[info] Using makefile-style concurrent boot in runlevel 2.
[   41.651584][   T26] audit: type=1800 audit(1576129336.227:21): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0
[   41.703543][   T26] audit: type=1800 audit(1576129336.227:22): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts.
2019/12/12 05:42:27 fuzzer started
2019/12/12 05:42:29 dialing manager at 10.128.0.105:39821
2019/12/12 05:42:29 syscalls: 2689
2019/12/12 05:42:29 code coverage: enabled
2019/12/12 05:42:29 comparison tracing: enabled
2019/12/12 05:42:29 extra coverage: extra coverage is not supported by the kernel
2019/12/12 05:42:29 setuid sandbox: enabled
2019/12/12 05:42:29 namespace sandbox: enabled
2019/12/12 05:42:29 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/12 05:42:29 fault injection: enabled
2019/12/12 05:42:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/12 05:42:29 net packet injection: enabled
2019/12/12 05:42:29 net device setup: enabled
2019/12/12 05:42:29 concurrency sanitizer: enabled
2019/12/12 05:42:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2019/12/12 05:42:32 adding functions to KCSAN blacklist: 'run_timer_softirq' '__hrtimer_run_queues' 'xas_clear_mark' 'tcp_add_backlog' 'find_next_bit' 'tick_do_update_jiffies64' 'blk_mq_get_request' 'add_timer' 'generic_write_end' 'mod_timer' 'tick_nohz_idle_stop_tick' 'ep_poll' 'pipe_poll' 'taskstats_exit' 'lruvec_lru_size' 'ext4_nonda_switch' 'blk_mq_sched_dispatch_requests' 'ext4_free_inode' 'tomoyo_supervisor' 'vm_area_dup' 'pipe_wait' '__splice_from_pipe' 'tick_sched_do_timer' 
05:42:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

05:42:42 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

syzkaller login: [   67.674932][ T7501] IPVS: ftp: loaded support on port[0] = 21
[   67.784617][ T7501] chnl_net:caif_netlink_parms(): no params data found
[   67.798655][ T7504] IPVS: ftp: loaded support on port[0] = 21
05:42:42 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000efe8))
mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000007000)={0x8003})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}})

[   67.843513][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.850654][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.859464][ T7501] device bridge_slave_0 entered promiscuous mode
[   67.868607][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.875664][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.884105][ T7501] device bridge_slave_1 entered promiscuous mode
[   67.931267][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.950419][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.967740][ T7504] chnl_net:caif_netlink_parms(): no params data found
[   68.009788][ T7501] team0: Port device team_slave_0 added
[   68.027129][ T7501] team0: Port device team_slave_1 added
[   68.037227][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.044305][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.052338][ T7504] device bridge_slave_0 entered promiscuous mode
[   68.060216][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.067523][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.075105][ T7504] device bridge_slave_1 entered promiscuous mode
[   68.088674][ T7507] IPVS: ftp: loaded support on port[0] = 21
05:42:42 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000a8000)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c56026932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1)

[   68.197753][ T7501] device hsr_slave_0 entered promiscuous mode
[   68.246858][ T7501] device hsr_slave_1 entered promiscuous mode
[   68.338817][ T7504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.401396][ T7504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.404178][ T7509] IPVS: ftp: loaded support on port[0] = 21
[   68.430756][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.437863][ T7501] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.445146][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.452252][ T7501] bridge0: port 1(bridge_slave_0) entered forwarding state
05:42:43 executing program 4:
unshare(0x2040400)
r0 = io_uring_setup(0x40000000e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[   68.690042][ T7504] team0: Port device team_slave_0 added
[   68.712014][ T7504] team0: Port device team_slave_1 added
[   68.767614][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.824493][ T7507] chnl_net:caif_netlink_parms(): no params data found
[   68.847998][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.875336][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.927417][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   68.988237][ T7504] device hsr_slave_0 entered promiscuous mode
[   69.006071][ T7504] device hsr_slave_1 entered promiscuous mode
[   69.045872][ T7504] debugfs: Directory 'hsr0' with parent '/' already present!
[   69.067441][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.075181][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.131574][ T7538] IPVS: ftp: loaded support on port[0] = 21
[   69.139361][ T7501] 8021q: adding VLAN 0 to HW filter on device team0
[   69.169699][ T7509] chnl_net:caif_netlink_parms(): no params data found
[   69.251664][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.298058][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.356131][ T7530] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.363301][ T7530] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.446281][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.497551][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.548000][ T7530] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.555122][ T7530] bridge0: port 2(bridge_slave_1) entered forwarding state
05:42:44 executing program 5:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000)
read(r0, &(0x7f0000000240)=""/204, 0xffffff83)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})
close(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[   69.626309][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.678366][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.718100][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.756528][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.885105][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.907771][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.945866][ T7507] device bridge_slave_0 entered promiscuous mode
[   69.969895][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.993892][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.056026][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.091075][ T7509] device bridge_slave_0 entered promiscuous mode
[   70.116523][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.123591][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.156502][ T7507] device bridge_slave_1 entered promiscuous mode
[   70.199818][ T7501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   70.235821][ T7501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.285952][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.298438][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.326473][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.366108][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.408237][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.436451][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.474142][ T7566] IPVS: ftp: loaded support on port[0] = 21
[   70.480153][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.489777][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.508434][ T7509] device bridge_slave_1 entered promiscuous mode
[   70.555433][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.581156][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.606865][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.614585][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.691524][ T7504] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.746821][ T7507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.773511][ T7504] 8021q: adding VLAN 0 to HW filter on device team0
[   70.798355][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.813868][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.822018][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.839525][ T7507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.869571][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.882571][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.904534][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.922416][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.929499][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.952224][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.969113][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.983607][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.990670][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.001404][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.010474][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.049966][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.062539][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.071443][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.080300][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.089343][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.098300][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.106810][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.115052][ T7538] chnl_net:caif_netlink_parms(): no params data found
[   71.124739][ T7507] team0: Port device team_slave_0 added
[   71.131404][ T7507] team0: Port device team_slave_1 added
[   71.147062][ T7504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.160126][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.172465][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.188708][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.199889][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.220023][ T7509] team0: Port device team_slave_0 added
[   71.226910][ T7509] team0: Port device team_slave_1 added
05:42:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

[   71.308138][ T7509] device hsr_slave_0 entered promiscuous mode
[   71.346066][ T7509] device hsr_slave_1 entered promiscuous mode
05:42:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

[   71.375786][ T7509] debugfs: Directory 'hsr0' with parent '/' already present!
[   71.383282][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.391640][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.400519][ T7538] device bridge_slave_0 entered promiscuous mode
[   71.468054][ T7507] device hsr_slave_0 entered promiscuous mode
05:42:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

[   71.526091][ T7507] device hsr_slave_1 entered promiscuous mode
[   71.565808][ T7507] debugfs: Directory 'hsr0' with parent '/' already present!
[   71.579671][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.586850][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.594722][ T7538] device bridge_slave_1 entered promiscuous mode
[   71.622052][ T7504] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.647295][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.654763][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.691291][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.708389][ T7566] chnl_net:caif_netlink_parms(): no params data found
05:42:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

[   71.740385][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.981917][ T7538] team0: Port device team_slave_0 added
[   71.988859][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.019241][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state
05:42:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

[   72.063133][ T7566] device bridge_slave_0 entered promiscuous mode
[   72.120602][ T7509] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.175212][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.223997][ T7538] team0: Port device team_slave_1 added
[   72.272806][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.295911][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.369327][ T7566] device bridge_slave_1 entered promiscuous mode
05:42:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

[   72.436458][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.447386][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.490103][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.551941][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
05:42:47 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[   72.605190][ T7509] 8021q: adding VLAN 0 to HW filter on device team0
[   72.626836][ T7507] 8021q: adding VLAN 0 to HW filter on device team0
[   72.679294][ T7538] device hsr_slave_0 entered promiscuous mode
[   72.737695][ T7538] device hsr_slave_1 entered promiscuous mode
[   72.775797][ T7538] debugfs: Directory 'hsr0' with parent '/' already present!
05:42:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

[   72.826595][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.835193][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.891531][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.898619][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.004986][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.049317][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.166145][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.173399][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.236227][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.289562][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.316826][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.376273][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.385025][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.459177][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.485944][   T10] ==================================================================
[   73.486538][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.494075][   T10] BUG: KCSAN: data-race in rcu_gp_fqs_check_wake / rcu_note_context_switch
[   73.510394][   T10] 
[   73.512722][   T10] write to 0xffffffff85a7d1d0 of 8 bytes by task 45 on cpu 0:
[   73.520178][   T10]  rcu_note_context_switch+0x6f6/0x760
[   73.525632][   T10]  __schedule+0xa4/0x690
[   73.529871][   T10]  preempt_schedule_common+0x37/0x90
[   73.535153][   T10]  preempt_schedule+0x30/0x40
[   73.539832][   T10]  ___preempt_schedule+0x16/0x20
[   73.544766][   T10]  __local_bh_enable_ip+0x44/0x80
[   73.549787][   T10]  _raw_spin_unlock_bh+0x3f/0x50
[   73.554717][   T10]  sctp_inet6addr_event+0x3e8/0x440
[   73.559921][   T10]  notifier_call_chain+0xd7/0x160
[   73.564940][   T10]  atomic_notifier_call_chain+0x3c/0x60
[   73.566306][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.570503][   T10]  inet6addr_notifier_call_chain+0x2e/0x40
[   73.584016][   T10]  ipv6_add_addr+0xbc5/0xd30
[   73.588600][   T10]  addrconf_add_linklocal+0x15f/0x250
[   73.593966][   T10]  addrconf_addr_gen+0x1ff/0x230
[   73.598901][   T10]  addrconf_dev_config+0x1c0/0x280
[   73.604010][   T10]  addrconf_notify+0x1fa/0x1480
[   73.606381][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.608863][   T10]  notifier_call_chain+0xd7/0x160
[   73.622056][   T10]  raw_notifier_call_chain+0x37/0x50
[   73.627341][   T10]  call_netdevice_notifiers_info+0x48/0xc0
[   73.633143][   T10]  netdev_state_change+0xb2/0xd0
[   73.638075][   T10]  linkwatch_do_dev+0xd8/0xf0
[   73.642746][   T10]  __linkwatch_run_queue+0x1a9/0x510
[   73.648114][   T10]  linkwatch_event+0x54/0x70
[   73.652715][   T10]  process_one_work+0x3d4/0x890
[   73.656335][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.657569][   T10]  worker_thread+0xa0/0x800
[   73.670028][   T10]  kthread+0x1d4/0x200
[   73.674094][   T10]  ret_from_fork+0x1f/0x30
[   73.678519][   T10] 
[   73.680844][   T10] read to 0xffffffff85a7d1d0 of 8 bytes by task 10 on cpu 1:
[   73.688207][   T10]  rcu_gp_fqs_check_wake+0x93/0xd0
[   73.693318][   T10]  rcu_gp_fqs_loop+0x36c/0x580
[   73.695922][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.698084][   T10]  rcu_gp_kthread+0x143/0x230
[   73.705147][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.709737][   T10]  kthread+0x1d4/0x200
[   73.709750][   T10]  ret_from_fork+0x1f/0x30
[   73.709752][   T10] 
[   73.709756][   T10] Reported by Kernel Concurrency Sanitizer on:
[   73.709771][   T10] CPU: 1 PID: 10 Comm: rcu_preempt Not tainted 5.4.0-syzkaller #0
[   73.709780][   T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   73.709786][   T10] ==================================================================
[   73.709794][   T10] Kernel panic - not syncing: panic_on_warn set ...
[   73.709807][   T10] CPU: 1 PID: 10 Comm: rcu_preempt Not tainted 5.4.0-syzkaller #0
[   73.709823][   T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   73.776585][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.784118][   T10] Call Trace:
[   73.795484][   T10]  dump_stack+0x11d/0x181
[   73.799874][   T10]  panic+0x210/0x640
[   73.803778][   T10]  ? vprintk_func+0x8d/0x140
[   73.808379][   T10]  kcsan_report.cold+0xc/0xd
[   73.812983][   T10]  kcsan_setup_watchpoint+0x3fe/0x460
[   73.818401][   T10]  __tsan_read8+0xc6/0x100
[   73.822821][   T10]  rcu_gp_fqs_check_wake+0x93/0xd0
[   73.827927][   T10]  rcu_gp_fqs_loop+0x36c/0x580
[   73.832697][   T10]  rcu_gp_kthread+0x143/0x230
[   73.837383][   T10]  kthread+0x1d4/0x200
[   73.841454][   T10]  ? rcu_gp_cleanup+0x520/0x520
[   73.846303][   T10]  ? kthread_stop+0x2d0/0x2d0
[   73.846320][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.850974][   T10]  ret_from_fork+0x1f/0x30
[   73.852288][   T10] Kernel Offset: disabled
[   73.868983][   T10] Rebooting in 86400 seconds..