Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts. 2020/01/13 11:33:52 fuzzer started 2020/01/13 11:33:54 dialing manager at 10.128.0.105:37871 2020/01/13 11:33:56 syscalls: 2820 2020/01/13 11:33:56 code coverage: enabled 2020/01/13 11:33:56 comparison tracing: enabled 2020/01/13 11:33:56 extra coverage: enabled 2020/01/13 11:33:56 setuid sandbox: enabled 2020/01/13 11:33:56 namespace sandbox: enabled 2020/01/13 11:33:56 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/13 11:33:56 fault injection: enabled 2020/01/13 11:33:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/13 11:33:56 net packet injection: enabled 2020/01/13 11:33:56 net device setup: enabled 2020/01/13 11:33:56 concurrency sanitizer: enabled 2020/01/13 11:33:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/01/13 11:34:00 adding functions to KCSAN blacklist: 'tomoyo_supervisor' '__get_user_pages' 'timer_clear_idle' '__d_lookup_done' 'ext4_free_inodes_count' 'vm_area_dup' 'do_nanosleep' 'run_timer_softirq' 'audit_log_start' 'mod_timer' 'generic_write_end' 'tick_sched_do_timer' '__hrtimer_run_queues' 'process_srcu' 'ext4_free_inode' '__ext4_new_inode' 'tick_do_update_jiffies64' 'blk_mq_get_request' 'find_next_bit' 'rcu_gp_fqs_check_wake' 'dd_has_work' 'ext4_nonda_switch' 'common_perm_cond' 'evict' 'ep_poll' 'find_get_pages_range_tag' 'add_timer' 'ext4_has_free_clusters' 'xas_clear_mark' 11:34:26 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) 11:34:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904014865161a000100050000000089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904024865161a000100050000740089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) syzkaller login: [ 92.341679][ T7936] IPVS: ftp: loaded support on port[0] = 21 [ 92.461104][ T7936] chnl_net:caif_netlink_parms(): no params data found 11:34:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x15, 0x0, 0x1000000, 0x0, 0x0, "00000000000000000000000000000000027300"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 92.505189][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.512798][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.520847][ T7936] device bridge_slave_0 entered promiscuous mode [ 92.536413][ T7936] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.538246][ T7939] IPVS: ftp: loaded support on port[0] = 21 [ 92.556058][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.565854][ T7936] device bridge_slave_1 entered promiscuous mode [ 92.632678][ T7936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.664619][ T7936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.682086][ T7941] IPVS: ftp: loaded support on port[0] = 21 [ 92.710184][ T7936] team0: Port device team_slave_0 added [ 92.718339][ T7936] team0: Port device team_slave_1 added [ 92.731791][ T7939] chnl_net:caif_netlink_parms(): no params data found [ 92.788209][ T7936] device hsr_slave_0 entered promiscuous mode 11:34:26 executing program 3: r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x0, 0x0, 0xffffffffffffffff) [ 92.835691][ T7936] device hsr_slave_1 entered promiscuous mode [ 92.955772][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.962909][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.987249][ T7939] device bridge_slave_0 entered promiscuous mode [ 92.996874][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.003959][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.026099][ T7939] device bridge_slave_1 entered promiscuous mode 11:34:27 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 93.071751][ T7936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.173487][ T7944] IPVS: ftp: loaded support on port[0] = 21 [ 93.211161][ T7936] netdevsim netdevsim0 netdevsim1: renamed from eth1 11:34:27 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1, 0x0, 0x0, 0xc, 0x0, 0x10000}]}, {0x0, [0x5f]}}, &(0x7f0000000040)=""/189, 0x27, 0xbd, 0x8}, 0x20) [ 93.327212][ T7936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.368175][ T7936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.418455][ T7939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.430601][ T7939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.453905][ T7947] IPVS: ftp: loaded support on port[0] = 21 [ 93.454166][ T7949] IPVS: ftp: loaded support on port[0] = 21 [ 93.476842][ T7941] chnl_net:caif_netlink_parms(): no params data found [ 93.512982][ T7939] team0: Port device team_slave_0 added [ 93.521130][ T7939] team0: Port device team_slave_1 added [ 93.657673][ T7939] device hsr_slave_0 entered promiscuous mode [ 93.695821][ T7939] device hsr_slave_1 entered promiscuous mode [ 93.745444][ T7939] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.761072][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.768154][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.776013][ T7941] device bridge_slave_0 entered promiscuous mode [ 93.783270][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.790546][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.798319][ T7941] device bridge_slave_1 entered promiscuous mode [ 93.821342][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.838447][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.874135][ T7947] chnl_net:caif_netlink_parms(): no params data found [ 93.919228][ T7949] chnl_net:caif_netlink_parms(): no params data found [ 93.935105][ T7941] team0: Port device team_slave_0 added [ 93.942498][ T7941] team0: Port device team_slave_1 added [ 94.017648][ T7941] device hsr_slave_0 entered promiscuous mode [ 94.055683][ T7941] device hsr_slave_1 entered promiscuous mode [ 94.105492][ T7941] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.167270][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.174379][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.182352][ T7947] device bridge_slave_0 entered promiscuous mode [ 94.192640][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.199870][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.207802][ T7947] device bridge_slave_1 entered promiscuous mode [ 94.226117][ T7936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.240787][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.248032][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.255867][ T7949] device bridge_slave_0 entered promiscuous mode [ 94.266417][ T7939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.327210][ T7944] chnl_net:caif_netlink_parms(): no params data found [ 94.344033][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.353167][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.361090][ T7949] device bridge_slave_1 entered promiscuous mode [ 94.377676][ T7939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.441390][ T7947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.450759][ T7939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.500018][ T7939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.550552][ T7936] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.563052][ T7949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.573397][ T7947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.592876][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.600585][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.622204][ T7949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.647293][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.656260][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.664546][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.671647][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.679447][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.688004][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.696292][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.703315][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.712188][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.720753][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.727862][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.735749][ T7944] device bridge_slave_0 entered promiscuous mode [ 94.753398][ T7947] team0: Port device team_slave_0 added [ 94.762088][ T7947] team0: Port device team_slave_1 added [ 94.777370][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.784415][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.792290][ T7944] device bridge_slave_1 entered promiscuous mode [ 94.800355][ T7949] team0: Port device team_slave_0 added [ 94.814998][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.823691][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.832672][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.841311][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.850369][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.907764][ T7947] device hsr_slave_0 entered promiscuous mode [ 94.946034][ T7947] device hsr_slave_1 entered promiscuous mode [ 94.985497][ T7947] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.998618][ T7949] team0: Port device team_slave_1 added [ 95.009079][ T7941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.061282][ T7941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.107503][ T7941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.137749][ T7941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.189428][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.201256][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.211910][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.220668][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.229889][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.238416][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.246868][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.255238][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.293327][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.316440][ T7939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.407859][ T7949] device hsr_slave_0 entered promiscuous mode [ 95.455822][ T7949] device hsr_slave_1 entered promiscuous mode [ 95.495458][ T7949] debugfs: Directory 'hsr0' with parent '/' already present! [ 95.503581][ T7944] team0: Port device team_slave_0 added [ 95.537673][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.545941][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.553652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.561331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.570462][ T7939] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.578781][ T7944] team0: Port device team_slave_1 added [ 95.600924][ T7947] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.654137][ T7936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.698093][ T7944] device hsr_slave_0 entered promiscuous mode [ 95.735886][ T7944] device hsr_slave_1 entered promiscuous mode [ 95.775512][ T7944] debugfs: Directory 'hsr0' with parent '/' already present! [ 95.785609][ T7947] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.848366][ T7947] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.905441][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.914118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.923031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.930291][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.938270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.946903][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.955199][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.962231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.970133][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.980725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.996057][ T7947] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.041847][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.050642][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.108182][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.126372][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.145063][ T7949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.187427][ T7949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.227647][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.236382][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.245348][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.253933][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.262762][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.277420][ T7941] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.288898][ T7936] device veth0_vlan entered promiscuous mode [ 96.295318][ T7949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.338045][ T7949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.409931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.418581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.426476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.434723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.443782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.452391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.464193][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.472463][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.485314][ T7936] device veth1_vlan entered promiscuous mode [ 96.512098][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.520215][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.528728][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.537789][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.546457][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.553597][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.561546][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.570076][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.578533][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.585563][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.609938][ T7944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.671698][ T7939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.683191][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.696235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.704371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.715986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.724773][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.748739][ T7944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.775748][ C1] hrtimer: interrupt took 24850 ns [ 96.788134][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.797641][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.806354][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 11:34:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) [ 96.824017][ T7941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.837958][ T7941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.862323][ T7944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.888656][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.908895][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.917557][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.929604][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 11:34:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) [ 96.951250][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.959989][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.971497][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.989422][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv0 11:34:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) [ 97.028158][ T7944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.067499][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.079145][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.115580][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.138295][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.162038][ T7939] 8021q: adding VLAN 0 to HW filter on device batadv0 11:34:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) [ 97.191510][ T7947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.235552][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.243024][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.260145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.272137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 11:34:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) [ 97.291375][ T7947] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.306658][ T7941] device veth0_vlan entered promiscuous mode [ 97.317481][ T7949] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.331378][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.339650][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.350462][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.358867][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.369587][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.378126][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.390362][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.399155][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.411534][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.418714][ T7950] bridge0: port 1(bridge_slave_0) entered forwarding state 11:34:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) [ 97.449161][ T7941] device veth1_vlan entered promiscuous mode [ 97.464725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.475917][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.483770][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.496654][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.504641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.513560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.522759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.529832][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.531063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.549038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.557652][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.564696][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.575755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.584642][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:34:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) [ 97.596494][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.608529][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.616979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.623999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.634941][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.643962][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.657071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.667916][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.677315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.686549][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.694467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.702381][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.733777][ T7949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.745683][ T7949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.764910][ T7947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.775923][ T7947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.798001][ T7939] device veth0_vlan entered promiscuous mode [ 97.817040][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.825008][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.834131][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.844694][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.853492][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.862108][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.870807][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.879104][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.888014][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.896571][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.904819][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.913363][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.921807][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.930241][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.939018][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.947537][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.956377][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.965887][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.991756][ T7939] device veth1_vlan entered promiscuous mode [ 98.009311][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.017949][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.026202][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.034521][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.042536][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.050341][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.057895][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.066232][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.076761][ T7947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.087842][ T7944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.109366][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.131677][ T7944] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.147788][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.158095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.199757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.261851][ T8012] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 98.267050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.289134][ T8012] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 98.290892][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.299351][ T8012] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 98.304451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.309081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.329451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.338174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.345401][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state 11:34:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904014865161a000100050000000089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904024865161a000100050000740089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) 11:34:32 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) [ 98.383589][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.391881][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.401351][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.410757][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.419670][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.428438][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.437195][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.446081][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.471872][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.483990][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.491459][ T8020] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 98.492674][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.510422][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.534019][ T8020] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 98.539285][ T7944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.562596][ T7944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.608957][ T7947] device veth0_vlan entered promiscuous mode [ 98.616440][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.638268][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.647108][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.655649][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.663914][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.672207][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.688103][ T7949] device veth0_vlan entered promiscuous mode [ 98.699498][ T7949] device veth1_vlan entered promiscuous mode [ 98.708905][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.717307][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.725120][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.733149][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.742321][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.751374][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.759420][ T7955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.769105][ T7947] device veth1_vlan entered promiscuous mode [ 98.779674][ T7944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.787359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.795465][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.803210][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.810977][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.818533][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.829514][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.857292][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.866029][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.883527][ T7944] device veth0_vlan entered promiscuous mode [ 98.902279][ T7944] device veth1_vlan entered promiscuous mode [ 98.930759][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.949790][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.959327][ T8026] BPF:[1] FUNC _ [ 98.962976][ T8026] BPF:type_id=65536 [ 98.977526][ T8031] fuse: blksize only supported for fuseblk [ 98.979354][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.005207][ T8026] BPF: [ 99.023469][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.030422][ T8026] BPF:Invalid type_id [ 99.032207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.034996][ T8026] BPF: [ 99.034996][ T8026] [ 99.046509][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 11:34:33 executing program 3: r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x0, 0x0, 0xffffffffffffffff) 11:34:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x15, 0x0, 0x1000000, 0x0, 0x0, "00000000000000000000000000000000027300"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:34:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904014865161a000100050000000089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904024865161a000100050000740089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) 11:34:33 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2280, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000200)) r7 = socket(0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x28090) 11:34:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 11:34:33 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1, 0x0, 0x0, 0xc, 0x0, 0x10000}]}, {0x0, [0x5f]}}, &(0x7f0000000040)=""/189, 0x27, 0xbd, 0x8}, 0x20) [ 99.236839][ T8047] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 99.253536][ T8048] BPF:[1] FUNC _ [ 99.273082][ T8047] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 99.283430][ T8051] ================================================================== [ 99.291539][ T8051] BUG: KCSAN: data-race in echo_char / n_tty_receive_char_special [ 99.299327][ T8051] [ 99.301664][ T8051] write to 0xffffc900025e1018 of 8 bytes by task 2626 on cpu 1: [ 99.309301][ T8051] echo_char+0x14e/0x1c0 [ 99.313541][ T8051] n_tty_receive_buf_common+0x1739/0x1b00 [ 99.319262][ T8051] n_tty_receive_buf2+0x3d/0x60 [ 99.324120][ T8051] tty_ldisc_receive_buf+0x71/0xf0 [ 99.329262][ T8051] tty_port_default_receive_buf+0x87/0xd0 [ 99.334986][ T8051] flush_to_ldisc+0x1d5/0x260 [ 99.335861][ T8048] BPF:type_id=65536 [ 99.339668][ T8051] process_one_work+0x3d4/0x890 [ 99.339696][ T8051] worker_thread+0xa0/0x800 [ 99.352823][ T8051] kthread+0x1d4/0x200 [ 99.356900][ T8051] ret_from_fork+0x1f/0x30 [ 99.361329][ T8051] [ 99.362982][ T8048] BPF: [ 99.363658][ T8051] read to 0xffffc900025e1018 of 8 bytes by task 8051 on cpu 0: [ 99.363676][ T8051] n_tty_receive_char_special+0x12a6/0x1c10 [ 99.363703][ T8051] n_tty_receive_buf_common+0x1844/0x1b00 [ 99.383249][ T8048] BPF:Invalid type_id [ 99.388071][ T8051] n_tty_receive_buf+0x3a/0x50 [ 99.388087][ T8051] tty_ioctl+0xb75/0xe10 [ 99.388106][ T8051] do_vfs_ioctl+0x84f/0xcf0 [ 99.388122][ T8051] ksys_ioctl+0xbd/0xe0 [ 99.388139][ T8051] __x64_sys_ioctl+0x4c/0x60 [ 99.388157][ T8051] do_syscall_64+0xcc/0x3a0 [ 99.388177][ T8051] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.388181][ T8051] [ 99.388185][ T8051] Reported by Kernel Concurrency Sanitizer on: 11:34:33 executing program 3: r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x0, 0x0, 0xffffffffffffffff) [ 99.388203][ T8051] CPU: 0 PID: 8051 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 99.388221][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.447391][ T8048] BPF: [ 99.447391][ T8048] [ 99.451986][ T8051] ================================================================== [ 99.451997][ T8051] Kernel panic - not syncing: panic_on_warn set ... [ 99.452017][ T8051] CPU: 0 PID: 8051 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 11:34:33 executing program 3: r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x0, 0x0, 0xffffffffffffffff) [ 99.452037][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.478065][ T8050] fuse: blksize only supported for fuseblk [ 99.480065][ T8051] Call Trace: [ 99.499208][ T8051] dump_stack+0x11d/0x181 [ 99.503554][ T8051] panic+0x210/0x640 [ 99.507449][ T8051] ? vprintk_func+0x8d/0x140 [ 99.512074][ T8051] kcsan_report.cold+0xc/0xd [ 99.516681][ T8051] kcsan_setup_watchpoint+0x3fe/0x460 [ 99.522066][ T8051] __tsan_read8+0xc6/0x100 [ 99.526490][ T8051] n_tty_receive_char_special+0x12a6/0x1c10 [ 99.532400][ T8051] n_tty_receive_buf_common+0x1844/0x1b00 [ 99.538135][ T8051] ? n_tty_receive_buf2+0x60/0x60 [ 99.543164][ T8051] n_tty_receive_buf+0x3a/0x50 [ 99.547932][ T8051] tty_ioctl+0xb75/0xe10 [ 99.552190][ T8051] ? tty_vhangup+0x30/0x30 [ 99.556615][ T8051] do_vfs_ioctl+0x84f/0xcf0 [ 99.561117][ T8051] ? tomoyo_file_ioctl+0x34/0x40 [ 99.566074][ T8051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.572334][ T8051] ksys_ioctl+0xbd/0xe0 [ 99.576626][ T8051] __x64_sys_ioctl+0x4c/0x60 [ 99.581226][ T8051] do_syscall_64+0xcc/0x3a0 11:34:33 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 99.585754][ T8051] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.591648][ T8051] RIP: 0033:0x45af49 [ 99.595633][ T8051] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 99.615309][ T8051] RSP: 002b:00007fcddd6c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.623723][ T8051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 99.631704][ T8051] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000005 [ 99.639676][ T8051] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 99.647648][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcddd6c86d4 [ 99.655628][ T8051] R13: 00000000004c62a7 R14: 00000000004dd8f0 R15: 00000000ffffffff [ 99.664845][ T8051] Kernel Offset: disabled [ 99.669208][ T8051] Rebooting in 86400 seconds..