290][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.847412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.855096][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.906848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.915257][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.922305][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state 12:35:27 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 144.037048][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.045637][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.126708][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.133788][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.196866][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.213760][ T7577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 12:35:27 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 144.301188][ T7577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.396582][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.403656][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.467286][ T7619] device bridge_slave_1 entered promiscuous mode [ 144.547951][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.586982][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.595977][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 12:35:28 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/33) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) [ 144.666917][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.675501][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.768263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.827223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.835512][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.863512][ C0] hrtimer: interrupt took 35966 ns [ 144.917139][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.925525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.062632][ T7605] team0: Port device team_slave_0 added [ 145.077421][ T7608] team0: Port device team_slave_0 added [ 145.093974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.110895][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.159626][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.229805][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.279424][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.286637][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.337023][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.400312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.466998][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.474089][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.560132][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.610292][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.649920][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.714814][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.733870][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.744059][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.753197][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.762967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.773643][ T7619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.807976][ T7619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.840049][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.848945][ T7605] team0: Port device team_slave_1 added [ 145.855193][ T7608] team0: Port device team_slave_1 added [ 145.864102][ T7575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.875721][ T7575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.889434][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.897591][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.906231][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.914575][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.923429][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.931882][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.998523][ T7605] device hsr_slave_0 entered promiscuous mode [ 146.056782][ T7605] device hsr_slave_1 entered promiscuous mode [ 146.096691][ T7605] debugfs: Directory 'hsr0' with parent '/' already present! [ 146.158611][ T7608] device hsr_slave_0 entered promiscuous mode [ 146.207037][ T7608] device hsr_slave_1 entered promiscuous mode [ 146.296493][ T7608] debugfs: Directory 'hsr0' with parent '/' already present! [ 146.325676][ T7619] team0: Port device team_slave_0 added [ 146.372189][ T7613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.386591][ T7613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.402010][ T7619] team0: Port device team_slave_1 added [ 146.524629][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.609118][ T7619] device hsr_slave_0 entered promiscuous mode [ 146.666888][ T7619] device hsr_slave_1 entered promiscuous mode [ 146.696443][ T7619] debugfs: Directory 'hsr0' with parent '/' already present! [ 146.867204][ T7605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.883414][ T7776] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 146.958310][ T7608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.992394][ T7605] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.092588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.104094][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.175384][ T7608] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.255859][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.295942][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.358424][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.419914][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.489805][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.496929][ T7606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.587878][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.649000][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.707588][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.714671][ T7606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.807040][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.897337][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 12:35:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0xd3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}}) syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000240)=""/130, 0x82) 12:35:31 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/33) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) [ 147.967410][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.047033][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.124885][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.204320][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.345790][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.372245][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.434965][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.526870][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.636747][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.643823][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.710286][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.792923][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.850374][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.857498][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.966262][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.083161][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.159912][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.206954][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.267193][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.327058][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.397187][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.476936][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.489273][ T7605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.556495][ T7605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.622495][ T7608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.677133][ T7608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.734612][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.767113][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.817650][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.887045][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.957122][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.019704][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.070137][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.129827][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.256888][ T7605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.274175][ T7619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.340206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.368061][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.375543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.490499][ T7619] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.548789][ T7608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.556149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.575452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.634075][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.650744][ T7823] ================================================================== [ 150.658893][ T7823] BUG: KCSAN: data-race in vm_area_dup / vma_interval_tree_remove [ 150.666683][ T7823] [ 150.669018][ T7823] write to 0xffff8881230f69b8 of 8 bytes by task 7736 on cpu 0: [ 150.676647][ T7823] vma_interval_tree_remove+0x671/0x8a0 [ 150.682193][ T7823] __remove_shared_vm_struct+0xad/0xd0 [ 150.685292][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.687650][ T7823] unlink_file_vma+0x69/0x90 [ 150.687665][ T7823] free_pgtables+0x14f/0x200 [ 150.687677][ T7823] exit_mmap+0x151/0x300 [ 150.687698][ T7823] mmput+0xea/0x280 [ 150.707604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.708277][ T7823] do_exit+0x4c9/0x18f0 [ 150.724270][ T7823] do_group_exit+0xb4/0x1c0 [ 150.728809][ T7823] __x64_sys_exit_group+0x2e/0x30 [ 150.733893][ T7823] do_syscall_64+0xcc/0x370 [ 150.738407][ T7823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 150.744288][ T7823] [ 150.746635][ T7823] read to 0xffff8881230f6960 of 200 bytes by task 7823 on cpu 1: [ 150.746851][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.754349][ T7823] vm_area_dup+0x70/0xf0 [ 150.754365][ T7823] __split_vma+0x88/0x350 [ 150.754375][ T7823] __do_munmap+0xb02/0xb60 [ 150.754386][ T7823] mmap_region+0x165/0xd50 [ 150.754405][ T7823] do_mmap+0x6d4/0xba0 [ 150.776785][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.779846][ T7823] vm_mmap_pgoff+0x12d/0x190 [ 150.783992][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.791004][ T7823] ksys_mmap_pgoff+0x2d8/0x420 [ 150.791018][ T7823] __x64_sys_mmap+0x2e/0x40 [ 150.791033][ T7823] do_syscall_64+0xcc/0x370 [ 150.791059][ T7823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 150.806505][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.807540][ T7823] [ 150.819479][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.822390][ T7823] Reported by Kernel Concurrency Sanitizer on: [ 150.841745][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.846848][ T7823] CPU: 1 PID: 7823 Comm: cat Not tainted 5.4.0-syzkaller #0 [ 150.846856][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.846862][ T7823] ================================================================== [ 150.846876][ T7823] Kernel panic - not syncing: panic_on_warn set ... [ 150.853901][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.861184][ T7823] CPU: 1 PID: 7823 Comm: cat Not tainted 5.4.0-syzkaller #0 [ 150.861202][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.873871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.879383][ T7823] Call Trace: [ 150.879408][ T7823] dump_stack+0x11d/0x181 [ 150.879433][ T7823] panic+0x210/0x640 [ 150.887203][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.893189][ T7823] ? vprintk_func+0x8d/0x140 [ 150.901278][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.910506][ T7823] kcsan_report.cold+0xc/0xd [ 150.910533][ T7823] kcsan_setup_watchpoint+0x3fe/0x460 [ 150.919326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.921685][ T7823] ? __rb_rotate_set_parents+0x70/0xf0 [ 150.927245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.929866][ T7823] __tsan_read_range+0xc4/0x100 [ 150.938288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.942300][ T7823] vm_area_dup+0x70/0xf0 [ 150.951339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.954826][ T7823] __split_vma+0x88/0x350 [ 150.960941][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.967999][ T7823] ? find_vma+0x3e/0x110 [ 150.968017][ T7823] __do_munmap+0xb02/0xb60 [ 150.968042][ T7823] mmap_region+0x165/0xd50 [ 150.977592][ T7619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.981404][ T7823] do_mmap+0x6d4/0xba0 [ 150.987529][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.994061][ T7823] vm_mmap_pgoff+0x12d/0x190 [ 151.000506][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.006131][ T7823] ksys_mmap_pgoff+0x2d8/0x420 [ 151.011779][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.018193][ T7823] __x64_sys_mmap+0x2e/0x40 [ 151.018219][ T7823] do_syscall_64+0xcc/0x370 [ 151.024079][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.027023][ T7823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.027082][ T7823] RIP: 0033:0x7fea043e23ea [ 151.032721][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.041798][ T7823] Code: 48 8d 3d 81 69 00 00 b2 84 e8 52 ec ff ff f7 d8 89 05 ae ad 20 00 eb c6 90 90 90 90 90 90 90 90 49 89 ca b8 09 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 8a ad 20 00 31 d2 48 29 c2 89 [ 151.041807][ T7823] RSP: 002b:00007ffc88b09208 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 151.041822][ T7823] RAX: ffffffffffffffda RBX: 00007fea045ea4c0 RCX: 00007fea043e23ea [ 151.041831][ T7823] RDX: 0000000000000003 RSI: 0000000000005000 RDI: 00007fea043c2000 [ 151.041839][ T7823] RBP: 00007ffc88b09560 R08: 0000000000000003 R09: 0000000000183000 [ 151.041848][ T7823] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffc88b09648 [ 151.041866][ T7823] R13: 0000000000000002 R14: 00007ffc88b09280 R15: 00007ffc88b09250 [ 151.056925][ T7619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.066259][ T7823] Kernel Offset: disabled [ 151.191708][ T7823] Rebooting in 86400 seconds..