[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.273010][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 33.273020][ T26] audit: type=1800 audit(1547381886.525:29): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 33.299732][ T26] audit: type=1800 audit(1547381886.525:30): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. 2019/01/13 12:18:15 fuzzer started 2019/01/13 12:18:16 dialing manager at 10.128.0.26:39407 2019/01/13 12:18:17 syscalls: 1 2019/01/13 12:18:17 code coverage: enabled 2019/01/13 12:18:17 comparison tracing: enabled 2019/01/13 12:18:17 setuid sandbox: enabled 2019/01/13 12:18:17 namespace sandbox: enabled 2019/01/13 12:18:17 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/13 12:18:17 fault injection: enabled 2019/01/13 12:18:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/13 12:18:17 net packet injection: enabled 2019/01/13 12:18:17 net device setup: enabled 12:21:12 executing program 0: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0xad, 0xfdfd, &(0x7f00000000c0)="8fee91f39196fedf47c565e9159f0640c8a7c958b1dfc74b736bf463e285f73081f685388e8bfc2827e3e50108f5547692876ca2d0e2168bf32dc8db880e52d6bb02db7a78e9a62fd7e2ace497a98f5167a3004fd5dc3e11123a34503cb001195dad4544fd56564ccf46646d8acbd1bb5e533e87baf74af2e70612f33eca0873d2e43cd9f9e7fda6ddc366cc18bba3cf214f487e32e28e26dcd68cc39fbc89157a136d30f0a5c9c040677f6a56"}) syzkaller login: [ 219.601566][ T7434] IPVS: ftp: loaded support on port[0] = 21 12:21:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000009c0)={0x0, 0x8206, 0x6, 0x200, 0x0}, &(0x7f0000000a00)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000a40)={r2}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x200800, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000640)=0xffffffffffffffff, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 219.709879][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 219.781815][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.789271][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.808994][ T7434] device bridge_slave_0 entered promiscuous mode [ 219.829653][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.836802][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.852394][ T7434] device bridge_slave_1 entered promiscuous mode [ 219.875245][ T7437] IPVS: ftp: loaded support on port[0] = 21 [ 219.892916][ T7434] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.903226][ T7434] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.934854][ T7434] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.943530][ T7434] team0: Port device team_slave_0 added [ 219.950092][ T7434] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.958048][ T7434] team0: Port device team_slave_1 added [ 219.971536][ T7434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 12:21:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 219.989506][ T7434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.092001][ T7434] device hsr_slave_0 entered promiscuous mode 12:21:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1) ioctl$TCFLSH(r0, 0x89f3, 0x712000) [ 220.199327][ T7434] device hsr_slave_1 entered promiscuous mode [ 220.251299][ T7434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 220.308133][ T7434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 220.321980][ T7439] IPVS: ftp: loaded support on port[0] = 21 [ 220.357986][ T7442] IPVS: ftp: loaded support on port[0] = 21 [ 220.376675][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.383901][ T7434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.391705][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.398779][ T7434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.426065][ T7437] chnl_net:caif_netlink_parms(): no params data found 12:21:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$zero(0xffffffffffffff9c, 0x0, 0x402000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 220.672296][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.682338][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.690732][ T7437] device bridge_slave_0 entered promiscuous mode [ 220.698353][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.707760][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.715858][ T7437] device bridge_slave_1 entered promiscuous mode [ 220.745355][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 220.753249][ T7446] IPVS: ftp: loaded support on port[0] = 21 [ 220.774100][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.786403][ T22] bridge0: port 2(bridge_slave_1) entered disabled state 12:21:14 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/154) [ 220.822184][ T7442] chnl_net:caif_netlink_parms(): no params data found [ 220.856253][ T7437] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.867710][ T7437] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.935164][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.965464][ T7437] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.974543][ T7437] team0: Port device team_slave_0 added [ 220.980890][ T7437] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.988785][ T7437] team0: Port device team_slave_1 added [ 220.996989][ T7437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.014620][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.018762][ T7450] IPVS: ftp: loaded support on port[0] = 21 [ 221.021802][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.035651][ T7439] device bridge_slave_0 entered promiscuous mode [ 221.043799][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.051927][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.059763][ T7439] device bridge_slave_1 entered promiscuous mode [ 221.067237][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.077148][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.084519][ T7437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.117650][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.126014][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.136062][ T7434] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 221.142930][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.155203][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.162722][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.170870][ T7442] device bridge_slave_0 entered promiscuous mode [ 221.179841][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.186878][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.194681][ T7442] device bridge_slave_1 entered promiscuous mode [ 221.203674][ T7439] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.270852][ T7437] device hsr_slave_0 entered promiscuous mode [ 221.329131][ T7437] device hsr_slave_1 entered promiscuous mode [ 221.383503][ T7437] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 221.395438][ T7437] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 221.404192][ T7439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.428113][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.458767][ T7439] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.467018][ T7439] team0: Port device team_slave_0 added [ 221.474888][ T7439] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.482947][ T7439] team0: Port device team_slave_1 added [ 221.492144][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.500863][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.509464][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.516504][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.531326][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.540243][ T7442] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.553795][ T7439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.561802][ T7446] chnl_net:caif_netlink_parms(): no params data found [ 221.573386][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.581836][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.590454][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.597480][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.608722][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.617897][ T7442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.627394][ T7439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.649519][ T7437] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.657077][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.680327][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.699600][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.770766][ T7439] device hsr_slave_0 entered promiscuous mode [ 221.809244][ T7439] device hsr_slave_1 entered promiscuous mode [ 221.851270][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.859160][ T7439] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 221.871232][ T7442] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.879274][ T7442] team0: Port device team_slave_0 added [ 221.896782][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.904107][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.911983][ T7446] device bridge_slave_0 entered promiscuous mode [ 221.919911][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.928451][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.937937][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.946018][ T7439] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 221.974948][ T7442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.982824][ T7442] team0: Port device team_slave_1 added [ 221.988903][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.996023][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.004406][ T7446] device bridge_slave_1 entered promiscuous mode [ 222.012869][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 222.025834][ T7439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.037917][ T7442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.051162][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.063002][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.088648][ T7442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.103613][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 222.151282][ T7442] device hsr_slave_0 entered promiscuous mode [ 222.199261][ T7442] device hsr_slave_1 entered promiscuous mode [ 222.279230][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.287443][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.297625][ T7446] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.308519][ T7434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 222.323975][ T7442] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 222.332651][ T7442] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 222.342437][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.351169][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.361130][ T7446] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.384785][ T7450] chnl_net:caif_netlink_parms(): no params data found [ 222.405700][ T7437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.414128][ T7434] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 222.421618][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.429757][ T7446] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.437632][ T7446] team0: Port device team_slave_0 added [ 222.444258][ T7446] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.452207][ T7446] team0: Port device team_slave_1 added [ 222.458324][ T7446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.472540][ T7446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.483003][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 222.502298][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 222.527066][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.534719][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.562391][ T7437] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 222.569919][ T7437] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.582252][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.594961][ T7434] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 222.630688][ T7446] device hsr_slave_0 entered promiscuous mode [ 222.682316][ T7446] device hsr_slave_1 entered promiscuous mode [ 222.719929][ T7446] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 222.727707][ T7446] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 222.742718][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.750017][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.758489][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.766868][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.773918][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.784037][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.792065][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.799858][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.807458][ T7450] device bridge_slave_0 entered promiscuous mode [ 222.819121][ T7442] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.827626][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.835698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.844393][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.853153][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.860238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.870037][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.879271][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.886320][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.894087][ T7450] device bridge_slave_1 entered promiscuous mode [ 222.906907][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.917937][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 222.925882][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.936056][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.946256][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.975587][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 222.983189][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.993268][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.009259][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.017468][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.025444][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.033497][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.042815][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.052099][ T7450] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.065895][ T7439] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 223.074941][ T7439] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.100328][ T7446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.111114][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.123761][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.137146][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 12:21:16 executing program 0: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x0) pipe2(&(0x7f0000000000), 0x80800) setresuid(0x0, 0x0, 0x0) [ 223.147277][ T7450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.167391][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.184848][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 12:21:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x600100, 0x0) accept4$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) prctl$PR_GET_DUMPABLE(0x3) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) [ 223.199541][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.207737][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.218788][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.227562][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.234652][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.255426][ T7437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 223.286776][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.295249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.303319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.321466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.335975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.344784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.353184][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.360303][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.368175][ T7450] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.379542][ T7450] team0: Port device team_slave_0 added [ 223.386466][ T2480] print_req_error: I/O error, dev loop0, sector 0 flags 801 [ 223.388614][ T7437] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 223.394015][ T2480] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 223.406032][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.409182][ T2480] print_req_error: I/O error, dev loop0, sector 8 flags 801 [ 223.409196][ T2480] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 223.409226][ T2480] print_req_error: I/O error, dev loop0, sector 16 flags 801 [ 223.421918][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.424306][ T2480] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 223.451096][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 223.454584][ T2480] print_req_error: I/O error, dev loop0, sector 24 flags 801 [ 223.469669][ T2480] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 223.469681][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.478024][ T2480] print_req_error: I/O error, dev loop0, sector 32 flags 801 [ 223.493092][ T2480] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 223.493624][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.501640][ T2480] print_req_error: I/O error, dev loop0, sector 40 flags 801 [ 223.509897][ T7465] print_req_error: I/O error, dev loop0, sector 48 flags 801 [ 223.516468][ T2480] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 223.516504][ T2480] print_req_error: I/O error, dev loop0, sector 56 flags 801 [ 223.516521][ T2480] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 223.516549][ T2480] print_req_error: I/O error, dev loop0, sector 64 flags 801 [ 223.524150][ T7465] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 223.532392][ T2480] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 223.539716][ T7465] print_req_error: I/O error, dev loop0, sector 72 flags 801 [ 223.548019][ T2480] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 223.563941][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.606976][ T7450] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.618142][ T7450] team0: Port device team_slave_1 added [ 223.626904][ T7450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.641142][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 223.655313][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.663751][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.672443][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.680844][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.689034][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.697301][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.705916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.718696][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 223.726820][ T7450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 12:21:17 executing program 0: set_mempolicy(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(r0, &(0x7f0000000340)='cgroup.type\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0, 0x0) fallocate(r0, 0x20000, 0x8000000000, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000021c0)=""/109, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) [ 223.766208][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 223.784423][ T7442] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 223.795627][ T7442] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.806860][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.816105][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.827894][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.839255][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.848412][ T7439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 223.857602][ T7437] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 12:21:17 executing program 0: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7}, 0x7) getgroups(0x1, &(0x7f0000000300)=[0x0]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/192, &(0x7f0000000100)=0xc0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xa}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xa0}}, 0x8000) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) shmctl$IPC_RMID(0x0, 0x0) sendfile(r2, r2, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe) [ 223.911632][ T7450] device hsr_slave_0 entered promiscuous mode [ 223.939283][ T7450] device hsr_slave_1 entered promiscuous mode [ 223.961113][ T26] audit: type=1800 audit(1547382077.215:31): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16519 res=0 [ 223.970256][ T7450] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 223.994872][ T7450] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 224.005404][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.013910][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.022128][ C1] hrtimer: interrupt took 30239 ns [ 224.022202][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.035562][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.044353][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.052801][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.059876][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.067695][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.078646][ T7439] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 224.085461][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.096578][ T7437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.117006][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.134738][ T7446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.154687][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.163392][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.173264][ T26] audit: type=1800 audit(1547382077.425:32): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16519 res=0 [ 224.177943][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.200380][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.214095][ T7450] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.224188][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.238634][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.258447][ T7439] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 12:21:17 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x3) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x400080, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x41, 0x3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c97954d050000000000000000", @ANYRES16=r3, @ANYBLOB="000c2bbd7000fbdbdf25070000000800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x40d0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0xee, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200)="da88aa5af197", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)={0x8, 0x4}) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e20, @empty}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]}) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000040)) [ 224.276822][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.295514][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.324493][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 224.338217][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.346837][ T7485] rdma_op 00000000dd4d0171 conn xmit_rdma (null) [ 224.355712][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.363920][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.376710][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 12:21:17 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000180)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, "8ae32abf4e591c3f3f01a0888d13142512815496105debcfea6217c240953359"}) [ 224.503949][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.514673][ T7446] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 224.522372][ T7446] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.534813][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.547081][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.555666][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.567726][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.577144][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.586177][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 12:21:17 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt(r0, 0x80, 0x2f1, &(0x7f0000000000)="b66e5f0cf0a5b3d82a6a9ae43afa161d0f724ba6f0ee352aeeae157fedb8d7cddadeb429b8b823acd06330ff3d4f7207bc74640e3a152f1bb402405cac286d8e2521cfa195d6d1132a8c4e1d840c2f0aebb41b6f865623d33333e208ce0d772aa3d4d6c13e83fb7011b9e0f9da94fad637c4a49085f17fd0d48e6d3683504650a8f108bd28df0385d2b5c3a9968a6632b1f1d82c40ebfc82c348a6dacdd2da75be91da974b35faf557e91aaf4165b2d661a461f64acf5f84439c26d0ec412b0aeee760c7a7f24468fe93fdd53515b2f39a7af5094a8c3c54e2cee4fa8f1cefae3ef7d3", 0xe3) shutdown(r0, 0xffffffffffffffff) finit_module(r0, &(0x7f0000000100)='\x00', 0x2) [ 224.646350][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 224.676945][ T7442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 12:21:17 executing program 1: semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}, {}], 0x2) semop(0x0, &(0x7f0000000040)=[{0x0, 0x9}], 0x1) syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x84, 0x40000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x5, 0x80007, 0x8, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000600)=0x17) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40000, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x3, 0x6, 0xc5e, 0x101, 0x0, 0xdb9, 0x80c, 0x2, 0x8, 0x7, 0x0, 0x2, 0x5, 0x2, 0x7, 0x1, 0x4ba, 0x3, 0x200, 0x5, 0x100000000, 0x4d70, 0x7ff, 0xc70, 0x2, 0x5, 0x2, 0x1ff, 0x8, 0x14, 0x101, 0x1ff, 0x8, 0xfffffffffffffff9, 0x8, 0x0, 0x0, 0x20, 0x5, @perf_bp={&(0x7f0000000080), 0xb}, 0x1000, 0x2, 0x20, 0xd, 0x5, 0x2, 0x938}, r4, 0x1, r3, 0x2) [ 224.693582][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.702444][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.716048][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.735598][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.752084][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.760278][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.768632][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.777011][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.784067][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.793587][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 12:21:18 executing program 2: io_setup(0x800000000405, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x400000000001, 0x1) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) [ 224.810443][ T7442] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 224.817164][ T7442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.830177][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.849492][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.858064][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.867982][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.875082][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.886869][ T7450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.909744][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.925409][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.939904][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.954886][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.964834][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.973937][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.983527][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.992481][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.001209][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.014380][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.032169][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.047296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.058318][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 225.067459][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 225.077763][ T7446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 225.085571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.093622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.101334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.109595][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.117560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.125855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.136115][ T7450] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 225.143476][ T7450] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.151849][ T7442] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 225.159888][ T7446] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 225.166580][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.175558][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.185410][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.194255][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.203107][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.210158][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.219462][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.230530][ T7442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.240034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.247823][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.256523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.264899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.271948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.282848][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.292621][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.305931][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.318596][ T7446] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 225.325787][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.347678][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 225.360938][ T7446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.368873][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.382398][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.391553][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.401863][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.416520][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.434339][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.445822][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 225.481136][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.494806][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.510080][ T7450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 225.518579][ T7450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.541783][ T7450] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 225.548510][ T7450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.599167][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.607375][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.665487][ T7450] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 12:21:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x80800) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x10000000200000) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000300)={0x7b, 0x0, [0x3ff, 0xfffffffffffffff7, 0x0, 0x9]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r4 = shmget$private(0x0, 0x4000, 0x54000810, &(0x7f0000ffc000/0x4000)=nil) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000200)=0x80000000) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{}, {0x0, 0x5}}, &(0x7f0000002000)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000480)={0x0, 0xffffffff, 0x10}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e24, 0x6, @remote, 0x4}}, 0xffffffffffff2b0f, 0x2, 0xab, 0x2, 0x5}, &(0x7f0000000380)=0x957b5aadeb3234ff) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={r6, 0x81, 0x20}, 0xc) r7 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x8000) write$apparmor_exec(r7, &(0x7f0000000100)={'exec ', '/dev/dmmidi#\x00'}, 0x12) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x2f8) [ 225.751813][ T7450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.779108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 225.785042][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 225.899002][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 225.900384][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 225.904771][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 225.910753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 226.029532][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 226.035703][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 226.539329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 226.545121][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:21:20 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_pts(0xffffffffffffff9c, 0x8400) ioctl$TIOCGPTPEER(r1, 0x5441, 0xc3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a0000010000000000ffffffffffffffff5f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x90, {{0x2, 0x4e21, @broadcast}}}, 0x88) 12:21:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xf, 0xfa00, {0xfffffffffffffffc, 0x0}}, 0xfffffffffffffd8b) 12:21:20 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user='access=user'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'access=user'}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'rfdno'}}, {@fowner_gt={'fowner>', r2}}, {@context={'context', 0x3d, 'user_u'}}, {@measure='measure'}, {@fowner_gt={'fowner>', r2}}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:21:20 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40001, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x268, r1, 0x820, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1538}]}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdde}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5381}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa47}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa963}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5249b903}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000001}, 0x11) r2 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8927, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x80\x00', 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 12:21:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fallocate(r1, 0x0, 0x0, 0x8000) lseek(r1, 0x0, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) bind$pptp(r1, &(0x7f0000000240)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x3) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040), 0x4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x80, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x8001}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x2}, &(0x7f0000000200)=0x349) 12:21:20 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x0, 0x0, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x40}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x100000000}, 0x8) r3 = socket(0x1e, 0x1, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x6, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000180)={0x0, 0x0, 0x0, @local, 'bcsh0\x00'}) munlock(&(0x7f000068a000/0x4000)=nil, 0x4000) getsockopt(r3, 0x800000010f, 0x0, &(0x7f00004ad000), &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x79, 0x4) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) 12:21:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x4, 0x80) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={r3, 0x8}, &(0x7f0000000380)=0x8) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000140)={0x4}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)}, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="d5d7fc17e2a898c733d8d1ab11be7c01f5dd0a3d0e49658405aae987e98a2a87c4d49f267cbd401540ea507aa303682a8a01ef768d6ddb0ace72e5437203b68eae418260d59a38834cc495fb7418590d89097b424593c5440ea9587b18291c9df89df9ee9340e23bbc33c198f84eccbff00518d39b0bee6f2ed51cda9aaa02d4358a246f8014f79fe07db374f02af7e809b634a5396d7cfdaecb7f"]) write$binfmt_misc(r4, &(0x7f0000000440)={'syz1'}, 0x1200e) fanotify_init(0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000003c0)={r3, 0x3800000000000000, 0x5, [0x7, 0x7f, 0xfffffffffffffd5e, 0xc558, 0x400]}, &(0x7f0000000400)=0x12) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x200) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) 12:21:20 executing program 5: getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000340)=""/138, &(0x7f0000000400)=0x8a) r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x80000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x939b, 0x10000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) fsync(r1) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x7d9df1021448a43a) 12:21:20 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8010550e, &(0x7f0000000200)={0x0, 0x2, @start}) [ 226.931037][ T7579] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop4 12:21:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000012000), 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0000f4ff007c5dcf85000000000000000000"], 0x10}}, 0x0) dup2(r0, r1) 12:21:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x8c) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x84000) r2 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x400, 0x20000) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x70, 0x1, 0x2, 0x3, 0x2, 0x0, 0x3, 0x1000, 0x1, 0x6, 0x88, 0x0, 0x4, 0x7, 0xfffffffffffffff8, 0x6, 0x2, 0xc5f, 0x6, 0x3, 0x5, 0xb3, 0x8, 0x8001, 0x5, 0x100000000, 0x8000, 0x1, 0x9, 0x81, 0x1, 0x9, 0x2, 0xea, 0xdc8, 0x3, 0x10000, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x20}, 0x0, 0x3f, 0xc0, 0x0, 0x92bb, 0x1, 0x7fff}, r1, 0xd, r2, 0x6) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa86dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004dce15eba1e054969078e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed000"], 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400000, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x4, 0x0, [{0x4, 0x8, 0x6, 0xb4, 0x3f17, 0x4, 0x5}, {0xd, 0x7ff, 0x4, 0x1, 0x7, 0x0, 0x4}, {0xd, 0x777b, 0x2, 0xffff, 0x0, 0x4, 0x69}, {0x8000000f, 0xd1, 0x6, 0xffff, 0x7, 0x9, 0x8001}]}) 12:21:20 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x100, 0x20, 0x2}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x403}, 0x8) rseq(0x0, 0xffffffffffffff8c, 0x100000000001, 0x0) 12:21:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a80000/0x4000)=nil, 0x4000, 0x0, 0x40153, r0, 0x0) mremap(&(0x7f0000b59000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000bfb000/0x1000)=nil) 12:21:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) socketpair(0x25, 0x5, 0x4, &(0x7f0000000000)) 12:21:20 executing program 4: lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$minix(&(0x7f0000000140)='minix\x00', &(0x7f00000001c0)='./file1\x00', 0x4c, 0x2, &(0x7f0000000240)=[{&(0x7f0000000900)="bbec8708ae09357958ca82f0e94b21ed72a49b8d166327ba2023c83dd1ae6ee3dbf314407ebd0b24dcf2f973f1e62d92d7c3121040fbeaeba7ab329086cd8176c69c1c5e34c93e17efc621fead7d246407ffb2574e067f742a645e989a33f0d64d595513355b167f6fd98ca4f9a6e450659f276c74a69b711f84fc14b19ee761284792bb5d872b2d34bdb7b19a69b58ccfe22f99aa36c4aea16c1d045de254696d59", 0xa2, 0x1}, {&(0x7f0000000500)="7cd9c28e1d1c897426a891638bdf8161f592355eac119c0a34b97caa1313347b92911dab4995e6c6e108ba64afa1b9700c91d77c323ebc5c6c8629fd7b03f55c44078436028ea50734f05d9e388c0cdb600c862e4e7e2c88ff274da55e43379822e4ec3557c6cab9557b2fe77f194cc4afec0ac465c0348614ffd1da634d17f8a1155927caa6497a96abe1c9156e718afb3c2eb4fb85e84b0ffec7168f49563dc16750abf8ffab19a26a5e0307871a5a325c9d242f5aff70d0309cd2bad62084e6d56d78c9defd6ce5349aa9abf65961fb4d1dea0323e1f310", 0xd9, 0x5}], 0x0, 0x0) getgroups(0x4000000000000041, &(0x7f0000000280)=[0xee00, r0]) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xc70f7e9, 0x18080) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000006c0)=0x8, 0x4) sendto$rxrpc(r1, &(0x7f0000000380)="75323325a36f70854ce2b30e9a21986b8a08ef0aa075009658a58cb2a8444ea16c2d30f8ac5e315be1aa920b6afb895a3197a294afa109053cb0cc2a45d9e43c8e451ff689d3da2bae3c1670c05906f4128fbdf551714c60f2c18e94a0382584f78048a61ddd534c0072a1c25ad850389c0b46b537058dac79fa7238c0f169b79ff5f5d943152ee260dcb648f322cd62f24f4f", 0x93, 0x40, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000600)='tUaM0\x00\x00\x00\x00\t\x00', 0x10) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000800)=@x25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000880)=""/71, 0x47}], 0x1}, 0x2000) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="726573697a653d3078666666666666666666666666666330312c00c98fc9add7d5975291981113dac7799fc0bf19b75dfd392c7266f91a17b8a38102499efc4a71699ce52a05026395b5012b099716c780127dc1a9e6f6fae76a755574d0142c26287fb8a34172399145a151e258eb4f528ebbcad64f7a109bba98a0ab18673881dfe4dc2246e9451dcda40c5e4600fa75f6434d24a71be7acb9f18126b358b5d0d34b5a6e3e041795fba50620ab1ab697c37a617ac2e0815599985db5ebf55608ec2482580ea54684bd97f2358aec31fc44a7c6f5ca88524b333758"]) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) r6 = fcntl$getown(r1, 0x9) capget(&(0x7f0000000a00)={0x39980732, r6}, &(0x7f0000000a40)={0x1, 0x5d, 0x80000001, 0x40, 0x1, 0x8}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x0, &(0x7f00000004c0)={{r4, r5/1000+30000}, {r7, r8/1000+30000}}, &(0x7f00000009c0)) futimesat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300)={{r2, r3/1000+30000}}) 12:21:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x2, &(0x7f00000001c0)='p') r2 = socket(0x1e, 0x4, 0x0) getsockopt(r2, 0x800000010f, 0x83, &(0x7f00004ad000), &(0x7f0000a3c000)=0xfffffffffffffecb) socketpair(0x13, 0x0, 0x8, &(0x7f0000000080)) 12:21:20 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x600210) r2 = dup2(r0, r1) ioctl$NBD_CLEAR_QUE(r2, 0xab05) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1) 12:21:20 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xfffffffffffffdfc, 0x2000) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000240)={0x7d, "67f917ab7e9d8b9f4f09d2304a9ea630aed2e62d9951b8df8c97f294bfdba67c", 0x2, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x1) write(r2, &(0x7f0000002000)='/', 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f00000001c0)) fadvise64(r5, 0x0, 0x4, 0x1) splice(r5, 0x0, r4, 0x0, 0x1000000000000003, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000200)="a8981f0a3c010000808070") socket$unix(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$unix(r4, 0x0, 0xffffffffffffff66) listen(r6, 0x8) close(r4) socket$inet6(0xa, 0x800, 0x81) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r7 = dup3(r5, r3, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000028}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000080}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x9) ioctl(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r5, &(0x7f00000000c0)="52b00c6990dd6984715c3c5e9c60369c", 0x10, 0x3fffffd, 0x0, 0x0) [ 227.649204][ T7630] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 12:21:20 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x43) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x2, 0x100000000000001}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x341080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) [ 227.787355][ T7630] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 12:21:21 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x6000, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x200) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000580)={0x0, 0x6, 0x1000}) splice(r1, &(0x7f0000000740), r1, &(0x7f0000000780), 0x4, 0xb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x3fffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080)=0x100000001, 0x4) fallocate(r2, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x480400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f00000005c0)=""/155) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x22a, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) 12:21:21 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$void(r0, 0xc0045c78) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x2b66db71f52e4be1) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:21:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x100000000, 0x8, 0x5, 0x400, 0x8}}, 0xa) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488d") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x00\x00\x02\x00\x00\x05\x00', 0x79}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68d9eaf62154a1975a73d1c97677d6654f10e8642c5c213626671c4f3e72a771cc07ccd8c5403bca7296fb7137aa98db0b866d40936963b788d903b8ff117105278dde3946ec52cd06da11c85f0c89eb61d36f92d5a9b25eec50b81ee1025fd3475d8437dcfd54cb44ea84dc9253f965b34078f3083af2592dea6dd2f972fcffe2b5bce26b6650f21139f638c0f60f72832d959c"], 0x1}}, 0x44801) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={'\x00', {0x2, 0x4e20, @remote}}) 12:21:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4014, &(0x7f0000cd2ff0)={0x2, 0x4e24, @rand_addr=0x7}, 0x432a5d31545ceeab) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x832, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xfffffffffffffffc}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000340)={r2, 0xf5, "002b608f2e41409d46592ca67cc46d761ceeefa61371c9fb5ccbcfa133edfbb8868df2c89e5b312c365699c40fe71b23f1735b543f41c70ac15bcde902ec0e8f02fb24165bf7ae85a41d5ee5b8953b3e92b422aacdd4c3f678bbfd5e34967d7d6e472a00bf40f9148a8a3fb9641dab1c5ecf040ef98785d78b5a42dd96d9fcd5b4ec4683a35451ed657aaac488e5935887a1ae13b7944b2d901467216ce4bedf2de0ee009e3589ed2d20b8f0dbf9fd062b67a439ef0e9cf1344b023727857385010e736b0eb38e165acbef9c6d762b922223d09e11a4a86c137063afd7142184ed4314c6715a175b77222a175f176e0f20762c3471"}, &(0x7f0000000440)=0xfd) r3 = add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="458ed1e6e7abaa79a4e1a3de38aa4e116d9759a64c71c23026509d62f0c8c6275bce8888233a8a00e10ba3cd363a640cd484e2b125bbdf2c6e3b02bbb8f27c70621e81207c3eff45f58ec78f08852dd20ed20669bc71a4f3376e87e6dde34f5e736585f2602501b92e75d162b8b067855ec637330934a6210767c02708c617ea772f763245", 0x85, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)='security%trustedem0.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000080), 0x400000000000384, 0x12001, 0x0) 12:21:21 executing program 1: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_stats}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) sendto$ax25(r1, &(0x7f0000000040)="dadd54e90468caef0292dd09f82f90f4301142e68a", 0x15, 0x40, &(0x7f0000000100)={{0x3, @default, 0x4}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 12:21:21 executing program 0: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r1, 0x1268, &(0x7f00000002c0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000)=0x64125c6d, 0x4) 12:21:21 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x2}, 0x2c) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="bc07b71375222923e747cc0c2fd7", 0xe}, {&(0x7f0000000040)="f07731514259ebc3e5146ad275b2e70d78a4685567d86d12aaa9d8df79b3a576b9ea25262873b43bffaf8de125b9de1368bc6f01431f48d444ae821b850304ba0ff13356f7fe80789d080202cdb8e17b1cafe27166", 0x55}, {&(0x7f0000000100)="f97bbc20d59e99cf31228f1a04c3d7d050d0a525e1820286fa198a0d11c29259b1184c6ec277a8e6141398aaf4712e4a42ddf3cf9c6e46b33fb537d23fbe934f2720b10302c41e15ded3b0215372757aefa769a488d6df53b5831535233d37cc08a1f86df8bbd7fe06eec8605d816fcf9a5b686c8bd396f1c140f98a6171025e03323e4cb6c0de445a171c94751218051c9390d3900d0f385b343381c9e36c6dd518b049c77ad3acb7e76f7d938615aace00fa3c8fc154", 0xb7}], 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='team0\x00') r2 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x5, 0x400002) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000280)={0x5, "99e3a2fc0f73b414b6cf9ac8d625e43fa397feaf9f8a78757ac173ef91a2f2f4", 0x810, 0x1c0, 0x7fff, 0x12, 0x5}) bind$netrom(r1, &(0x7f0000000300)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default]}, 0x48) 12:21:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x2, {0x4}}, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8923, &(0x7f0000000040)={'veth1_to_bond:\x00', 0x0}) close(r3) close(r1) 12:21:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) mknod(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f0000000600), 0x0, 0xfffffffffffffffe) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) fdatasync(r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x80000000000000d, 0x801, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x7f) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x4) 12:21:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4000, 0x0) inotify_add_watch(r1, &(0x7f0000001200)='./file0\x00', 0x80000000) r2 = signalfd4(r0, &(0x7f0000000000)={0x200000000009}, 0x8, 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x7b, 0x7e, 0x0, 0x1, 0x475427ee}, &(0x7f0000001380)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000013c0)={r3, 0x100}, &(0x7f0000001400)=0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x18) syslog(0x9, &(0x7f0000000140)=""/4096, 0x1000) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000001140)=""/70) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/audio\x00', 0x1, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000080)={0x2, 0x9, 0x3f, 0x2, 0x400000000000004, 0x10004}) 12:21:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000002000200000000000000000000000180800000000000000000000000"]}) [ 228.400055][ T7710] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 12:21:21 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r1, r0) [ 229.056852][ T22] list_del corruption, ffff88809344efb0->next is LIST_POISON1 (dead000000000100) [ 229.066472][ T22] ------------[ cut here ]------------ [ 229.072045][ T22] kernel BUG at lib/list_debug.c:45! [ 229.077397][ T22] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 229.083461][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.0.0-rc1-next-20190111 #10 [ 229.092018][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.102075][ T22] Workqueue: events p9_read_work [ 229.106993][ T22] RIP: 0010:__list_del_entry_valid.cold+0x23/0x4f [ 229.113381][ T22] Code: e8 95 8e d5 fd 0f 0b 4c 89 f6 48 c7 c7 80 0c 82 88 e8 84 8e d5 fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 c0 0b 82 88 e8 70 8e d5 fd <0f> 0b 4c 89 e2 4c 89 f6 48 c7 c7 20 0c 82 88 e8 5c 8e d5 fd 0f 0b [ 229.132963][ T22] RSP: 0018:ffff8880a95d78b8 EFLAGS: 00010282 [ 229.139006][ T22] RAX: 000000000000004e RBX: ffff88809344ef00 RCX: 0000000000000000 [ 229.146957][ T22] RDX: 0000000000000000 RSI: ffffffff81687fa6 RDI: ffffed10152baf09 [ 229.154909][ T22] RBP: ffff8880a95d78d0 R08: 000000000000004e R09: ffffed1015ce5021 [ 229.162875][ T22] R10: ffffed1015ce5020 R11: ffff8880ae728107 R12: dead000000000200 [ 229.170835][ T22] R13: dead000000000100 R14: ffff88809344efb0 R15: 0000000000000013 [ 229.178797][ T22] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 229.187710][ T22] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.194271][ T22] CR2: 00007fe281051000 CR3: 000000005800d000 CR4: 00000000001406e0 [ 229.202233][ T22] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 229.210195][ T22] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 229.218150][ T22] Call Trace: [ 229.221419][ T22] p9_read_work+0xa7f/0x1140 [ 229.225993][ T22] ? check_preemption_disabled+0x48/0x290 [ 229.231712][ T22] ? p9_conn_cancel+0xd70/0xd70 [ 229.236548][ T22] ? __lock_is_held+0xb6/0x140 [ 229.241298][ T22] process_one_work+0xd0c/0x1ce0 [ 229.246213][ T22] ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10 [ 229.253044][ T22] ? __switch_to_asm+0x34/0x70 [ 229.257792][ T22] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 229.263145][ T22] ? __schedule+0x89f/0x1e60 [ 229.267717][ T22] ? pci_mmcfg_check_reserved+0x170/0x170 [ 229.273439][ T22] ? worker_thread+0x3b7/0x14a0 [ 229.278271][ T22] ? find_held_lock+0x35/0x120 [ 229.283259][ T22] ? lock_acquire+0x1db/0x570 [ 229.287915][ T22] ? worker_thread+0x3cd/0x14a0 [ 229.292750][ T22] ? kasan_check_write+0x14/0x20 [ 229.297675][ T22] ? do_raw_spin_lock+0x156/0x360 [ 229.302677][ T22] ? lock_release+0xc40/0xc40 [ 229.307332][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 229.312248][ T22] ? trace_hardirqs_on_caller+0x310/0x310 [ 229.317947][ T22] worker_thread+0x143/0x14a0 [ 229.322605][ T22] ? process_one_work+0x1ce0/0x1ce0 [ 229.327781][ T22] ? __kthread_parkme+0xc3/0x1b0 [ 229.332704][ T22] ? lock_acquire+0x1db/0x570 [ 229.337382][ T22] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 229.343165][ T22] ? lockdep_hardirqs_on+0x415/0x5d0 [ 229.348441][ T22] ? trace_hardirqs_on+0xbd/0x310 [ 229.353445][ T22] ? __kthread_parkme+0xc3/0x1b0 [ 229.358360][ T22] ? trace_hardirqs_off_caller+0x300/0x300 [ 229.364144][ T22] ? do_raw_spin_trylock+0x270/0x270 [ 229.369412][ T22] ? schedule+0x108/0x350 [ 229.373723][ T22] ? do_raw_spin_trylock+0x270/0x270 [ 229.378996][ T22] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 229.384786][ T22] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 229.391009][ T22] ? __kthread_parkme+0xfb/0x1b0 [ 229.395932][ T22] kthread+0x357/0x430 [ 229.399979][ T22] ? process_one_work+0x1ce0/0x1ce0 [ 229.405155][ T22] ? kthread_stop+0x920/0x920 [ 229.409824][ T22] ret_from_fork+0x3a/0x50 [ 229.414235][ T22] Modules linked in: [ 229.418777][ T22] ---[ end trace 2130113f61a34369 ]--- [ 229.424244][ T22] RIP: 0010:__list_del_entry_valid.cold+0x23/0x4f [ 229.430666][ T22] Code: e8 95 8e d5 fd 0f 0b 4c 89 f6 48 c7 c7 80 0c 82 88 e8 84 8e d5 fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 c0 0b 82 88 e8 70 8e d5 fd <0f> 0b 4c 89 e2 4c 89 f6 48 c7 c7 20 0c 82 88 e8 5c 8e d5 fd 0f 0b [ 229.450867][ T22] RSP: 0018:ffff8880a95d78b8 EFLAGS: 00010282 [ 229.456922][ T22] RAX: 000000000000004e RBX: ffff88809344ef00 RCX: 0000000000000000 [ 229.464897][ T22] RDX: 0000000000000000 RSI: ffffffff81687fa6 RDI: ffffed10152baf09 [ 229.472875][ T22] RBP: ffff8880a95d78d0 R08: 000000000000004e R09: ffffed1015ce5021 [ 229.480857][ T22] R10: ffffed1015ce5020 R11: ffff8880ae728107 R12: dead000000000200 [ 229.488820][ T22] R13: dead000000000100 R14: ffff88809344efb0 R15: 0000000000000013 [ 229.496804][ T22] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 229.505742][ T22] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.512327][ T22] CR2: 00007fe281051000 CR3: 000000005800d000 CR4: 00000000001406e0 [ 229.520312][ T22] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 229.528281][ T22] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 229.536249][ T22] Kernel panic - not syncing: Fatal exception [ 229.543428][ T22] Kernel Offset: disabled [ 229.547751][ T22] Rebooting in 86400 seconds..