[ 31.825484][ T26] audit: type=1800 audit(1549710561.476:28): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 32.618670][ T26] audit: type=1800 audit(1549710562.336:29): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 32.638695][ T26] audit: type=1800 audit(1549710562.336:30): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.255' (ECDSA) to the list of known hosts. 2019/02/09 11:09:29 fuzzer started 2019/02/09 11:09:31 dialing manager at 10.128.0.26:46507 2019/02/09 11:09:31 syscalls: 1 2019/02/09 11:09:31 code coverage: enabled 2019/02/09 11:09:31 comparison tracing: enabled 2019/02/09 11:09:31 extra coverage: extra coverage is not supported by the kernel 2019/02/09 11:09:31 setuid sandbox: enabled 2019/02/09 11:09:31 namespace sandbox: enabled 2019/02/09 11:09:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/09 11:09:31 fault injection: enabled 2019/02/09 11:09:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/09 11:09:31 net packet injection: enabled 2019/02/09 11:09:31 net device setup: enabled 11:11:58 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0xc001) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[0x80000001, 0x10001]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x1, 0x6, 0x60ee, 0x9, [], [], [], 0xf5c, 0x1, 0x9, 0x80000000, "f827a4a0269486643bf2c7fb55dcd2c1"}) io_setup(0x9, &(0x7f0000000240)=0x0) io_pgetevents(r1, 0xfffffffffffffffc, 0x5, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r2, 0x9d, "f44775", "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"}}, 0x110) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000540)={0x6, &(0x7f0000000500)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000680)={r3, &(0x7f0000000580)=""/200}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000006c0)) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000740)={0x8, &(0x7f0000000700)=[0x5, 0x4, 0xfffffffffffffffa, 0x7, 0x7fff, 0x4, 0xfffffffffffffeff, 0x3]}) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000780)=@default) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000007c0)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000800), 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000840)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={@remote, @mcast1, @mcast2, 0x7fff, 0x6, 0x39d, 0x400, 0x529, 0x2000000, r5}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000940)={"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"}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000d40)={0x0, @in6={{0xa, 0x4e20, 0x6, @loopback, 0xff}}, 0x5, 0xfffffffffffffffe}, &(0x7f0000000e00)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000e40)={r6, 0xa8c8}, &(0x7f0000000e80)=0x8) r7 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ec0)={{{@in=@multicast1, @in=@multicast2, 0x4e24, 0xbae, 0x4e24, 0x3, 0xa, 0x20, 0x80, 0x16, r5, r7}, {0x0, 0x10000, 0x6, 0x0, 0x7f, 0x9, 0x8, 0x81}, {0x3bd, 0x9, 0xe5, 0x8f2a}, 0x5, 0x6e6bb3, 0x3, 0x1, 0x3, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0xa, @in6=@mcast1, 0x3502, 0x0, 0x0, 0x8000, 0x80000000, 0x2, 0x80000001}}, 0xe8) r8 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000fc0)=0x0) setpgid(r8, r9) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000001000)) ioctl$RTC_WIE_ON(r0, 0x700f) syzkaller login: [ 189.200804][ T7434] IPVS: ftp: loaded support on port[0] = 21 11:11:59 executing program 1: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffffffff, 0x83) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r2, r4}) getrlimit(0x0, &(0x7f0000000140)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000180)=0x1, 0x4) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$cgroup_type(r1, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) fcntl$setsig(r3, 0xa, 0x17) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb03}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4eb9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffb52}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x100000000, @empty, 0x401}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa35}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6499}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xde7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000500)=@bpq0='bpq0\x00', 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', r1}, 0x10) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000600), 0x4) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000640)={r2, r5}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000680)) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000006c0)={0x2, 0xf6, 0x147, 0x10000, 0x3, 0xaaf}) membarrier(0x40, 0x0) syz_mount_image$reiserfs(&(0x7f0000000700)='reiserfs\x00', &(0x7f0000000740)='./file0\x00', 0x1f, 0x2, &(0x7f00000008c0)=[{&(0x7f0000000780)="5baa691a19400d3712a6223ce3bfbec0b24e228571a720638b9bef4ba522357c5482cf1d85d4b9922ec9851e046b1570b97a3e824eaf64c8f6c644ae03056c4a39b53ccc2691665c667a6f063d9a56de0fdbe98264aea18aa523b3c5a13a7e", 0x5f, 0x1f}, {&(0x7f0000000800)="8d206ac64f360b2395bc668d65b0cc8013d4b419c9bbb1856ea4e3813e8232d1f4953b1e6b9179da6173171608cc9a6dba97de29970dc78dee663b427e1b6e2abbffcdc0d2e5f52f8043ac9666c3d410c3ac43fd6dc3ef9d8bd03cc26778e04b51a9b5baa215f192ca3774be92c1ab0e514a60897c865b413320f9e6ff250c167c17b7a614740de063", 0x89}], 0x9000, &(0x7f0000000900)={[{@noquota='noquota'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/midi#\x00'}}]}) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000940)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000ac0)=0xe8) getresgid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)=0x0) lchown(&(0x7f0000000980)='./file0\x00', r7, r8) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000bc0)={r0, 0x7fff, 0xd39b, "fd968ea7413b7ebe4a081f46a1726b588d1605676a166fd646d0c09663ce2d5e81dc9dcca6ec37a52a6159a937d1314d32833e9a7e75170eaa6a8dc816fcfd359d43b731b151171783fc56ab84dcca973359e515f62a94c0c3e4fad32f23d2071625fb75febe0904c2ad80701701bbe347d183a099ba70deb004e0caf265d1939976c1c8764e413f02e00d9c3c8254e050e7595caee11a0b"}) write$P9_RFSYNC(r1, &(0x7f0000000c80)={0x7, 0x33, 0x1}, 0x7) lsetxattr$security_ima(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='security.ima\x00', &(0x7f0000000d40)=@sha1={0x1, "2d403849d48d861a898b717c7786d61162f75af5"}, 0x15, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000d80), 0x4) [ 189.316999][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 189.404407][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.412121][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.442910][ T7434] device bridge_slave_0 entered promiscuous mode [ 189.451007][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.458132][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.466055][ T7434] device bridge_slave_1 entered promiscuous mode [ 189.496938][ T7434] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 189.506812][ T7434] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.520201][ T7438] IPVS: ftp: loaded support on port[0] = 21 [ 189.540824][ T7434] team0: Port device team_slave_0 added 11:11:59 executing program 2: r0 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='^\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate(0xc, r0, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '@GPLsecurity}{ppp0', 0x20, 0x4}, 0x3c, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x9, &(0x7f0000000240)='.[cpuset\x00'}, 0x30) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x200, 0x6, 0xa6b, 0x400, 0x0, 0x3621, 0x800, 0x4, 0x5, 0x7, 0x80000001, 0xd2, 0x3, 0x2, 0x400, 0x5f4, 0x800, 0x9, 0x1f, 0x800, 0x0, 0xd, 0x3, 0x427, 0xd7e, 0x5, 0x3ff, 0x3, 0x1, 0x100000000, 0x7, 0x520, 0x4, 0x2, 0x7ff, 0x7, 0x0, 0x81, 0x7, @perf_bp={&(0x7f0000000180), 0x3}, 0x20012, 0x5, 0x3f, 0x2, 0xea0, 0x7, 0xffffffff}, r2, 0x1, 0xffffffffffffff9c, 0x1) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x200000, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x3a3801, 0x0) renameat(r3, &(0x7f0000000300)='./file0\x00', r4, &(0x7f0000000380)='./file0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x80000001}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000440)={r5, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000500)=0x84) sendmsg$inet_sctp(r3, &(0x7f0000000880)={&(0x7f0000000540)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000580)="5d9cda6d661ba1e0e5f1ae7108365adc6c7ea39344b6e4246a4abb9e3f8b0089b27be1a00845f377df1ccf553393455a1465e9af80f74da74d3f003634f2e23c7e734301c844b14b56fedb902a2cd95009fdf2d0519936d14deea37f88ffbac66b88194339933426e712a8d5aff8ea3bcd751c49d77c8eb5a3ce8f43c6c416b3d9cee26f82785ab5ecca74d9a37858f942e34a4c4efd1184abd4c5cacd246ed1b500be34a23159ed95f50d72c0de1d73a3d22d5f2f69de", 0xb7}, {&(0x7f0000000640)="1d7fc25d67ec72cac36a3534755fed7ce765cead9063d67e9ae3df5e4a5b00005dd508ceb0cd50394042a3e6eb893adf8f8f9b405afa6daeb80b06ae02db52d4bee39d63298676add92cd1602aa0463cdd1f32209965a184a797ba069e0ef0200fe1e5952145e6e21ee0e1d43cf245d16f8539e1760f52e0f659fae83c11d2deee7af6ca7a6700cb52f51d39", 0x8c}, {&(0x7f0000000700)="6dd7dba639cd1bfb48a25984751175195e09e50bd4a8a7fdb772f3184033aafb8ccf00b6ed207775063f280d18bd4d3cdddb580fcdbbfb1ccd49e9703bbb06f05eb072f154d5103292e3031080246d95b86dc3a674b2d8ccb210ee2066260b3b48355916d5efa25e826933fa08381cdd6c6b7f0688da0af8cd9e16bba85a7f1ccafdfcdd9b9c44efbb91e78cd649", 0x8e}], 0x3, &(0x7f0000000800)=[@init={0x18, 0x84, 0x0, {0x1, 0x6773, 0x3c}}, @sndrcv={0x30, 0x84, 0x1, {0x1ff, 0x4, 0x8000, 0x20, 0x9, 0x6, 0x9, 0x0, r6}}], 0x48, 0x54}, 0x4000841) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000900)={{0x1, 0x0, 0x7, 0x7, '\x00', 0xdf}, 0x4, 0x20, 0x6, r2, 0x6, 0x4, 'syz1\x00', &(0x7f00000008c0)=['!vboxnet1\'\x00', '\x00', 'new ', 'keyring\x00', 'new ', '\x00'], 0x1d, [], [0x2, 0x81, 0xbac, 0x3]}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x10d) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20448101}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x304, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000b80)={r5, 0x47}, &(0x7f0000000bc0)=0x8) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000c00)=0x9) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000c40)) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000c80)) write$smack_current(r4, &(0x7f0000000cc0)='\x00', 0x1) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000d00)={0x3, 0x0, 0x6}) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000d80)={0x0, 0x1, 0x8001, [], &(0x7f0000000d40)=0x3}) write$selinux_attr(r4, &(0x7f0000000dc0)='system_u:object_r:var_lock_t:s0\x00', 0x20) r8 = syz_open_dev$media(&(0x7f0000000e00)='/dev/media#\x00', 0x1f, 0x40400) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f0000000e40)={0x4002, 0x4ce, 0x1, 0x6}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0)='team\x00') getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000f00)={@local, 0x0}, &(0x7f0000000f40)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f80)={'caif0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001180)={'lapb0\x00', 0x0}) getsockname(r3, &(0x7f00000011c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001240)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000012c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000013c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002880)={'veth0_to_bond\x00', 0x0}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000028c0)={0x0, @loopback, @remote}, &(0x7f0000002900)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002940)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000002980)={@mcast2, 0x0}, &(0x7f00000029c0)=0x14) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000002b40)={0x0, @multicast1, @initdev}, &(0x7f0000002b80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000002bc0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000002cc0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000002d00)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000002e00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002e80)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002f80)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000003080)=0xe8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000030c0)={0x0, @broadcast, @multicast2}, &(0x7f0000003100)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000035c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x12800000}, 0xc, &(0x7f0000003580)={&(0x7f0000003140)={0x418, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x130, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x168, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xb9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x61}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}]}}]}, 0x418}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 189.548758][ T7434] team0: Port device team_slave_1 added 11:11:59 executing program 3: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x40) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x10001, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x8001, 0x7, 0x40, 0x1655, 0x0, 0x20, 0x40, 0x4, 0x8, 0x4, 0x8, 0x0, 0x8000, 0x3f, 0x10001, 0x1, 0x100000000, 0x6499, 0x2, 0x4, 0x1f, 0x400, 0x3ff, 0x101, 0x7, 0x2, 0x80000001, 0x3ff, 0xffff, 0x4, 0x3, 0x4, 0x1000, 0x400, 0x8, 0x1, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x420, 0x4103, 0x8, 0x1, 0x1, 0x1, 0x7}, r3, 0x2, r4, 0x2) write$P9_RVERSION(r4, &(0x7f0000000240)={0x13, 0x65, 0xffff, 0xffffffff, 0x6, '9P2000'}, 0x13) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80440, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "13138d92a9a455a2"}) r7 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x2, 0xc0) getsockopt(r4, 0xfffffffffffffffc, 0x8cd5, &(0x7f0000000340)=""/120, &(0x7f00000003c0)=0x78) getsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$KVM_S390_UCAS_MAP(r7, 0x4018ae50, &(0x7f0000000480)={0x9, 0x1, 0x7fff}) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f00000004c0)={0xffff, 0x0, 0x1017, 0xdb70, 0x800, 0x80000000, 0x40}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x412000, 0x0) ioctl$BLKSECTGET(r8, 0x1267, &(0x7f0000000540)) r9 = socket$inet_udp(0x2, 0x2, 0x0) fchmod(r9, 0x10) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000580)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, 0x4, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) prctl$PR_SET_FPEXC(0xc, 0x10003) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000600)={@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0xfffffffffffffffe, r1}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x401) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000640)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000680)) getsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000740)=0xd6b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000780)='/dev/nullb0\x00', 0xa00, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) [ 189.656124][ T7434] device hsr_slave_0 entered promiscuous mode [ 189.683174][ T7434] device hsr_slave_1 entered promiscuous mode [ 189.740842][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.748161][ T7434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.755861][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.762946][ T7434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.790034][ T7442] IPVS: ftp: loaded support on port[0] = 21 [ 189.805525][ T7440] IPVS: ftp: loaded support on port[0] = 21 [ 189.831254][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.904566][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.924950][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.943046][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.950625][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 189.977520][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.007521][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.016837][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state 11:11:59 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x608000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x1000}}, 0x18) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200)) sendto(r0, &(0x7f0000000240)="7a659e92dfd46810db58f1a3a28a4c4f4703fd08fd93f075adb8011b3cecac2be6fb996f5c79419cf7e7cfdba436831aee35ff52c1c2db8c62dcccd843d5d4e9175b7951b5077a4f95727d6d6c5ddd58f9c96c726655ab7f03eb29b5ffe6", 0x5e, 0x20004000, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000002c0)={0x7fffffff, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000300)={0xffffffff, 0x4, [0x0]}) ioctl$TCFLSH(r0, 0x540b, 0x8) r2 = request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='/dev/amidi#\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000400)={r2, 0x7b, 0x2}, &(0x7f0000000440)={'enc=', 'raw', ' hash=', {'sha1_mb\x00'}}, &(0x7f00000004c0)="5a453c01b60bfd4822ab0d85ac0022d78baa4de414b59a8a67180e55d65b6c802195110af5d9783f60b06fa1cb7744bfec7e101dd42a256d33f52fe88d413cf94225a0dd533f8f30dd1abf28512b1c849b2edbef22601ecd32d274e78f3c21a2a998085e7798e45424a7be91611ea21465ce3330afa0488c346cd03d62fdf5b1d3ba8a31e92ad58d15b65bb840d7a1ad", &(0x7f0000000580)="903f478115f0956c824b63e2d0671329ecb1a622c1ef0a81faaacec7a7a5d11ad85ae15324adbd2338f7f446cf06c46106502ae66c18721275a3ee1f896c6d8bad08cbbd24cb8837479810dccd7c8ef29d89db0d9f9bd703e9f09589f5a997045b7bce2ea49a04e17901ffe0a2335ae28da1461ccfbf532f52e80f3b5a4d317c8d3ca70b8b57a8885ce817e35689e48d54f54825e2643d2345da2499522f") getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000640), &(0x7f0000000680)=0x10) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000006c0)=""/133) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x9}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcaf0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000900)=@int=0x400, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000940)={0xffff, 0x1, 0xfffffffffffffffb, 'queue0\x00', 0x5}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1c8, r4, 0xf10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x93}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3c8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaa}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66f1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000d00)=0x100000000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$P9_RSYMLINK(r0, &(0x7f0000000d40)={0x14, 0x11, 0x1, {0xb0, 0x0, 0x5}}, 0x14) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000dc0)=&(0x7f0000000d80)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000e00)={0x0, 0xf1, "cb3d9c1b587e07c573781d16cfe6af7259e57669903107ed3858c494bd6bb440639196c03c2071c2599fdde7afc8e88691af9519f817586a49148da66af30ca48eaa322e0f72c3effa08c503226bee50c853d1e6fe6f15e267a0741855433687b83862afa826bb342b02bdc5ad77997cb1f3ad7bc3fa1370744d64cc107fc1a304e40a8195bb31b167f6bdd7f593879d858400bdbef390667c598e609cda05c5e636983c6375b9257b25e1fad8927b833f8841908f3a2643404fd83121b70a6d5c4ebbaf649f69b5b51be719ec6974359cfe85e69feba8acf0502a21c1c9e1dffcab9e64fd78842b682918eae9ae9fc687"}, &(0x7f0000000f00)=0xf9) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000f40)={r6, 0x7ff, 0x5, [0x1, 0x1000, 0x5, 0x100, 0x9]}, 0x12) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000f80)="fa3b8d251a9b976c1cee0ad92db3d7f5b0f314d3078b74a96c918ed712d4e82809800ff4594cb75cfcd099d257aa5c4979fa17b3260bc770effa7ed29fda6556aa6261") ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000001000)={0x1, 0x80}) bind$bt_sco(r5, &(0x7f0000001040)={0x1f, {0x7, 0x2, 0x4, 0xb4, 0x2c, 0x8001}}, 0x8) syz_open_dev$swradio(&(0x7f0000001080)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$midi(&(0x7f00000010c0)='/dev/midi#\x00', 0x40, 0x100) [ 190.023933][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.064689][ T7438] chnl_net:caif_netlink_parms(): no params data found [ 190.117632][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.126977][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.134082][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.172474][ T7442] chnl_net:caif_netlink_parms(): no params data found [ 190.190817][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.224112][ T7449] IPVS: ftp: loaded support on port[0] = 21 [ 190.229287][ T7434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.244367][ T7434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.266768][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.277562][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.288297][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.297838][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.307995][ T7440] chnl_net:caif_netlink_parms(): no params data found 11:12:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000040)=0x7fffffff, 0x4) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x1, 0xfffffffffffffff8, 0x7}) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x1, {0x57}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@ipv4={[], [], @remote}, @rand_addr="024ae17fd6fa7a4c686310bb02a3d6b4", @dev={0xfe, 0x80, [], 0x12}, 0x8, 0x4, 0x200, 0x500, 0x3e, 0x8, r1}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000300)={'vxcan1\x00', 0x4}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r3 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x401, 0x100) r4 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000003c0)=0x100) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000400)=0x40, 0x4) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000440), 0x4) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000480)=0x8, 0x4) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x800, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x9) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000540)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @local, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x2}}}}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c7a566}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6fe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20004005}, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000800)={0x6, 0x118, 0xfa00, {{0x1, 0x0, "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", 0xf9, 0x8, 0x8e000000, 0xc3b, 0x3, 0xdc, 0x1, 0x1}, r7}}, 0x120) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a00)={0xb0, 0x0, 0x1, [{{0x5, 0x3, 0x9, 0x100, 0xffff, 0x3, {0x3, 0x0, 0xa7, 0x7, 0x200, 0x6, 0x1, 0x1, 0xfffffffffffffffb, 0x4, 0x478, r8, r9, 0x1, 0xfffffffffffffe00}}, {0x5, 0x800, 0x1, 0x7, ')'}}]}, 0xb0) [ 190.336189][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.368969][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.379329][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.388896][ T7438] device bridge_slave_0 entered promiscuous mode [ 190.407531][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.429150][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.436795][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.448164][ T7438] device bridge_slave_1 entered promiscuous mode [ 190.490541][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.497976][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.506252][ T7440] device bridge_slave_0 entered promiscuous mode [ 190.517636][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.525001][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.533176][ T7440] device bridge_slave_1 entered promiscuous mode [ 190.541441][ T7438] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.555551][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.563553][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.571644][ T7442] device bridge_slave_0 entered promiscuous mode [ 190.580572][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.588348][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.596058][ T7442] device bridge_slave_1 entered promiscuous mode [ 190.615617][ T7438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.642224][ T7442] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.661033][ T7438] team0: Port device team_slave_0 added [ 190.676730][ T7452] IPVS: ftp: loaded support on port[0] = 21 [ 190.688634][ T7440] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.699102][ T7442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.715103][ T7438] team0: Port device team_slave_1 added [ 190.721496][ T7442] team0: Port device team_slave_0 added [ 190.731154][ T7440] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.741234][ T7442] team0: Port device team_slave_1 added 11:12:00 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000100)={0x0, 0x0, 0x69c4}) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x8086}, 0x60) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x8, {{0xa, 0x4e22, 0x1c01, @rand_addr="8f570be90892fc5fd8ee0e24649e9e53"}}}, 0x88) [ 190.770483][ T7440] team0: Port device team_slave_0 added [ 190.834407][ T7442] device hsr_slave_0 entered promiscuous mode [ 190.883137][ T7442] device hsr_slave_1 entered promiscuous mode [ 190.957751][ T7440] team0: Port device team_slave_1 added [ 191.014611][ T7438] device hsr_slave_0 entered promiscuous mode [ 191.053018][ T7438] device hsr_slave_1 entered promiscuous mode 11:12:00 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000006b40), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 11:12:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 191.214848][ T7440] device hsr_slave_0 entered promiscuous mode [ 191.244508][ T7440] device hsr_slave_1 entered promiscuous mode [ 191.252846][ C0] hrtimer: interrupt took 27708 ns [ 191.309751][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 191.335934][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.343021][ T7442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.350316][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.357499][ T7442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.405236][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.415115][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.435958][ T7452] chnl_net:caif_netlink_parms(): no params data found [ 191.460455][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.468483][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.477377][ T7449] device bridge_slave_0 entered promiscuous mode [ 191.498723][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.507407][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.516832][ T7449] device bridge_slave_1 entered promiscuous mode [ 191.532822][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.582738][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.592273][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.600821][ T7452] device bridge_slave_0 entered promiscuous mode [ 191.623396][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.630885][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.653421][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.660715][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.669553][ T7452] device bridge_slave_1 entered promiscuous mode [ 191.678390][ T7449] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.694469][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.702150][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.723612][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.738963][ T7449] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.754185][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.763775][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.772081][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.779257][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.797370][ T7442] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.810176][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 11:12:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 191.825362][ T7449] team0: Port device team_slave_0 added [ 191.841318][ T7452] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.857368][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.876062][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.893633][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.901982][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.909060][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.916980][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.931131][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.939215][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.946878][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.954877][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.963732][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.976829][ T7449] team0: Port device team_slave_1 added [ 191.985619][ T7452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.995262][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.004178][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.012781][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.019884][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state 11:12:01 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) [ 192.038690][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.047368][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.058097][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.065186][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state 11:12:01 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x101, 0x101001) getpeername$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002480)={0x9, 0x13, 0x1f, 0x1, 0x0, 0x1}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x3, 0x77fffb, 0x8, 0x820000, 0x0, 0x7f, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa0008000]}, 0xfffffffffffffde5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000001c0)="980a5d5ec15995e66ecf771983b3409d115ef72d1ee584"}, 0xfffffffffffffedf) [ 192.081480][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.090421][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.098926][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.108211][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.116602][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.123674][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state 11:12:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setpriority(0x0, 0x0, 0xfffffffffffff197) [ 192.138776][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.147443][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.198871][ T7438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.210671][ T7438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.240073][ T7452] team0: Port device team_slave_0 added [ 192.248280][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.259803][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.267725][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.276515][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.285076][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.292083][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.299745][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.309108][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.317278][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.325352][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.333515][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.341573][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.350043][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.358296][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.366585][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.374836][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.382253][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.425338][ T7449] device hsr_slave_0 entered promiscuous mode [ 192.483215][ T7449] device hsr_slave_1 entered promiscuous mode [ 192.528852][ T7452] team0: Port device team_slave_1 added [ 192.541187][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.560664][ T7440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.571655][ T7440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.591662][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.603627][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.611865][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.625368][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.634177][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.642349][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.650458][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.658604][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.666751][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.674810][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.683332][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.691583][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.699389][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.745929][ T7452] device hsr_slave_0 entered promiscuous mode [ 192.793347][ T7452] device hsr_slave_1 entered promiscuous mode [ 192.870380][ T7442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.880898][ T7442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.902086][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.928544][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.939253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.958945][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.967262][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.981282][ T7442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.989400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.085507][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.126181][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.139536][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.148584][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 11:12:02 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000002c0)=ANY=[]) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x15a) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0xc84, &(0x7f00000006c0)="0af51f676270844688a070670f6cf84adb921158c125467d84439c9e35969f510d97d19dafa158c9131ebdc5f904f4afdd946776f5f2d25f0f53bb591551994479a7f775f720071d85c71a30f0cc24918b24bd791755c48b05beb25c109af93210000000004da78de3c1321b68c31c93873f6be8ec6543260f0a83bdca3f84e584864c04e96d1f2cab5d2e8010a3553571d8df5d556ea4338f5fd7c836199d9ce9327c998d") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000031003b52801a00000000000004000000faff000005161bb89dc8257c3e5bddcdac2dbad8c2c29c6b64acb74ce4c11a957c683fb2dbbd5cbdb554b476b9f336cd1f962fcc942393eea9b674754eb146a9a5eccd7b216ead86abf692d76308ce9a"], 0x1}}, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x200000) connect$caif(r4, &(0x7f00000001c0)=@util={0x25, "89280cf64b73891306223e5259c3f01e"}, 0x18) ioctl$int_in(r0, 0x40004000af01, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000240)={0x0, 0x3}) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r6}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 11:12:02 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0xfffffffffffffda7) 11:12:02 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x40, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000002c0), 0xffffff18) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000440)={0x0, 0x0, 0x0, [], 0x0}) r3 = syz_open_pts(r1, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000840)) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0xaf65e45, @empty}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000500)={0x0, 0x100}, 0x8) ptrace$getregs(0xffffffffffffffff, r0, 0x0, 0x0) close(r3) io_setup(0x100, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x1adb, r2, &(0x7f00000000c0)="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", 0xfa, 0x7f, 0x0, 0x2, r2}]) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000000000080d, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240), 0x8) dup3(r3, r1, 0x0) [ 193.172124][ T7452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.191183][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.208247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.237853][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.244967][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.263602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.271521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.285249][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.297188][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.304553][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.316869][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.326427][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.338034][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.353761][ T7452] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.360536][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.370255][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.386867][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.399076][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.408800][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.426657][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.472310][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.489636][ T7449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.501748][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.519271][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.530758][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.540842][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.585498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.598482][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.606975][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.614061][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.621613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.630859][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.635424][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 193.639219][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.645226][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 193.651736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.665019][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.674111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.686645][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.718090][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.730651][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.742290][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.757754][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.768362][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.776058][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 193.779748][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.782685][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 193.796181][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.804797][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.838319][ T7452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.852636][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.877010][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.893930][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.903274][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 193.909502][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 193.938268][ T7452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.972927][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 193.978687][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:12:03 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000080)=""/136) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x400}) [ 194.023864][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 194.029636][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 194.086109][ T7590] Unknown ioctl 4726 [ 194.112691][ T7590] Unknown ioctl 4726 11:12:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x800000000000003, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="f50300130e61ffff0216080002000000"], &(0x7f0000000000)='GPL\x00', 0x20000001, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x2000000000000000}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:apt_exec_t:s0\x00', 0x20) 11:12:03 executing program 2: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) fcntl$setlease(r0, 0x400, 0x0) 11:12:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6500000000000000) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x1) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 11:12:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r1) ioctl$UI_SET_SWBIT(r3, 0x80081270, 0x709000) 11:12:03 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x2, 0x200040) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x6ce, 0x90, 0x1, 0x1, 0x8001, 0xcd61, 0x5, 0x8, 0x6, 0x20, 0x401, 0x6c, 0x3, 0x6, 0x8, 0x10}}) r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000080)=0x78) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="240000005e0007031dfffd946f610500070000001f00000000000000f1ffffff0400ff7e", 0x24}], 0x1}, 0xfffffffffffffffc) 11:12:03 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x90000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000280)=""/4096, &(0x7f0000000040)=0x1000) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="6959e76ce9204802afba91bd80", 0xd}, {&(0x7f0000000140)="be966410d59a4e501dbb9ee905e4799db6f87d83853e886cf8e3421cbc5b86a2447e5c0fd22943de7623121e285f9613cf4b17f5f9172818da1c1ed5678fc9fd639965ade6598bafda8c12bd1b3f20cd0d4d1c7385e0ad8f3c1957d2df7b3b8239814c58ec1f0d453eb8200e98a4100cfbca7f1cbe4157e44b0953b2088b6ac5505f8bc4b60a8b0ba26ef7a648bf7247e1d3455c213e3fdd712e14d4ec0767f8ef34043f517d58145a0782942d45711b5d39f247bb0683973ac48e", 0xbb}, {&(0x7f0000001280)="de74ab6223d87c1817e2bbec6a3e7527c7378f4c97bcbaa37fe8d816031aa227a63b33066498b7c18c996eba30a060a9f3c78a964be84eff680a4aa6ec2151564210819ef5e6f1cfc033ab5caae1e7a11d909d9d9310af3997c6d44924c802f0cd283d7c7fedb864f22055862a4f3878e59e9e1eee40f4aa5a1ecb342b880769937a4544c402c69db73f589245e1e2e2c7dd9121d04cfa208626fb0dd00df8a8653b68a5b939628fb9da42140f08c5f34e420dad2ab8ea7af71f1927e02a8fa8996a58b2267ced5814ae8fa853ccac1f3e91d118cf7bbf34dd2ae608c5a209a9187e01c3c265cd900a95daa32fa860a6", 0xf0}], 0x3, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x0, "355debb41db121d0c963366adb95465a4f4b5bae1a3509cbf7204dd61c64c081"}) 11:12:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000040)=""/152, &(0x7f0000000240)=""/77, &(0x7f00000002c0)=""/234, 0x110000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000100)={0x9b}) [ 194.200826][ T7603] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 11:12:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)={0x20, 0x2c, 0x5, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x239}]}, 0x20}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x8000) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x0) 11:12:04 executing program 5: r0 = socket(0x10, 0x20000000000003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r0, 0x0, 0x4000800) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x4) 11:12:04 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000400)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) r2 = dup(r0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x0, 0xfffffffffffffffe, 0x40, &(0x7f0000ff9000/0x4000)=nil, 0x81}) setpriority(0x2, r1, 0x0) mlockall(0x400000000007) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @empty}, &(0x7f0000000300)=0xc) getresgid(0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) mlockall(0x4) sendmsg$nl_crypto(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x82a10884}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000130000082dbd7000fcdbdf256d6f727573313238302d617678320000000000000000da3400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3b4a405000000000000000000000000000000000000000000000000000000993086ef000000000000000000000000240000000400000000000000000000080001006a0000000800010004000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40000) 11:12:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200442, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2) pread64(r1, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000080)={0x7, 0xfffffffffffffffa, 0x6, 0x239, 0x100, 0xae5, 0x4}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:12:04 executing program 0: setresuid(0x0, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0xfefffffffffffffe, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000002c0)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2f, 0x500, 0x70bd25, 0x25dfdbfb, {0x1a}, [@typed={0x8, 0xc, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) 11:12:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0x4008ae48, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000002c0)=""/4096, 0x8000}, 0x18) 11:12:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x0, 0x0, 0x4, 0x110000], 0x5, 0x80, 0xe662}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1000000005) ioctl$TCFLSH(r0, 0x8910, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x420000, 0x0) 11:12:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x31e) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup2(r1, r1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r3}) write$UHID_INPUT(r2, &(0x7f00000006c0)={0x8, "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", 0x1000}, 0x1006) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x8001, 0xffffffff}, @mss={0x2, 0x9}, @window={0x3, 0x1, 0xfffffffffffffeff}], 0x3) getdents(r1, &(0x7f0000000140)=""/115, 0x73) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9e5, 0x420001) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000280)="953cdb1446f7a01ac55ec8f589f1b611f99d9a88e4400ceed03062746dd2ffb5a970a18dc20229fa4e32a81b4bd33143120676531327dd94d6bf30e1100fbfed90817c90287fce22f4795018c22f3a528d95a115750cb302d2b2fc6ccd3614bc7da3387eec") write$FUSE_LSEEK(r4, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x100000001}}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r0, r1}) write$P9_RAUTH(r3, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x20, 0x0, 0x6}}, 0x14) close(r0) [ 194.545692][ T7649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.572531][ T7650] mkiss: ax0: crc mode is auto. 11:12:04 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x14800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x1, 0xd1, 0x3, 0x20}) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000180)="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", 0x167) [ 194.632197][ T7650] mkiss: ax1: crc mode is auto. 11:12:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r5, r6) r7 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x284001) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000180)=0x5000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x243}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'bond_slave_0\x00', {0x2, 0x4e20, @empty}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x0, 0x5b}}) [ 194.840464][ T7669] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. 11:12:04 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) socket$caif_seqpacket(0x25, 0x5, 0xa) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x81, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x408400, 0x100) faccessat(r2, &(0x7f0000000140)='./file0\x00', 0xff504d45852dd9af, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="28c3ae25a88a254f3db29895cd68bbb5acac7729f2bae2948220487f", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 11:12:04 executing program 3: r0 = socket$inet6(0xa, 0x40000002, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x7a) syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [0x2]}, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) 11:12:04 executing program 0: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast2}}, [0x6, 0x200, 0x8000, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x0, 0x100000001, 0x8, 0x7193d139, 0x3, 0x1, 0x8]}, 0x0) r1 = getpid() lstat(0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r2, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r2, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) 11:12:04 executing program 4: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setuid(r0) r1 = semget$private(0x0, 0x2, 0x8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000440), 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000005c0)={0x0, 0x2, 0x0, 0x35}) r2 = creat(&(0x7f0000000a80)='./bus\x00', 0x10) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x10, 0x5, 0x1000f4) add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$invalidate(0x15, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="576f726b6469693dd59181bfeb257bcfd8244f51aa9f079dd1f1270d3dfa2ad2d221752a6b4334aba12692512e2f627553"]) sendfile(r3, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200)=0x14, 0x8) r4 = open(&(0x7f00000008c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @broadcast}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team_slave_0\x00', r5}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)={'security\x00', 0x3f, "a2beaf0db5a4970a709a382f7ed6c8b4442f9136e17e10c3e68c4fc7f33d9e8cec92ab2c3acffe8e64f51ddbd74cd7984d0b3416844d21ec97b081081ba647"}, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000740)={0x0, 0x7ff}) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000000)=0x9) [ 195.074893][ T7698] 9pnet: Insufficient options for proto=fd [ 195.096724][ T7700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:12:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1, &(0x7f000000b000), 0x4, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10801, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000001c0)={@rand_addr="64bff87b57cb90d70b06ee2ddf7917a9", r2}, 0x14) 11:12:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x42000) write$P9_RMKNOD(r0, &(0x7f0000000240)={0x14, 0x13, 0x1, {0x1, 0x3, 0x1}}, 0x14) bind$x25(r0, &(0x7f0000000140)={0x9, @remote={[], 0x3}}, 0xffffffffffffff34) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x2002}, {r0, 0xc200}], 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={0x70b}, 0x8) unshare(0x400) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r3 = eventfd(0x3) getpeername$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x10) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x2, r3}) [ 195.259181][ T7708] overlayfs: unrecognized mount option "Workdii=Ց%{$OQ' =*!u*kC4&Q./buS" or missing value 11:12:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3f00}}, 0x10) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x5, 0x20040) [ 195.380886][ T26] audit: type=1804 audit(1549710725.096:31): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir356034330/syzkaller.tOxDIV/4/bus" dev="sda1" ino=16546 res=1 11:12:05 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x0) socket$inet(0x2, 0x3, 0xfffffffffffffffe) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 11:12:05 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f00000004c0)}, 0x0) recvmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@generic, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, &(0x7f00000014c0)) fstat(r2, &(0x7f0000000300)) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee01, 0xee00, 0x0]) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000600), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(r0, &(0x7f0000000400)) getegid() syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) shmget$private(0x0, 0x4000, 0x54000080, &(0x7f0000ffa000/0x4000)=nil) gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r3 = creat(0x0, 0x60) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000d40)={{{@in=@remote, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000e40)=0xe8) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x82) sendmsg$can_bcm(r3, &(0x7f0000000f80)={&(0x7f0000000e80), 0x10, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) 11:12:05 executing program 2: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) 11:12:05 executing program 5: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/66, 0x42) rmdir(&(0x7f00000002c0)='./file0/file0\x00') [ 195.684089][ T7730] overlayfs: './file0' not a directory 11:12:05 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='cgroup\x00', 0x0, &(0x7f0000000440)='n%dos\x00') 11:12:05 executing program 1: socket$alg(0x26, 0x5, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) geteuid() r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x44000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) getitimer(0x2, &(0x7f00000002c0)) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'}) getcwd(&(0x7f0000000300)=""/221, 0xdd) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280)) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) [ 195.879199][ T26] audit: type=1804 audit(1549710725.596:32): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir356034330/syzkaller.tOxDIV/4/bus" dev="sda1" ino=16546 res=1 [ 195.899629][ T7708] overlayfs: unrecognized mount option "Workdii=Ց%{$OQ' =*!u*kC4&Q./buS" or missing value [ 195.924739][ T7757] e cgroup1: Unknown subsys name 'n%dos' [ 195.950403][ T7759] overlayfs: filesystem on './file0' not supported as upperdir 11:12:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/70, 0x46}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000600)=""/70, 0x46}], 0x7, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) accept4$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x80000) write(r2, &(0x7f0000000000)="2400000018002551075c0165ff0ffc020200000300100f0307e1000c08000b008000a000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801d5cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1acb78ce510c7a70723741b34981d1b182deb7904", 0xe0) [ 195.985929][ T26] audit: type=1804 audit(1549710725.596:33): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir356034330/syzkaller.tOxDIV/4/bus" dev="sda1" ino=16546 res=1 [ 196.033661][ T26] audit: type=1804 audit(1549710725.626:34): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir356034330/syzkaller.tOxDIV/4/bus" dev="sda1" ino=16546 res=1 [ 198.982953][ C0] net_ratelimit: 30 callbacks suppressed [ 198.982959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 198.994384][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 199.000275][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 199.006331][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 199.302914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 199.308826][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 199.622937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 199.628724][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 200.262887][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 200.268634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 204.422901][ C1] net_ratelimit: 22 callbacks suppressed [ 204.422908][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 204.434336][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 204.664148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 204.669957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 205.222929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 205.228744][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 205.234570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 205.240323][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 205.542928][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 205.548828][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 209.702903][ C0] net_ratelimit: 22 callbacks suppressed [ 209.702910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 209.714327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 210.022942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 210.028757][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 210.662880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 210.668638][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 210.902954][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 210.908735][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 211.462900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 211.468651][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 214.822908][ C1] net_ratelimit: 18 callbacks suppressed [ 214.822915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 214.834406][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 215.062913][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 215.068689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 215.622922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 215.628821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 215.634615][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 215.640459][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 215.942943][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 215.948869][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 220.102923][ C0] net_ratelimit: 22 callbacks suppressed [ 220.102930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 220.114516][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 220.422961][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 220.428856][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 221.062885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 221.068750][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 221.304041][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 221.309909][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 221.862956][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 221.868859][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 225.222884][ C1] net_ratelimit: 18 callbacks suppressed [ 225.222890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 225.234320][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 225.462961][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 225.468759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 226.022943][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 226.028758][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 226.034606][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 226.040371][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 226.342957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 226.348764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 230.502915][ C0] net_ratelimit: 22 callbacks suppressed [ 230.502924][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 230.514363][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 230.822967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 230.828783][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 231.462885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 231.468656][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 231.702976][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 231.708770][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 232.262953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 232.268752][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 235.622906][ C1] net_ratelimit: 18 callbacks suppressed [ 235.622913][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 235.634422][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 235.862932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 235.868802][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 236.423005][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.428858][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 236.434647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.440369][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 236.742937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.748849][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 240.902909][ C0] net_ratelimit: 22 callbacks suppressed [ 240.902916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 240.914563][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 241.222934][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 241.228844][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 241.862909][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 241.868769][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 242.102949][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 242.108751][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 242.662939][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 242.668865][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 246.022878][ C1] net_ratelimit: 18 callbacks suppressed [ 246.022884][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 246.034397][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 246.263173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 246.269032][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 246.822924][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 246.828796][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 246.834603][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 246.840339][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 247.142925][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 247.148893][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 251.302928][ C0] net_ratelimit: 22 callbacks suppressed [ 251.302935][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 251.314366][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 251.622946][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 251.628744][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 252.262906][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 252.268857][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 252.502944][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 252.508851][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 253.062933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 253.068714][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 256.422901][ C1] net_ratelimit: 18 callbacks suppressed [ 256.422915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 256.434456][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 256.662937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 256.668855][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 257.222911][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 257.228764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 257.234565][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 257.240286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 257.552909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 257.558660][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 261.702930][ C0] net_ratelimit: 22 callbacks suppressed [ 261.708701][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 261.714468][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 262.022946][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 262.028822][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 262.662936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 262.668787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 262.903095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 262.908958][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 263.462933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 263.468752][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 266.822904][ C1] net_ratelimit: 18 callbacks suppressed [ 266.822911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 266.834313][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 267.062916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 267.068683][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 267.622960][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 267.628782][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 267.634584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 267.640357][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 267.942948][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 267.948857][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 272.102926][ C0] net_ratelimit: 22 callbacks suppressed [ 272.108590][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 272.114339][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 272.422976][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 272.428865][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 273.062907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 273.068761][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 273.302939][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 273.308810][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 273.862940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 273.868798][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 277.222886][ C1] net_ratelimit: 18 callbacks suppressed [ 277.222892][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 277.234314][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 277.462947][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 277.468823][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 278.022955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 278.028736][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 278.034654][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 278.040392][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 278.342930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 278.348822][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 282.502950][ C0] net_ratelimit: 22 callbacks suppressed [ 282.508730][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 282.514493][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 282.822959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 282.828867][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 283.462884][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 283.468666][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 283.702920][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 283.708795][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 284.262929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 284.268878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 287.622903][ C1] net_ratelimit: 18 callbacks suppressed [ 287.622910][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 287.634424][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 287.862921][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 287.868790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 288.422955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 288.428854][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 288.434682][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 288.440658][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 288.742922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 288.748835][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 292.902947][ C0] net_ratelimit: 22 callbacks suppressed [ 292.902955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 292.914489][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 293.222964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 293.228782][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 293.862899][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 293.868746][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 294.102934][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 294.108784][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 294.662952][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 294.668787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 298.022919][ C1] net_ratelimit: 18 callbacks suppressed [ 298.022927][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 298.034377][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 298.262964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 298.268837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 298.822932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 298.828729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 298.834512][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 298.840256][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 299.142925][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 299.148813][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 303.302944][ C0] net_ratelimit: 22 callbacks suppressed [ 303.302952][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 303.314402][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 303.622960][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 303.628761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 304.262886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 304.268649][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 304.502958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 304.508752][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 305.062942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 305.068744][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 308.422924][ C1] net_ratelimit: 18 callbacks suppressed [ 308.422932][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 308.434371][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 308.662957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 308.668784][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 309.222945][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 309.228761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 309.234595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 309.240344][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 309.542919][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 309.548738][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 313.702910][ C0] net_ratelimit: 22 callbacks suppressed [ 313.702917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 313.714415][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 314.022968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 314.028901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 314.662881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 314.668722][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 314.902911][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 314.908756][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 315.462910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 315.468670][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 318.822907][ C1] net_ratelimit: 18 callbacks suppressed [ 318.822915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 318.834361][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 319.062923][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.068886][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 319.622952][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.628850][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 319.634737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.640484][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 319.942953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.948954][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 324.102933][ C0] net_ratelimit: 22 callbacks suppressed [ 324.102940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 324.114352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 324.422986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 324.428864][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 325.062905][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 325.068711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 325.302953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 325.308771][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 325.862936][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 325.868730][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 329.222889][ C1] net_ratelimit: 18 callbacks suppressed [ 329.222895][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 329.234522][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 329.462930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 329.468695][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 330.022924][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 330.028729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 330.034510][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 330.040332][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 330.342932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 330.348731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 334.502930][ C0] net_ratelimit: 22 callbacks suppressed [ 334.502938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 334.514557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 334.822987][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 334.828869][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 335.462916][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 335.468698][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 335.702919][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 335.708691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 336.262932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 336.268753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 339.622926][ C1] net_ratelimit: 18 callbacks suppressed [ 339.622934][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 339.634633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 339.862953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 339.868830][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 340.422953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 340.428745][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 340.434561][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 340.440327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 340.742927][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 340.748727][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 344.902965][ C0] net_ratelimit: 22 callbacks suppressed [ 344.902972][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 344.914417][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 345.222950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 345.228886][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 345.862888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 345.868645][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 346.102952][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 346.108764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 346.662937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 346.668742][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 350.022927][ C1] net_ratelimit: 18 callbacks suppressed [ 350.022934][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 350.034405][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 350.262965][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.268768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 350.822927][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.828825][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 350.834675][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.840423][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 351.142935][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 351.148729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.302951][ C0] net_ratelimit: 22 callbacks suppressed [ 355.302958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.314462][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.622985][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.628818][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 356.262919][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 356.268719][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 356.343061][ T1041] INFO: task syz-executor.0:7737 blocked for more than 140 seconds. [ 356.351176][ T1041] Not tainted 5.0.0-rc5-next-20190208 #31 [ 356.362680][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.371575][ T1041] syz-executor.0 D29392 7737 7434 0x00000004 [ 356.383304][ T1041] Call Trace: [ 356.386699][ T1041] __schedule+0x817/0x1cc0 [ 356.391118][ T1041] ? __mutex_lock+0x721/0x1310 [ 356.400348][ T1041] ? __sched_text_start+0x8/0x8 [ 356.406300][ T1041] schedule+0x92/0x180 [ 356.410379][ T1041] schedule_preempt_disabled+0x13/0x20 [ 356.420528][ T1041] __mutex_lock+0x726/0x1310 [ 356.428833][ T1041] ? check_preemption_disabled+0x48/0x290 [ 356.439125][ T1041] ? vhost_init_device_iotlb+0x124/0x280 [ 356.445907][ T1041] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 356.452092][ T1041] ? mutex_trylock+0x1e0/0x1e0 [ 356.461289][ T1041] ? rcu_read_lock_sched_held+0x110/0x130 [ 356.468128][ T1041] ? kasan_unpoison_shadow+0x35/0x50 [ 356.477827][ T1041] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 356.484720][ T1041] ? kasan_kmalloc+0x9/0x10 [ 356.489228][ T1041] ? __kmalloc_node+0x4e/0x70 [ 356.498329][ T1041] mutex_lock_nested+0x16/0x20 [ 356.503210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 356.503258][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 356.521160][ T1041] ? mutex_lock_nested+0x16/0x20 [ 356.526430][ T1041] vhost_init_device_iotlb+0x124/0x280 [ 356.531916][ T1041] vhost_net_ioctl+0x10be/0x1900 [ 356.542276][ T1041] ? vhost_zerocopy_callback+0x300/0x300 [ 356.548203][ T1041] ? __might_fault+0x12b/0x1e0 [ 356.559071][ T1041] ? __fget+0x340/0x540 [ 356.563492][ T1041] ? find_held_lock+0x35/0x130 [ 356.568264][ T1041] ? __fget+0x340/0x540 [ 356.572429][ T1041] ? vhost_zerocopy_callback+0x300/0x300 [ 356.585054][ T1041] do_vfs_ioctl+0xd6e/0x1390 [ 356.589661][ T1041] ? ioctl_preallocate+0x210/0x210 [ 356.599189][ T1041] ? __fget+0x367/0x540 [ 356.604446][ T1041] ? ksys_dup3+0x3e0/0x3e0 [ 356.608902][ T1041] ? nsecs_to_jiffies+0x30/0x30 [ 356.618239][ T1041] ? security_file_ioctl+0x93/0xc0 [ 356.624433][ T1041] ksys_ioctl+0xab/0xd0 [ 356.628599][ T1041] __x64_sys_ioctl+0x73/0xb0 [ 356.637762][ T1041] do_syscall_64+0x103/0x610 [ 356.642364][ T1041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.649344][ T1041] RIP: 0033:0x457e39 [ 356.657707][ T1041] Code: Bad RIP value. [ 356.661780][ T1041] RSP: 002b:00007f6a17a62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.677245][ T1041] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 356.687099][ T1041] RDX: 0000000020000080 RSI: 000000004008af00 RDI: 0000000000000005 [ 356.699453][ T1041] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 356.708498][ T1041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a17a636d4 [ 356.720839][ T1041] R13: 00000000004c26bc R14: 00000000004d5068 R15: 00000000ffffffff [ 356.729995][ T1041] [ 356.729995][ T1041] Showing all locks held in the system: [ 356.742197][ T1041] 1 lock held by khungtaskd/1041: [ 356.751763][ T1041] #0: 00000000d57f4ac2 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 356.766502][ T1041] 1 lock held by rsyslogd/7284: [ 356.771352][ T1041] #0: 00000000c9804570 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 356.781058][ T1041] 2 locks held by getty/7399: [ 356.790153][ T1041] #0: 00000000e60ec4bd (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 356.800187][ T1041] #1: 00000000fa504051 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 356.815879][ T1041] 2 locks held by getty/7400: [ 356.820577][ T1041] #0: 000000009ddc0c60 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 356.835667][ T1041] #1: 00000000bd96cdcb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 356.847211][ T1041] 2 locks held by getty/7401: [ 356.851882][ T1041] #0: 00000000bfebebba (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 356.866307][ T1041] #1: 000000009096c1b0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 356.877850][ T1041] 2 locks held by getty/7402: [ 356.882521][ T1041] #0: 0000000019df15e3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 356.896757][ T1041] #1: 00000000d4178077 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 356.907459][ T1041] 2 locks held by getty/7403: [ 356.912130][ T1041] #0: 0000000062fb1360 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 356.926351][ T1041] #1: 000000007591474f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 356.937045][ T1041] 2 locks held by getty/7404: [ 356.941716][ T1041] #0: 00000000dbe9c525 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 356.956809][ T1041] #1: 000000005465c622 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 356.968280][ T1041] 2 locks held by getty/7405: [ 356.976590][ T1041] #0: 000000006c633475 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 356.987489][ T1041] #1: 0000000067438cbd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 357.000987][ T1041] 2 locks held by syz-executor.0/7737: [ 357.008357][ T1041] #0: 0000000078affb5a (&dev->mutex#4){+.+.}, at: vhost_net_ioctl+0x1cc/0x1900 [ 357.020974][ T1041] #1: 0000000085b2637b (&vq->mutex){+.+.}, at: vhost_init_device_iotlb+0x124/0x280 [ 357.032274][ T1041] 1 lock held by vhost-7702/7715: [ 357.040865][ T1041] [ 357.045116][ T1041] ============================================= [ 357.045116][ T1041] [ 357.057094][ T1041] NMI backtrace for cpu 0 [ 357.061433][ T1041] CPU: 0 PID: 1041 Comm: khungtaskd Not tainted 5.0.0-rc5-next-20190208 #31 [ 357.070100][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.080159][ T1041] Call Trace: [ 357.083453][ T1041] dump_stack+0x172/0x1f0 [ 357.087790][ T1041] nmi_cpu_backtrace.cold+0x63/0xa4 [ 357.093064][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 357.098698][ T1041] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 357.104682][ T1041] arch_trigger_cpumask_backtrace+0x14/0x20 [ 357.110623][ T1041] watchdog+0x9df/0xee0 [ 357.114810][ T1041] kthread+0x357/0x430 [ 357.118901][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 357.124450][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 357.130695][ T1041] ret_from_fork+0x3a/0x50 [ 357.135227][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 357.140987][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 357.146953][ T1041] Sending NMI from CPU 0 to CPUs 1: [ 357.152600][ C1] NMI backtrace for cpu 1 [ 357.152605][ C1] CPU: 1 PID: 7715 Comm: vhost-7702 Not tainted 5.0.0-rc5-next-20190208 #31 [ 357.152611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.152615][ C1] RIP: 0010:iotlb_access_ok+0x296/0x540 [ 357.152625][ C1] Code: 50 4c 89 e6 4c 89 f7 e8 98 f0 30 fc 4d 39 e6 0f 83 b1 01 00 00 e8 6a ef 30 fc 48 8d 7b 28 48 89 f8 48 c1 e8 03 42 80 3c 38 00 <0f> 85 1f 02 00 00 4c 8b 6b 28 4c 8b 75 b8 4c 89 ee 4c 89 f7 e8 61 [ 357.152629][ C1] RSP: 0018:ffff8880139cfaa8 EFLAGS: 00000246 [ 357.152636][ C1] RAX: 1ffff1100b0e1a95 RBX: ffff88805870d480 RCX: ffffffff853f5f48 [ 357.152641][ C1] RDX: 0000000000000000 RSI: ffffffff853f5f56 RDI: ffff88805870d4a8 [ 357.152646][ C1] RBP: ffff8880139cfb30 R08: ffff8880139c4240 R09: ffffed100272027f [ 357.152650][ C1] R10: ffff8880139cfb68 R11: ffff8880139013f7 R12: 0000000000000000 [ 357.152655][ C1] R13: 0000000000000000 R14: ffffffffffffffff R15: dffffc0000000000 [ 357.152660][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 357.152664][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.152669][ C1] CR2: ffffffffff600400 CR3: 0000000066819000 CR4: 00000000001406e0 [ 357.152674][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.152678][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.152681][ C1] Call Trace: [ 357.152684][ C1] vq_iotlb_prefetch+0x114/0x230 [ 357.152687][ C1] handle_rx+0x149/0x1900 [ 357.152690][ C1] ? finish_task_switch+0x146/0x790 [ 357.152694][ C1] ? find_held_lock+0x35/0x130 [ 357.152697][ C1] ? finish_task_switch+0x146/0x790 [ 357.152700][ C1] ? _raw_spin_unlock_irq+0x28/0x90 [ 357.152704][ C1] ? finish_task_switch+0x146/0x790 [ 357.152707][ C1] ? _raw_spin_unlock_irq+0x28/0x90 [ 357.152710][ C1] ? lockdep_hardirqs_on+0x418/0x5d0 [ 357.152714][ C1] ? vhost_net_open+0x8e0/0x8e0 [ 357.152717][ C1] ? trace_hardirqs_on+0x67/0x230 [ 357.152720][ C1] ? cache_grow_begin.cold+0x2d/0x31 [ 357.152724][ C1] ? _raw_spin_unlock_irq+0x5e/0x90 [ 357.152728][ C1] ? smpboot_register_percpu_thread+0x370/0x390 [ 357.152731][ C1] ? __switch_to_asm+0x34/0x70 [ 357.152734][ C1] ? __switch_to_asm+0x40/0x70 [ 357.152737][ C1] ? __schedule+0x81f/0x1cc0 [ 357.152741][ C1] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 357.152744][ C1] handle_rx_net+0x19/0x20 [ 357.152747][ C1] vhost_worker+0x2a2/0x4a0 [ 357.152751][ C1] ? vhost_flush_work+0x20/0x20 [ 357.152754][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 357.152758][ C1] ? __kthread_parkme+0xfb/0x1b0 [ 357.152762][ C1] kthread+0x357/0x430 [ 357.152765][ C1] ? vhost_flush_work+0x20/0x20 [ 357.152769][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 357.152772][ C1] ret_from_fork+0x3a/0x50 [ 357.160697][ T1041] Kernel panic - not syncing: hung_task: blocked tasks [ 357.432280][ T1041] CPU: 0 PID: 1041 Comm: khungtaskd Not tainted 5.0.0-rc5-next-20190208 #31 [ 357.441030][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.451079][ T1041] Call Trace: [ 357.454376][ T1041] dump_stack+0x172/0x1f0 [ 357.458760][ T1041] panic+0x2cb/0x65c [ 357.462657][ T1041] ? __warn_printk+0xf3/0xf3 [ 357.467247][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 357.472896][ T1041] ? ___preempt_schedule+0x16/0x18 [ 357.478010][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 357.484163][ T1041] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 357.490316][ T1041] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 357.496468][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 357.502623][ T1041] watchdog+0x9f0/0xee0 [ 357.506791][ T1041] kthread+0x357/0x430 [ 357.510883][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 357.516431][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 357.522672][ T1041] ret_from_fork+0x3a/0x50 [ 357.528422][ T1041] Kernel Offset: disabled [ 357.532791][ T1041] Rebooting in 86400 seconds..