[   54.946622][   T26] audit: type=1800 audit(1573144209.158:27): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[   54.967211][   T26] audit: type=1800 audit(1573144209.158:28): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   55.804848][   T26] audit: type=1800 audit(1573144210.088:29): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[   55.825242][   T26] audit: type=1800 audit(1573144210.088:30): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts.
2019/11/07 16:30:20 fuzzer started
2019/11/07 16:30:22 dialing manager at 10.128.0.105:38105
2019/11/07 16:30:24 syscalls: 2553
2019/11/07 16:30:24 code coverage: enabled
2019/11/07 16:30:24 comparison tracing: enabled
2019/11/07 16:30:24 extra coverage: extra coverage is not supported by the kernel
2019/11/07 16:30:24 setuid sandbox: enabled
2019/11/07 16:30:24 namespace sandbox: enabled
2019/11/07 16:30:24 Android sandbox: /sys/fs/selinux/policy does not exist
2019/11/07 16:30:24 fault injection: enabled
2019/11/07 16:30:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/11/07 16:30:24 net packet injection: enabled
2019/11/07 16:30:24 net device setup: enabled
2019/11/07 16:30:24 concurrency sanitizer: enabled
2019/11/07 16:30:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
syzkaller login: [   70.743764][ T8123] KCSAN: could not find function: 'poll_schedule_timeout'
2019/11/07 16:30:30 adding functions to KCSAN blacklist: 'blk_mq_run_hw_queue' 'rcu_gp_fqs_check_wake' 'mod_timer' '__hrtimer_run_queues' 'poll_schedule_timeout' 'tick_do_update_jiffies64' 'n_tty_receive_buf_common' '__ext4_new_inode' 'pipe_poll' 'ext4_free_inode' 'blk_mq_get_request' 'tick_nohz_next_event' 'ext4_has_free_clusters' 'do_exit' 'tcp_add_backlog' 'tomoyo_supervisor' 'generic_permission' 'ktime_get_real_seconds' 'find_next_bit' 'run_timer_softirq' 'ext4_nonda_switch' 'find_get_pages_range_tag' 'lruvec_lru_size' 'dd_has_work' 'common_perm_cond' 'pid_update_inode' 'do_nanosleep' 'wbt_done' '__skb_try_recv_from_queue' 'tick_sched_do_timer' 'add_timer' 'ktime_get_seconds' '__rb_insert_augmented' 'blk_mq_dispatch_rq_list' 'tick_nohz_idle_stop_tick' 'generic_fillattr' 'taskstats_exit' 'ep_poll' 'generic_write_end' 
16:30:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150005008178a8001600400004000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

16:30:54 executing program 1:
r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0xfffffffffffffffe)

[  100.258482][ T8128] IPVS: ftp: loaded support on port[0] = 21
[  100.372324][ T8128] chnl_net:caif_netlink_parms(): no params data found
[  100.432033][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.439638][ T8131] IPVS: ftp: loaded support on port[0] = 21
[  100.445694][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.457802][ T8128] device bridge_slave_0 entered promiscuous mode
[  100.481567][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.488660][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.496728][ T8128] device bridge_slave_1 entered promiscuous mode
[  100.530751][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.558423][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
16:30:54 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffbc, &(0x7f0000000000))

[  100.579754][ T8131] chnl_net:caif_netlink_parms(): no params data found
[  100.625501][ T8128] team0: Port device team_slave_0 added
[  100.646465][ T8128] team0: Port device team_slave_1 added
[  100.683266][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.701039][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.721080][ T8131] device bridge_slave_0 entered promiscuous mode
[  100.738081][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.752317][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.760460][ T8131] device bridge_slave_1 entered promiscuous mode
16:30:55 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)={0x0, 0x1000000000000002, 0x0, 0x0, "0000fc265b3cca0100be04e0e0b2c4b17d2ffb95c9771312083536e30be48d46"})

[  100.813627][ T8128] device hsr_slave_0 entered promiscuous mode
[  100.851250][ T8128] device hsr_slave_1 entered promiscuous mode
[  100.959675][ T8134] IPVS: ftp: loaded support on port[0] = 21
[  100.982011][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.048418][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.055570][ T8128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.063010][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.070069][ T8128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.202899][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.260422][ T8159] IPVS: ftp: loaded support on port[0] = 21
[  101.287645][ T8131] team0: Port device team_slave_0 added
[  101.362200][ T8131] team0: Port device team_slave_1 added
[  101.412907][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.449938][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.481803][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.522146][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  101.613419][ T8131] device hsr_slave_0 entered promiscuous mode
16:30:56 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x9c)
sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='q', 0x1}], 0x1}, 0x20004041)

[  101.661246][ T8131] device hsr_slave_1 entered promiscuous mode
[  101.681414][ T8131] debugfs: Directory 'hsr0' with parent '/' already present!
[  101.726143][ T8128] 8021q: adding VLAN 0 to HW filter on device team0
[  101.752272][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.782866][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.816527][ T8134] chnl_net:caif_netlink_parms(): no params data found
[  101.942763][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.983712][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.043340][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.050437][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.208032][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.261510][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.313224][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.320312][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.536213][ T8134] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.551160][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.601022][ T8134] device bridge_slave_0 entered promiscuous mode
[  102.610256][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.635319][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.682062][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.741570][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.791769][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.841555][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.882280][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.941639][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.000235][ T8184] IPVS: ftp: loaded support on port[0] = 21
[  103.016385][ T8128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.066096][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
16:30:57 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$KDADDIO(r0, 0x8926, 0x718000)

[  103.123793][ T8134] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.130876][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.190976][ T8134] device bridge_slave_1 entered promiscuous mode
[  103.242893][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.251809][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.311508][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.382974][ T8159] chnl_net:caif_netlink_parms(): no params data found
[  103.420541][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.472796][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.517021][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.529132][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.560599][ T8134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.605595][ T8131] 8021q: adding VLAN 0 to HW filter on device team0
[  103.623149][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  103.635194][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  103.677580][ T8134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.701239][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  103.710048][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  103.733624][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.740733][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.800268][ T8199] IPVS: ftp: loaded support on port[0] = 21
[  103.819319][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  103.841518][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  103.874229][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.894311][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.901403][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.943982][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.972228][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.004711][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.032035][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.072047][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.091740][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.112019][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  104.144044][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  104.215953][ T8131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.239884][ T8131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  104.273546][ T8134] team0: Port device team_slave_0 added
[  104.279514][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  104.290255][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  104.298897][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.309921][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.317289][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.325375][ T8159] device bridge_slave_0 entered promiscuous mode
[  104.334393][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.341728][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.349446][ T8159] device bridge_slave_1 entered promiscuous mode
[  104.369576][ T8210] IPv6: NLM_F_CREATE should be specified when creating new route
[  104.379392][ T8210] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  104.390122][ T8134] team0: Port device team_slave_1 added
16:30:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150005008178a8001600400004000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

[  104.442161][ T8184] chnl_net:caif_netlink_parms(): no params data found
[  104.483168][ T8159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.553750][ T8134] device hsr_slave_0 entered promiscuous mode
[  104.601287][ T8134] device hsr_slave_1 entered promiscuous mode
[  104.641079][ T8134] debugfs: Directory 'hsr0' with parent '/' already present!
[  104.648816][ T8213] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  104.664396][ T8159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.680025][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0
16:30:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150005008178a8001600400004000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

[  104.696104][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.713280][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.792188][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.799624][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.809316][ T8184] device bridge_slave_0 entered promiscuous mode
[  104.818781][ T8219] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  104.841934][ T8159] team0: Port device team_slave_0 added
[  104.863092][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.870338][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.924160][ T8184] device bridge_slave_1 entered promiscuous mode
[  104.952788][ T8159] team0: Port device team_slave_1 added
16:30:59 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150005008178a8001600400004000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

[  105.104764][ T8199] chnl_net:caif_netlink_parms(): no params data found
[  105.159181][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0
16:30:59 executing program 1:
r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0xfffffffffffffffe)

[  105.205802][ T8184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.243914][ T8159] device hsr_slave_0 entered promiscuous mode
[  105.281640][ T8159] device hsr_slave_1 entered promiscuous mode
[  105.341019][ T8159] debugfs: Directory 'hsr0' with parent '/' already present!
[  105.354070][ T8247] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  105.415767][ T8134] 8021q: adding VLAN 0 to HW filter on device team0
[  105.462961][ T8184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.489637][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.501667][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
16:30:59 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_read_part_table(0x0, 0x1, &(0x7f0000001040)=[{&(0x7f0000000040)="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", 0x1ee, 0x12}])

16:30:59 executing program 1:
r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0xfffffffffffffffe)

[  105.621060][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  105.629888][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.683569][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.690633][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.775125][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.826854][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.878929][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.886056][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.911643][ T8269] Dev loop0: unable to read RDB block 1
[  105.917426][ T8269]  loop0: unable to read partition table
16:31:00 executing program 1:
r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0xfffffffffffffffe)

[  105.970534][ T8269] loop0: partition table beyond EOD, truncated
[  105.991902][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.011024][ T8269] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  106.056801][ T8184] team0: Port device team_slave_0 added
[  106.070562][ T8184] team0: Port device team_slave_1 added
[  106.125808][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.171084][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.217106][ T8199] device bridge_slave_0 entered promiscuous mode
16:31:00 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_read_part_table(0x0, 0x1, &(0x7f0000001040)=[{&(0x7f0000000040)="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", 0x1ee, 0x12}])

[  106.300162][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.319752][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.427853][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.501873][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.510547][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.581378][ T8292] Dev loop0: unable to read RDB block 1
[  106.587068][ T8292]  loop0: unable to read partition table
[  106.598871][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.641324][ T8292] loop0: partition table beyond EOD, truncated
[  106.681925][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.690432][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.711309][ T8292] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  106.772165][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.806685][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  106.943447][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.950735][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.021760][ T8199] device bridge_slave_1 entered promiscuous mode
[  107.029154][ T8134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.056533][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  107.133273][ T8184] device hsr_slave_0 entered promiscuous mode
[  107.191256][ T8184] device hsr_slave_1 entered promiscuous mode
[  107.244737][ T8184] debugfs: Directory 'hsr0' with parent '/' already present!
[  107.307366][ T8134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.374360][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.391835][ T3498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.454375][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.505988][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.730270][ T8159] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.806549][ T8199] team0: Port device team_slave_0 added
[  107.869543][ T8159] 8021q: adding VLAN 0 to HW filter on device team0
[  107.934237][ T8199] team0: Port device team_slave_1 added
[  107.946839][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.983921][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  108.040190][ T8184] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.159877][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  108.177796][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  108.209673][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.216814][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.274362][ T8184] 8021q: adding VLAN 0 to HW filter on device team0
[  108.383557][ T8199] device hsr_slave_0 entered promiscuous mode
[  108.445828][ T8199] device hsr_slave_1 entered promiscuous mode
[  108.490959][ T8199] debugfs: Directory 'hsr0' with parent '/' already present!
[  108.513431][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  108.541799][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  108.561494][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  108.589908][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  108.623587][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  108.653344][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.660457][ T8153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.698937][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  108.719680][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  108.752446][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  108.791726][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.878484][ T8159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  108.914122][ T8159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.965594][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.977836][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  109.017226][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.049922][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.057114][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.111657][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  109.130691][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  109.150685][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.157991][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.173378][ T8340] ==================================================================
[  109.176446][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.181528][ T8340] BUG: KCSAN: data-race in task_dump_owner / task_dump_owner
[  109.181532][ T8340] 
[  109.181552][ T8340] write to 0xffff888123cc831c of 4 bytes by task 8338 on cpu 1:
[  109.181582][ T8340]  task_dump_owner+0x237/0x260
[  109.211985][ T8340]  pid_update_inode+0x3c/0x70
[  109.212087][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  109.216724][ T8340]  pid_revalidate+0x91/0xd0
[  109.229117][ T8340]  lookup_fast+0x618/0x700
[  109.231769][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  109.233562][ T8340]  path_openat+0x2ac/0x36e0
[  109.233588][ T8340]  do_filp_open+0x11e/0x1b0
[  109.250367][ T8340]  do_sys_open+0x3b3/0x4f0
[  109.254793][ T8340]  __x64_sys_open+0x55/0x70
[  109.259310][ T8340]  do_syscall_64+0xcc/0x370
[  109.262101][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  109.263868][ T8340]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  109.277698][ T8340] 
[  109.280066][ T8340] write to 0xffff888123cc831c of 4 bytes by task 8340 on cpu 0:
[  109.281645][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  109.287723][ T8340]  task_dump_owner+0x237/0x260
[  109.287743][ T8340]  pid_update_inode+0x3c/0x70
[  109.287760][ T8340]  pid_revalidate+0x91/0xd0
[  109.287794][ T8340]  lookup_fast+0x618/0x700
[  109.307224][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  109.309240][ T8340]  path_openat+0x2ac/0x36e0
[  109.326914][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  109.330457][ T8340]  do_filp_open+0x11e/0x1b0
[  109.342664][ T8340]  do_sys_open+0x3b3/0x4f0
[  109.347086][ T8340]  __x64_sys_open+0x55/0x70
[  109.349057][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.351777][ T8340]  do_syscall_64+0xcc/0x370
[  109.351798][ T8340]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  109.351821][ T8340] 
[  109.371898][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  109.372914][ T8340] Reported by Kernel Concurrency Sanitizer on:
[  109.387224][ T8340] CPU: 0 PID: 8340 Comm: ps Not tainted 5.4.0-rc6+ #0
[  109.391754][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  109.394029][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  109.412604][ T8340] ==================================================================
[  109.413351][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  109.420674][ T8340] Kernel panic - not syncing: panic_on_warn set ...
[  109.435139][ T8340] CPU: 0 PID: 8340 Comm: ps Not tainted 5.4.0-rc6+ #0
[  109.441899][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  109.449649][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  109.451961][ T8340] Call Trace:
[  109.451996][ T8340]  dump_stack+0xf5/0x159
[  109.452024][ T8340]  panic+0x210/0x640
[  109.471226][ T8340]  ? vprintk_func+0x8d/0x140
[  109.471705][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  109.475835][ T8340]  kcsan_report.cold+0xc/0xe
[  109.487784][ T8340]  kcsan_setup_watchpoint+0x3fe/0x410
[  109.493168][ T8340]  ? __read_once_size.constprop.0+0x12/0x20
[  109.499083][ T8340]  __tsan_unaligned_write4+0x143/0x1f0
[  109.501633][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  109.504560][ T8340]  task_dump_owner+0x237/0x260
[  109.504593][ T8340]  ? __rcu_read_unlock+0x66/0x3c0
[  109.521493][ T8340]  pid_update_inode+0x3c/0x70
[  109.521632][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  109.526440][ T8340]  pid_revalidate+0x91/0xd0
[  109.526473][ T8340]  lookup_fast+0x618/0x700
[  109.542593][ T8340]  path_openat+0x2ac/0x36e0
[  109.547137][ T8340]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  109.553048][ T8340]  ? __read_once_size+0x41/0xe0
[  109.558018][ T8340]  do_filp_open+0x11e/0x1b0
[  109.562553][ T8340]  ? __alloc_fd+0x2ef/0x3b0
[  109.567094][ T8340]  do_sys_open+0x3b3/0x4f0
[  109.571539][ T8340]  __x64_sys_open+0x55/0x70
[  109.576060][ T8340]  do_syscall_64+0xcc/0x370
[  109.580583][ T8340]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  109.586487][ T8340] RIP: 0033:0x7fcab9341120
[  109.590952][ T8340] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24
[  109.610567][ T8340] RSP: 002b:00007fffe1e91338 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  109.619027][ T8340] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007fcab9341120
[  109.627023][ T8340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fcab980fd00
[  109.635013][ T8340] RBP: 0000000000001000 R08: 0000000000000000 R09: 00007fcab9609a10
[  109.642993][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcab980ed00
[  109.650971][ T8340] R13: 00000000006f61c0 R14: 0000000000000005 R15: 0000000000000000
[  109.660503][ T8340] Kernel Offset: disabled
[  109.664854][ T8340] Rebooting in 86400 seconds..