[ 39.889035] audit: type=1800 audit(1546824659.113:25): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 39.909216] audit: type=1800 audit(1546824659.113:26): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 39.945374] audit: type=1800 audit(1546824659.113:27): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 39.980594] audit: type=1800 audit(1546824659.113:28): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/01/07 01:31:08 fuzzer started 2019/01/07 01:31:10 dialing manager at 10.128.0.26:34981 2019/01/07 01:31:11 syscalls: 1 2019/01/07 01:31:11 code coverage: enabled 2019/01/07 01:31:11 comparison tracing: enabled 2019/01/07 01:31:11 setuid sandbox: enabled 2019/01/07 01:31:11 namespace sandbox: enabled 2019/01/07 01:31:11 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/07 01:31:11 fault injection: enabled 2019/01/07 01:31:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/07 01:31:11 net packet injection: enabled 2019/01/07 01:31:11 net device setup: enabled 01:34:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x4240) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0xfb0, 0x3, 0x1, 0x2, &(0x7f0000000040)=[{}, {}, {}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setreuid(r1, r2) r3 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$sock_proto_private(r3, 0x89e4, &(0x7f00000004c0)="097484a6a7984f14df55585d6953d766b93329f5ceef7c574f3ec62d35a1d21fce5b6b7ed2abfcb3bfeb4144af85534c16ccfa14e6e75ddd1cd2389f37e22d2ba6c3ec03f92632540f61fb03270e098cbc6fb93a3aade3a68c4b462282a546fda0244f2fd75a3095f90b9beab147358c8bff0a18f983cd2ee103e415186a211be345ef4e4cafd0c8f47c6c6a2c289745d4") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x80000000, 0x7fffffff, 0x3, 0x0, 0x24}, &(0x7f0000000640)=0x98) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000680)={r4, 0x6, 0x3}, 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x6) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000740)={r4, 0x80}, 0x8) ioctl$KDSETLED(r3, 0x4b32, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vga_arbiter\x00', 0x8800, 0x0) lsetxattr$security_evm(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='security.evm\x00', &(0x7f0000000840)=@ng={0x4, 0x12, "126d"}, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000880)={r4, 0x0, 0x6, 0x400, 0x7fffffff, 0x3}, &(0x7f00000008c0)=0x14) ioctl$TUNSETLINK(r5, 0x400454cd, 0x110) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, &(0x7f0000000900)=0x8001) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000940)=0x200) r6 = open(&(0x7f0000000980)='./file0\x00', 0x4200, 0x152) iopl(0x5) getsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={r4, @in6={{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}}, 0x0, 0x9, 0x2, 0xc77}, 0x98) umount2(&(0x7f0000000b00)='./file0\x00', 0x1) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000000b40)=""/50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_pts(r5, 0x404000) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000b80)=0x1, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000bc0)={'HL\x00'}, &(0x7f0000000c00)=0x1e) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000c40)={0x10001, 0x8, 0x0, [{0x0, 0xb76, 0x5, 0x80000000, 0x7, 0x2, 0x54}, {0x3, 0x0, 0x9388, 0x8, 0x4, 0xf40, 0x1000}, {0x8, 0xffffffffffff87f7, 0xa30, 0x15bd, 0x7, 0xffffffffffff1c04, 0x7}, {0x800, 0x1ff, 0x9, 0x3, 0x3800000, 0x4, 0x8}, {0x0, 0x6, 0x2, 0x3, 0x8, 0x8, 0xffffffffffffffff}, {0x3ff, 0x100, 0x31, 0xfffffffffffffffa, 0xff, 0x0, 0x1}, {0x0, 0x1ff, 0x1, 0x0, 0xffffffff, 0x100000001}, {0x2c, 0x26, 0xffffffff, 0x10001, 0x9, 0x2, 0x7}]}) syzkaller login: [ 255.255693] IPVS: ftp: loaded support on port[0] = 21 01:34:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20001, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0xb3, 0x7747}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x201, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f00000000c0)=0x2) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000100)={[{0x1000, 0x5, 0x1, 0x9, 0x7f, 0x4, 0xfffffffffffff8f1, 0x8, 0x2, 0x3ff, 0xffffffffffffffe1, 0x3ff, 0x6}, {0x7, 0x0, 0x7, 0x8001, 0x8, 0x7fffffff, 0x1, 0x7, 0x8, 0x4, 0xa, 0x7ff, 0xff}, {0x4, 0xa00000000, 0x7, 0x1, 0x9, 0x7, 0x4, 0xa1, 0x6, 0x2, 0x6, 0xc2, 0x100000001}], 0x2}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'veth1_to_bond\x00', 0x5}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000001c0)={0x5, 0x9}) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000200)={0x2004, 0x0, 0x5, 0x3ff, 0x10000}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="f6fc440f20c0350b000000440f22c00f01760d8fc9788372000f2256c4e2e59374a57a0f20e035000040000f22e0ea0c00000045000f32c4c3297e090f", 0x3d}], 0x1, 0x28, &(0x7f00000002c0)=[@flags={0x3, 0x1000}, @flags={0x3, 0x100800}], 0x2) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000300)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x8, 0xb0b, 0x8, 0xff, 0x8e}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000380)=0x1, 0x4) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x7f, 'syz0\x00', @null, 0x5, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ff2000/0xb000)=nil, 0xb000}, &(0x7f0000000480)=0x10) fsync(r0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x196) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000004c0)={0x3, "5fd68432076e3930ebc971a95b62574439b186f86b348352d40e7c2a615e6517"}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500), 0x4) sendfile(r1, r2, &(0x7f0000000540), 0x509) r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000fee000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000580)="660f5e71550f01d166b8ff8fffff0f23c80f21f866350800b0000f23f866b9800000c00f326635008000000f300f01cf0fc79b3350363e360f6615f68db30021baf80c66b840cef78566efbafc0cb8b4c0ef0f08", 0x54}], 0x1, 0x1, &(0x7f0000000640)=[@dstype3={0x7, 0x9}, @dstype0={0x6, 0x4}], 0x2) setxattr$security_smack_transmute(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000700)='TRUE', 0x4, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x8001) write$FUSE_INTERRUPT(r0, &(0x7f0000000740)={0x10, 0x0, 0x6}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000780)=@ethtool_rxfh_indir={0x38, 0x7, [0x0, 0x1, 0xc1b1, 0x1, 0xdb0b, 0xce7a, 0x2]}}) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() write$FUSE_ATTR(r0, &(0x7f00000008c0)={0x78, 0x0, 0x7, {0x5, 0x7fff, 0x0, {0x5, 0x3, 0x5, 0x2, 0x3, 0x4, 0x7, 0xff, 0x3b3, 0xf2, 0x1, r4, r5, 0x80000001, 0xfb}}}, 0x78) [ 255.373627] chnl_net:caif_netlink_parms(): no params data found [ 255.479889] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.486668] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.509116] device bridge_slave_0 entered promiscuous mode [ 255.517259] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.531333] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.541625] device bridge_slave_1 entered promiscuous mode [ 255.565325] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 255.575019] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 255.604482] IPVS: ftp: loaded support on port[0] = 21 [ 255.624288] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 255.633984] team0: Port device team_slave_0 added 01:34:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1, @time={0x77359400}, 0x1f, {0x6, 0x8000}, 0x4, 0x2, 0x80000001}) alarm(0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000000c0)={[0x10d001, 0x2000, 0x100000], 0x80000000, 0x10, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x20, @time, 0x101, {0x6}, 0x34, 0x1, 0x8}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x100) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000200)) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000240)) fsync(r0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[0x6, 0xffe00, 0x0, 0x800, 0x6, 0xf92, 0x3, 0x80000000, 0x4, 0x7b, 0x7, 0x2, 0x48, 0x0, 0x9, 0x2], 0x0, 0x2000}) r1 = getpgid(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x6) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x100, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000003c0)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={&(0x7f00000004c0)=""/12, 0x10000, 0x800, 0x802}, 0x18) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@random={'system.', '/dev/urandom\x00'}) sendto$ax25(r0, &(0x7f00000005c0)="3b90bab69ce0d86e1d0fd67f918785a86855e4074e8069994825d09fbe423bbfc02e10d5fa95d0777d41c39621abdd8282e9e61f438a7bf981146613ce4c43", 0x3f, 0x4000, &(0x7f0000000600)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ioctl$void(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'veth0_to_bridge\x00', 0x101}) fchmodat(r0, &(0x7f00000006c0)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x3, 0x3, 0x5, 0x7, 0x0, 0x199a, 0x8404, 0xa, 0x6, 0x5, 0x10000, 0x9, 0x4, 0x8, 0x6, 0x7, 0x1, 0x86, 0x7, 0x0, 0x3ff, 0x6, 0x59, 0xfff, 0x81, 0x4, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x9, 0x0, 0x2, 0x5, 0x3, 0x0, 0x100000001, 0x0, @perf_config_ext={0x4, 0x1f}, 0x800, 0x3, 0x1, 0x1, 0x5, 0x0, 0x401}, r1, 0x7, r0, 0x3) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000780)=0x1) write$P9_RMKDIR(r0, &(0x7f00000007c0)={0x14, 0x49, 0x1, {0x97, 0x0, 0x4}}, 0x14) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000900)={0x6, &(0x7f0000000800)="1d9936d00d0054ead89224dcd69577c94936712424df987d7dc8b04dc898b730818bfa1dd57497de8feed2e1d812b950ce401d5db29880236c586c3524b096eb6e556ca79a62e6fd4feb29cf2297e4c0673083368bdc50b33dce9fb71d0c3f4b69ce8c6c67c039158bd9c5a002a8f53515ec207b2238b87f3717a44c22a62a4695c6c5086e88b6ccfd8ce8da467792b990a80dbad45c55c499ad3220749068bfdf098ebbf354b19d1f0593d2bec53e31a83deff8d0f5368c24c6051cefd36d9c10268e2c8412110b0d23da0fd6"}) getpid() r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000940)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000980)={0x2, @local}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000009c0)=0x2, 0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000a00)=0x40, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) [ 255.653872] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 255.661634] team0: Port device team_slave_1 added [ 255.690782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 255.698479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 255.811315] device hsr_slave_0 entered promiscuous mode 01:34:35 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x54, 0x5a29, 0x1055fd64, {0xb, 0xd6}, {0x1, 0x68}, @period={0x58, 0x81, 0x100000001, 0x1ff, 0x7, {0x100, 0x3, 0x7}, 0x5, &(0x7f0000000040)=[0x0, 0x8001, 0x9, 0x5, 0x2]}}) ioctl$TIOCCBRK(r0, 0x5428) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'\x00', 0x2}) r1 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="a49b78cb0b2f6ce7fdbcfd4f718acbec8a2e92b9c310050135f748cf6f912b55216f0813e6005f031fa2ff27ccbc8ee3ad04bfe3501619883e2d81a0e72a14fff09216c16c928092f52b5be587549d5579efef34c3bfae3117bac4f98561c8b75508ae5b5f6c5881963afb9fb6419fee7e55d1c6bc4ab635888e1856b15224de5a28f98e8f54", 0x86, 0xfffffffffffffffa) r2 = add_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="c53a6115806893cd7dc178461c", 0xd, 0xfffffffffffffff9) keyctl$reject(0x13, r1, 0x80000000, 0xfc2, r2) ioctl$TIOCNXCL(r0, 0x540d) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) ptrace$setsig(0x4203, r3, 0x7, &(0x7f00000003c0)={0x28, 0x6, 0x2}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000440)) sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000004c0)) keyctl$negate(0xd, r2, 0x400, r1) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000540)={r4, 0x80000, r0}) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000580)=""/229) fchmod(r0, 0x40) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000680)) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000006c0)) keyctl$negate(0xd, r1, 0x4, r2) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r0, &(0x7f0000000700)={r0, r5, 0x9}) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() write$FUSE_ENTRY(r0, &(0x7f00000007c0)={0x90, 0x0, 0x6, {0x2, 0x3, 0x2, 0x3, 0x6, 0x1, {0x6, 0x80, 0x1000, 0x4, 0xb8, 0x8000, 0x0, 0x3, 0xffffffffffffff75, 0x5, 0x80, r6, r7, 0x3, 0x77d33f23}}}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={r0, r0, 0xa, 0x2}, 0x10) ptrace$getregs(0xe, r3, 0x6, &(0x7f00000008c0)=""/78) [ 255.882410] device hsr_slave_1 entered promiscuous mode [ 255.988658] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 255.995664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 256.025757] IPVS: ftp: loaded support on port[0] = 21 [ 256.041798] IPVS: ftp: loaded support on port[0] = 21 01:34:35 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x400000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x3, @remote, 0x4}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x12}, 0xffffffff80000000}, 0x401, [0x80, 0xf2c8, 0x8000, 0x7ff, 0x20, 0x29ba, 0xffffffffffff8814, 0x4]}, 0x5c) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x8000, 0xca, "c1fe69ea66d4b74f902ef1aa2b626cae3c645386c520715fb0ed7e334143a1a50082647f2e0891a0938ba01de6fc4ba429ff738d9b4c92f3c4559e54b1acf805d7263b3f472fc4d780a169ce0af7bca37bbc68f312b6c91ccfc99add7c6470fd8e7b0155c92bcc2223293505d22b7d71ec881a99bbc9f80be2194a0aca8a9ebb46b4191f06abed3553b5fc46a7f09b15f7fcd93c596a2634c56d55c348989b74cb00a0da14346a0b23690f56669ce5008e85ad5f3a0a9e9d7f2cf2adf744d0afdb9551979fd56482f607"}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getrusage(0x1, &(0x7f00000001c0)) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000002c0)={0x5, 0x7, 0x4e}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x1, 0x0, 0xffffffffffffff31}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r2, 0x5f, "47451e8cffa6fc1cce48a1a42fc0f6aa7c3441ffe827dea08ab605d31865f7d5e0035be861cf0e3a0febbb61f79f9817ad4aaa61bfa1e730c0df5f66492e891c1734d01bcb802c562f195ece104a49b142857977f2422dff7821f35d6ad2a9"}, &(0x7f0000000400)=0x67) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000440)) r4 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x7f, 0x40400) r5 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x7, 0x400000) sendto$inet6(r4, &(0x7f0000000500)="db75759897fa3f28ed157c6fa6faf1e2a92e71528f75b0a3d86e00732c73bda2fcab4c305ba6783019fc2c777ce15d4c6b416d9909a37c7dc7cc23ade6b36e81a533b406486e43c2145d12630552a1edde4c35c719baefd689bd9fd852e4b1e168bc65a4a175f82da3e78af2b9a31b19be", 0x71, 0x4, &(0x7f0000000580)={0xa, 0x4e23, 0xb58, @local, 0xfffffffffffff122}, 0x1c) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000005c0)={0x1, 0x7}) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000640)={r3, @in6={{0xa, 0x4e20, 0x8, @loopback, 0x1}}, 0x2, 0x6, 0x1, 0x80000000, 0x2a33}, &(0x7f0000000700)=0x98) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000780)={0x34, 0x0, &(0x7f0000000740)}) r6 = msgget$private(0x0, 0x100) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000008c0)=0xe8) getresgid(&(0x7f0000000900)=0x0, &(0x7f0000000940), &(0x7f0000000980)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000ac0)=0xe8) getresgid(&(0x7f0000000b00)=0x0, &(0x7f0000000b40), &(0x7f0000000b80)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000bc0)=0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000c00)=0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000c40)={{0x93, r7, r8, r9, r10, 0x40, 0x8}, 0x4, 0x80, 0x5, 0x1, 0x1, 0x0, r11, r12}) syz_open_dev$midi(&(0x7f0000000cc0)='/dev/midi#\x00', 0x7fff, 0x40001) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000d40)={0x8, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}, {}]}) write$P9_RREADDIR(r4, &(0x7f0000000d80)={0x68, 0x29, 0x1, {0x423, [{{0x2, 0x0, 0x4}, 0x7, 0x2, 0x7, './file0'}, {{0x1, 0x4, 0x4}, 0x1, 0x800, 0x7, './file0'}, {{0xc0, 0x1, 0x6}, 0x0, 0x1, 0x7, './file0'}]}}, 0x68) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000e00)) [ 256.062078] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.068633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.075576] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.081987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.269141] chnl_net:caif_netlink_parms(): no params data found [ 256.357717] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 256.364482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.380458] IPVS: ftp: loaded support on port[0] = 21 01:34:35 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$TIOCSTI(r0, 0x5412, 0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xd7a1, 0x3, 0xfffffffffffff000}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1, 0x1}, 0x8) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000000c0)=0x24d5) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x6, 0x4) write$capi20_data(r0, &(0x7f0000000140)={{0x10, 0x9, 0x87, 0x83, 0x80000001}, 0xbd, "d51bf1d8dc4d2e09929a7d89f75e055c39c7c738d76f164ff5c9bb7c3f778d1de5f5f79f8129ad1005d86964133b8a40c982668c6f903cadc3ba32b67798f73d2dddb2dd6c803ec449c9e7ba3306139c43160d7dea883bcc4be6c044dd8c382ffb4f7100f41220a73f7bfe5fadbe282d65ce52291e29882b884a75a9c39d11cd42c4f1399e01b2ba86822b2b6df2f4b62e9f10a2d3f5274a031bf434f837bbc8fc53ef7e81a735b209a5346c875990140a2c4a9d2893dd4b1e2ad455a2"}, 0xcf) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="bc2e2768b457bcfcadec34559394306223fa4fe6dbe65a82264d5880509bf906853740f785d150f5bd52eeac7d22a2e932872e17e1933c35c636ddf28251ed74b08d95c270254e5aeb0d8747e59cd6a50955f1888dcb65e1c0c19b38893313009a19b26ab2d7d212620f7fe8822e636aae45ae000bd2ce9bdebf9ba92fa0785159aac1d77c7eda089def7166504b806ad2e7ba972cf6051b797e84b7efc627fe660fa0469a5d21d21a1e5d2e5bf007cd14738587d7eb3da7ea652a9db232e6efcff59e8d1a2e77e0be6dcef32361d951e12de0e922cc259c0698ea04af2031355ca22135d0478878b7a44864e30bc637a85d46a9f6d2fcfc71487ac672", 0xfd}, {&(0x7f0000000380)="4241742ea6e63d6f3a565674d6c76e", 0xf}], 0x2, &(0x7f0000000400)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0xfffffffffffffffc, 0x204, 0x9, 0x6, 0x1f, 0x81, 0x6, r1}}, @dstaddrv6={0x20}, @init={0x18, 0x84, 0x0, {0x8, 0x2, 0x1, 0x401}}], 0x68, 0x4}, 0x24000004) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @dev, @broadcast}, &(0x7f0000000580)=0xc) accept4$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14, 0x80800) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001900)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000001940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) getpeername(r0, &(0x7f0000002b80)=@can={0x1d, 0x0}, &(0x7f0000002c00)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002c40)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000002d40)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002d80)={'nr0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004f80)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000005080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000050c0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@initdev}}, &(0x7f00000051c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005200)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000005300)=0xe8) getpeername$packet(r0, &(0x7f0000005340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005380)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000053c0)={@mcast2, 0x0}, &(0x7f0000005400)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005440)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000005540)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005580)={{{@in6=@ipv4={[], [], @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000005680)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000056c0)={@remote, 0x0}, &(0x7f0000005700)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000005880)={@empty, @multicast2, 0x0}, &(0x7f00000058c0)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005900)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000005940)={@local, @multicast1, 0x0}, &(0x7f0000005980)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000059c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000005ac0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b00)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005b40)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000005c40)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005c80)={'bond0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000005cc0)={@local, @multicast1, 0x0}, &(0x7f0000005d00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005d40)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000005e40)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000006680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006640)={&(0x7f0000005e80)={0x78c, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x134, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r14}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x184, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r22}, {0xbc, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r23}}, {0x8}}}]}}, {{0x8, 0x1, r24}, {0xa8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xb240000000000}}, {0x8, 0x6, r25}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x460b, 0xfffffffffffffffa, 0xffffffffffffffff, 0x8}, {0x100000001, 0x200, 0x5bc4, 0x3}, {0x6, 0x8, 0xffffffff7fffffff, 0xdb}, {0x7, 0x7fff, 0xfffffffffffffe00, 0x3f}, {0x10, 0x4, 0x1, 0x7}, {0x4, 0x8, 0x6, 0x7}]}}}]}}, {{0x8, 0x1, r26}, {0x128, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 256.454789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.484635] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.505798] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.516031] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 256.577241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.584031] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.590544] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.597437] device bridge_slave_0 entered promiscuous mode [ 256.607259] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.613731] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.620681] device bridge_slave_1 entered promiscuous mode [ 256.633159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.640700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.684269] IPVS: ftp: loaded support on port[0] = 21 [ 256.684467] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 256.700780] chnl_net:caif_netlink_parms(): no params data found [ 256.718072] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 256.724159] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.731863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.739810] chnl_net:caif_netlink_parms(): no params data found [ 256.823009] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 256.832164] team0: Port device team_slave_0 added [ 256.838475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 256.879889] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 256.887431] team0: Port device team_slave_1 added [ 256.893675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.903474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.911330] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.917667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.938884] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.945252] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.956203] device bridge_slave_0 entered promiscuous mode [ 256.964245] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 256.972050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 256.983551] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.990933] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.998018] device bridge_slave_0 entered promiscuous mode [ 257.004827] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.011974] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.019081] device bridge_slave_1 entered promiscuous mode [ 257.033368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 257.051236] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.057660] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.064811] device bridge_slave_1 entered promiscuous mode [ 257.083947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.091849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.099613] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.105950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.140867] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.210207] device hsr_slave_0 entered promiscuous mode [ 257.248329] device hsr_slave_1 entered promiscuous mode [ 257.293295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 257.301241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 257.316378] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 257.325831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.340010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.352444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 257.361315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.371215] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.403849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.447656] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.456719] team0: Port device team_slave_0 added [ 257.466900] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.474993] team0: Port device team_slave_1 added [ 257.480438] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.487756] team0: Port device team_slave_0 added [ 257.493643] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.501219] team0: Port device team_slave_1 added [ 257.506669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 257.517401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 257.537406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 257.546195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 257.558101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.565854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.574863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.582787] chnl_net:caif_netlink_parms(): no params data found [ 257.590948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 257.656989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 257.671159] chnl_net:caif_netlink_parms(): no params data found [ 257.729790] device hsr_slave_0 entered promiscuous mode [ 257.768284] device hsr_slave_1 entered promiscuous mode [ 257.828935] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 257.836218] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 257.901170] device hsr_slave_0 entered promiscuous mode [ 257.958310] device hsr_slave_1 entered promiscuous mode [ 258.034039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.042496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.072095] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 258.088117] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 258.095485] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 258.125415] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.132088] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.139339] device bridge_slave_0 entered promiscuous mode [ 258.146177] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.152670] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.160210] device bridge_slave_1 entered promiscuous mode [ 258.176756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 258.203081] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.210022] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.216959] device bridge_slave_0 entered promiscuous mode [ 258.225285] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.232086] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.239936] device bridge_slave_1 entered promiscuous mode [ 258.247030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.254830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.267142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 258.285554] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 258.300422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.308716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.322232] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 258.328447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.336816] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 258.362475] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 258.372598] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 258.391608] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.399903] team0: Port device team_slave_0 added [ 258.406311] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 258.415450] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 258.425331] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 258.435290] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.444031] team0: Port device team_slave_1 added [ 258.449774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.457345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.482120] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.489640] team0: Port device team_slave_0 added [ 258.495653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.503146] team0: Port device team_slave_1 added [ 258.530639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.542720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.602023] device hsr_slave_0 entered promiscuous mode [ 258.658367] device hsr_slave_1 entered promiscuous mode [ 258.708764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.746814] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 258.781226] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 01:34:38 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x6cefff7f00000000) [ 258.838811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.860900] device hsr_slave_0 entered promiscuous mode 01:34:38 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@case_sensitive_yes='case_sensitive=yes'}, {@gid={'gid'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}]}) [ 258.898317] device hsr_slave_1 entered promiscuous mode [ 258.938865] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 258.945910] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 258.957215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.970797] __ntfs_error: 2 callbacks suppressed [ 258.970808] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 258.987359] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.011413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.020616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 259.031286] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.041312] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 259.054640] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 259.063997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.071699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.095568] 8021q: adding VLAN 0 to HW filter on device bond0 01:34:38 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@case_sensitive_yes='case_sensitive=yes'}, {@gid={'gid'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}]}) [ 259.106748] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 259.113157] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.137713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.164609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.177173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.198318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.214693] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 259.219354] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 259.222194] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.240511] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.251458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.262569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.270655] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.277016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.288503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 01:34:38 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b408000000fab771172119000020002000004e5e0000388022"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 259.311673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.321426] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.348874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.359341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.367243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.384566] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.390973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.399704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.406701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 01:34:38 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) creat(0x0, 0x108) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000580)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) [ 259.416536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 259.432856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.449900] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 259.455978] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.469430] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.485653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.493889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.504228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.513669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.531370] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.537727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.562521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.574933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.585278] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.591730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.608301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.625762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.637179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 259.656812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.688816] hrtimer: interrupt took 37181 ns [ 259.711006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 259.721572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 259.739345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 259.756821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 259.767024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 259.784865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 259.797213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.814347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.825700] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 259.854376] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 259.876288] 8021q: adding VLAN 0 to HW filter on device batadv0 01:34:39 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x571fee3c) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r0, 0x0, 0x0) write(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) open(0x0, 0x0, 0x0) [ 263.066521] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.073249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.083411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 01:34:42 executing program 0: quotactl(0x80000101, 0x0, 0x0, &(0x7f00000001c0)) [ 263.114265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.138764] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.145183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.159119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.167196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.183227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.196309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.206666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.216845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.225520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.233501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.242335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.250290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.257809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.265206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.274675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 263.282159] attempt to access beyond end of device [ 263.287210] loop0: rw=1, want=33001, limit=112 [ 263.295191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 263.311774] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 263.318121] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.324204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.331373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.338354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.345980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.354621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.363091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.371304] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.377657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.384703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.405466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.415685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 263.430803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 263.446784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 263.458440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.466492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.481305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.489690] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.496043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.507385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.516474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.524742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.534691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 263.546971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.555004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.563021] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.569416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.579988] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.587679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 263.595710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 263.606211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 263.617728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 263.627090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.634860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.644799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.652657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.660777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.668599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.676732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.686480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 263.695712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.704671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.713319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.721200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.728261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.737344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 263.746089] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 263.752270] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.760480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 263.769093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 263.776314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.784004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.792744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.800685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.808380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.818761] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 263.824956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.835968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 263.846523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 263.855881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 263.864567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.872686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.880568] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.886905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.893837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.902111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.909890] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.916225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.923108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.930816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.940362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 263.950544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 263.963240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 263.970987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.979238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.986151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.993868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.001367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.009861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.017380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.032937] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 264.039069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.057098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 264.067675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 264.077042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.087598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.096033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.106905] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 264.119063] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 264.132044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 264.140482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 264.150482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.158539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.165892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.173872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.182152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.192532] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 264.199378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.213657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.223679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.232562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 264.246372] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 264.258000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.265962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.279004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 264.298580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 264.319400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.335820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.344515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.365753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.377185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.394285] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 264.402881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.468259] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 264.494730] 8021q: adding VLAN 0 to HW filter on device batadv0 01:34:43 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) clone(0x802102001dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:mount_exec_t:s0\x00', 0x12, 0x0) 01:34:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x6cefff7f00000000) 01:34:43 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x3, 0xfffffffffffffccd) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000280)='/\x00', 0x0) pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r3, r5, 0x0, 0x20020102000007) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, [], [{0x2, 0x3, 0x6, 0x3, 0x101, 0x48000000}, {0x2, 0x0, 0x1ff, 0x0, 0x7, 0x20}]}) write$P9_RFLUSH(r6, &(0x7f0000000680)={0x7}, 0xffffff50) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) 01:34:44 executing program 4: r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = dup(r0) write(r1, &(0x7f00000006c0)="2400000058001f03ff07f4f9002304000a04f511080001000201009f0800028001000000", 0x24) 01:34:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x1000000e8) fcntl$setstatus(r1, 0x4, 0x46d00) io_setup(0x5, &(0x7f0000000140)=0x0) fstat(0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$input_event(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10020, 0x0) 01:34:44 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9c}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clone(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="c457e3a240b44ca5f91a32d87173fbe2782723aa6a90db0bcc36976ea618abd795419d6e8aae3c7ab0b5a11694cd63b7384cc5") ptrace$cont(0x9, r0, 0x0, 0x0) 01:34:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = dup3(r0, r1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfffffffffffffd99) rt_sigpending(0x0, 0x0) inotify_init1(0x0) setsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, 0x0) 01:34:44 executing program 3: syz_execute_func(&(0x7f0000000340)="3666440f50f564ff0941c30f0f441e04a4c4c27d794e0066420fe2e33e0f1110c442019dcc6f") semctl$SETALL(0x0, 0x0, 0x11, 0x0) 01:34:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200), 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 264.852073] warning: process `syz-executor1' used the deprecated sysctl system call with 01:34:44 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x81830, r0, 0x2000100000000) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='teql0\x00'}, 0x10) write$P9_RATTACH(r1, &(0x7f0000000440)={0x14}, 0x14) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) shutdown(0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a667020000000000000008004947a790010000000000000093987b938fdedfce7bbba4fec2d8a09c41fb23324df2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) syslog(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000)="1b", 0x1, 0x8000, 0x0, 0x0) close(r2) 01:34:44 executing program 4: r0 = socket$inet(0x2, 0x3, 0x800000800000001) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 01:34:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) dup3(r0, r1, 0x0) 01:34:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r1) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) [ 265.097114] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure 01:34:44 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="fc00000048000700ab092500090007000a060000000000000000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 01:34:44 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x3, 0xfffffffffffffccd) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000280)='/\x00', 0x0) pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r3, r5, 0x0, 0x20020102000007) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, [], [{0x2, 0x3, 0x6, 0x3, 0x101, 0x48000000}, {0x2, 0x0, 0x1ff, 0x0, 0x7, 0x20}]}) write$P9_RFLUSH(r6, &(0x7f0000000680)={0x7}, 0xffffff50) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) 01:34:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) 01:34:44 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:34:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)) 01:34:44 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x0, [{{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @ipv4}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x440e) 01:34:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) readlink(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000001c0)) [ 265.519196] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 265.561690] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:34:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000380)) 01:34:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) readlink(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000001c0)) 01:34:45 executing program 3: socket$inet(0x2, 0x0, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000001e0007031dfffd946f610500070000001f00000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 01:34:45 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 01:34:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) 01:34:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000380)) 01:34:45 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {0x8}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 01:34:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000680)=0x19000000, 0x2989a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 01:34:45 executing program 2: socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000001e0007031dfffd946f610500070000001f00000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:45 executing program 3: r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000a01000000000000000000009500000000000000"], 0x0, 0x5c4, 0x1000, &(0x7f0000002800)=""/4096}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000001280)=r1, 0x4) 01:34:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 01:34:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) 01:34:45 executing program 5: close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740), 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000003c0)=@ethernet={0x306, @local}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[]}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x0, 0x0, 0x0, 0x0) 01:34:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x200000000000009, 0x1}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), 0x0}, 0x20) [ 266.507996] protocol 88fb is buggy, dev hsr_slave_0 [ 266.513298] protocol 88fb is buggy, dev hsr_slave_1 [ 266.528898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 01:34:45 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x80, 0x0, 0x0, &(0x7f0000000240)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/115, 0x73}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x8000a0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 01:34:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000039c0)=[{{&(0x7f0000000580)=@alg, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000740)=""/11, 0xb}], 0x3}, 0x1f}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/173, 0xad}, {&(0x7f0000000900)}], 0x2}, 0x2}, {{0x0, 0x0, 0x0}}], 0x3, 0x2, &(0x7f0000003b00)={0x77359400}) 01:34:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4), 0xffffffffffffff1f, 0x0, 0x0}) 01:34:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0109048c590a88bfffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e0000000000d5a49b19007a9eace3dbe8b12c000000000000000000", 0x48}], 0x1) [ 266.835799] binder: 8208:8211 unknown command 0 01:34:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 266.864619] binder: 8208:8211 ioctl c0306201 200001c0 returned -22 [ 266.910418] binder: 8208:8211 unknown command 0 [ 266.925583] binder: 8208:8211 ioctl c0306201 200001c0 returned -22 01:34:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:34:46 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x40000800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) 01:34:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) fstatfs(r0, &(0x7f00000005c0)=""/161) listen(0xffffffffffffffff, 0x80001000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000440)=""/132, 0x84}], 0x1) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 01:34:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x1000}, {}], 0x2, 0x0, 0x0, 0x0) 01:34:46 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000000c0), 0xffffffb4) tee(r2, r1, 0xfffffffffffffffd, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x4ba09e13) [ 267.023736] binder: 8227:8229 ERROR: BC_REGISTER_LOOPER called without request [ 267.098673] binder: BINDER_SET_CONTEXT_MGR already set [ 267.114048] binder: 8227:8229 ioctl c0306201 20000140 returned -11 [ 267.134375] binder: 8233:8235 ioctl 40046207 0 returned -16 [ 267.140391] binder: BINDER_SET_CONTEXT_MGR already set 01:34:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 267.145806] binder: 8227:8241 ioctl 40046207 0 returned -16 [ 267.158497] binder_alloc: 8227: binder_alloc_buf, no vma [ 267.164660] binder: 8233:8242 transaction failed 29189/-3, size 0-0 line 3035 [ 267.173608] binder: 8233:8235 ERROR: BC_REGISTER_LOOPER called without request [ 267.219044] binder: 8233:8242 got reply transaction with no transaction stack [ 267.226338] binder: 8233:8242 transaction failed 29201/-71, size 0-0 line 2801 01:34:46 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000900)=[@increfs={0x40046302}], 0x0, 0x0, 0x0}) [ 267.436244] binder: 8249:8251 transaction failed 29189/-22, size 0-0 line 2896 [ 267.459168] binder: undelivered TRANSACTION_ERROR: 29189 01:34:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) fstatfs(r0, &(0x7f00000005c0)=""/161) listen(0xffffffffffffffff, 0x80001000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000440)=""/132, 0x84}], 0x1) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) [ 267.547462] binder: BC_ACQUIRE_RESULT not supported [ 267.553323] binder: 8255:8256 ioctl c0306201 20000680 returned -22 [ 267.561843] binder: BC_ACQUIRE_RESULT not supported [ 267.566999] binder: 8255:8257 ioctl c0306201 20000680 returned -22 01:34:46 executing program 1: 01:34:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 01:34:47 executing program 4: 01:34:47 executing program 1: [ 267.879433] binder_alloc: binder_alloc_mmap_handler: 8233 20001000-20004000 already mapped failed -16 [ 267.925393] binder_alloc: 8233: binder_alloc_buf, no vma [ 267.968483] binder: 8233:8272 transaction failed 29189/-3, size 0-0 line 3035 [ 267.970378] binder: 8233:8242 ERROR: BC_REGISTER_LOOPER called without request [ 267.983935] binder: 8233:8279 got reply transaction with no transaction stack 01:34:47 executing program 0: 01:34:47 executing program 3: 01:34:47 executing program 4: 01:34:47 executing program 1: 01:34:47 executing program 5: 01:34:47 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000000c0), 0xffffffb4) tee(r2, r1, 0xfffffffffffffffd, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x4ba09e13) [ 268.024576] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.030992] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.031115] binder: 8233:8279 transaction failed 29201/-71, size 0-0 line 2801 [ 268.036787] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.053299] binder: undelivered TRANSACTION_ERROR: 29201 01:34:47 executing program 4: 01:34:47 executing program 3: 01:34:47 executing program 5: 01:34:47 executing program 1: 01:34:47 executing program 0: 01:34:47 executing program 5: 01:34:47 executing program 4: 01:34:47 executing program 3: 01:34:47 executing program 0: 01:34:47 executing program 1: 01:34:47 executing program 5: 01:34:48 executing program 2: 01:34:48 executing program 4: 01:34:48 executing program 3: 01:34:48 executing program 5: 01:34:48 executing program 1: 01:34:48 executing program 0: 01:34:48 executing program 1: 01:34:48 executing program 0: 01:34:48 executing program 4: 01:34:48 executing program 5: 01:34:48 executing program 3: 01:34:48 executing program 2: 01:34:48 executing program 5: 01:34:48 executing program 0: 01:34:48 executing program 3: 01:34:48 executing program 1: 01:34:48 executing program 4: 01:34:48 executing program 2: 01:34:48 executing program 0: 01:34:48 executing program 5: 01:34:48 executing program 1: 01:34:48 executing program 3: 01:34:48 executing program 2: 01:34:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xfffffffffffffffe, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:34:48 executing program 0: 01:34:48 executing program 1: 01:34:48 executing program 5: 01:34:48 executing program 2: 01:34:48 executing program 3: 01:34:48 executing program 0: 01:34:49 executing program 1: 01:34:49 executing program 3: 01:34:49 executing program 2: 01:34:49 executing program 5: 01:34:49 executing program 0: [ 270.387982] ================================================================== [ 270.395612] BUG: KASAN: slab-out-of-bounds in tick_sched_handle+0x16f/0x190 [ 270.397932] kasan: CONFIG_KASAN_INLINE enabled [ 270.402713] Read of size 8 at addr ffff8880a9dd4f20 by task syz-executor4/8394 [ 270.414618] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 270.422009] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 270.428236] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.20.0+ #13 [ 270.434453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.443830] RIP: 0010:__bfs+0x2ce/0x7a0 [ 270.447803] Code: 49 01 00 00 49 8d 7f 10 4c 89 f8 4c 8b 1d ea d7 ee 09 48 89 f9 48 2d 20 47 32 8b 44 8b 15 3a d6 61 09 48 c1 e9 03 48 c1 f8 06 <42> 80 3c 21 00 0f 85 2c 03 00 00 49 8b 77 10 4c 8d 46 2c 4c 89 c1 [ 270.466712] RSP: 0018:ffff8880ae707110 EFLAGS: 00010003 [ 270.472067] RAX: 0000000001d336e3 RBX: ffffed1015ce0e3b RCX: 0000000000000002 [ 270.479328] RDX: 1ffff11015ce0e37 RSI: 0000000000000001 RDI: 0000000000000010 [ 270.486590] RBP: ffff8880ae707240 R08: 0000000000000001 R09: 1ffff11015ce0e3b [ 270.493850] R10: 000000000000ea77 R11: 0000000000002412 R12: dffffc0000000000 [ 270.501109] R13: ffffffff8b300150 R14: ffff8880ae707218 R15: 0000000000000000 [ 270.508378] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 270.516593] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.522511] CR2: 00007fbc15e82db8 CR3: 0000000085d5b000 CR4: 00000000001406e0 [ 270.529772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.537042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 270.544306] Call Trace: [ 270.546877] [ 270.549024] ? noop_count+0x40/0x40 [ 270.552648] ? lock_pin_lock+0x3a0/0x3a0 [ 270.556738] check_usage_forwards+0x164/0x3e0 [ 270.561233] ? check_usage_backwards+0x3e0/0x3e0 [ 270.566014] ? secondary_startup_64+0xa4/0xb0 [ 270.570532] ? save_stack_trace+0x1a/0x20 [ 270.574674] ? save_trace+0xe0/0x290 [ 270.578387] mark_lock+0x519/0x1cd0 [ 270.582013] ? check_usage_backwards+0x3e0/0x3e0 [ 270.586762] ? print_usage_bug+0xd0/0xd0 [ 270.590826] __lock_acquire+0x139c/0x4a30 [ 270.594968] ? check_noncircular+0x20/0x20 [ 270.599226] ? attach_entity_load_avg+0x810/0x810 [ 270.604071] ? mark_held_locks+0x100/0x100 [ 270.608302] ? add_lock_to_list.isra.0+0x450/0x450 [ 270.613236] ? add_lock_to_list.isra.0+0x450/0x450 [ 270.618209] ? debug_object_activate+0x2b0/0x550 [ 270.622964] ? find_held_lock+0x35/0x120 [ 270.627025] ? debug_object_activate+0x2b0/0x550 [ 270.631803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 270.637397] ? __radix_tree_lookup+0x3aa/0x4f0 [ 270.641983] ? radix_tree_insert+0x850/0x850 [ 270.646390] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.651952] ? check_preemption_disabled+0x48/0x290 [ 270.656964] lock_acquire+0x1db/0x570 [ 270.660813] ? __queue_work+0x2d9/0x1450 [ 270.664874] ? lock_release+0xc40/0xc40 [ 270.668854] ? idr_find+0x47/0x60 [ 270.672329] ? get_work_pool+0x14a/0x260 [ 270.676385] ? destroy_delayed_work_on_stack+0x30/0x30 [ 270.681702] _raw_spin_lock+0x2f/0x40 [ 270.685512] ? __queue_work+0x2d9/0x1450 [ 270.689571] __queue_work+0x2d9/0x1450 [ 270.693455] ? mark_held_locks+0x100/0x100 [ 270.697686] ? print_usage_bug+0xd0/0xd0 [ 270.701744] ? wq_calc_node_cpumask+0x3a0/0x3a0 [ 270.706420] ? add_lock_to_list.isra.0+0x450/0x450 [ 270.711344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.716876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.722407] ? check_preemption_disabled+0x48/0x290 [ 270.727420] ? __lock_is_held+0xb6/0x140 [ 270.731481] delayed_work_timer_fn+0x5d/0x90 [ 270.735906] ? rcu_read_lock_sched_held+0x110/0x130 [ 270.740958] call_timer_fn+0x254/0x900 [ 270.744857] ? work_on_cpu_safe+0x90/0x90 [ 270.749006] ? process_timeout+0x40/0x40 [ 270.753060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.758653] ? kasan_check_read+0x11/0x20 [ 270.762806] ? work_on_cpu_safe+0x90/0x90 [ 270.766948] ? work_on_cpu_safe+0x90/0x90 [ 270.771091] __run_timers+0x4a2/0xd50 [ 270.774919] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 270.780275] ? find_held_lock+0x35/0x120 [ 270.784330] ? clockevents_program_event+0x15f/0x380 [ 270.789456] ? pvclock_read_flags+0x160/0x160 [ 270.793948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.799478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.805009] ? check_preemption_disabled+0x48/0x290 [ 270.810037] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 270.815571] ? rcu_pm_notify+0xd0/0xd0 [ 270.819454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.824988] ? check_preemption_disabled+0x48/0x290 [ 270.830001] run_timer_softirq+0x52/0xb0 [ 270.834058] ? rcu_read_lock_sched_held+0x110/0x130 [ 270.839092] __do_softirq+0x30b/0xb11 [ 270.842897] ? __irqentry_text_end+0x1f96d2/0x1f96d2 [ 270.848023] ? kvm_clock_read+0x18/0x30 [ 270.852010] ? kvm_sched_clock_read+0x9/0x20 [ 270.856435] ? sched_clock+0x2e/0x50 [ 270.860151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.865697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.871245] ? check_preemption_disabled+0x48/0x290 [ 270.876304] irq_exit+0x180/0x1d0 [ 270.879756] smp_apic_timer_interrupt+0x1b7/0x760 [ 270.884596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.889435] ? smp_call_function_single_interrupt+0x640/0x640 [ 270.895378] ? trace_hardirqs_off+0x310/0x310 [ 270.899891] ? task_prio+0x50/0x50 [ 270.903426] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 270.908960] ? check_preemption_disabled+0x48/0x290 [ 270.913972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.918819] apic_timer_interrupt+0xf/0x20 [ 270.923043] [ 270.925296] RIP: 0010:native_safe_halt+0x2/0x10 [ 270.929962] Code: ff ff ff 48 89 c7 48 89 45 d8 e8 89 ee d1 f9 48 8b 45 d8 e9 ce fe ff ff 48 89 df e8 78 ee d1 f9 eb 82 90 90 90 90 90 90 fb f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 90 90 90 90 90 90 [ 270.949142] RSP: 0018:ffff8880a9497cd0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 270.956881] RAX: 1ffffffff1325001 RBX: 1ffff11015292f9d RCX: 0000000000000000 [ 270.964152] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a9486bbc [ 270.971413] RBP: ffff8880a9497d90 R08: ffff8880a9486340 R09: 0000000000000000 [ 270.978676] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 270.985936] R13: ffff8880a9497d68 R14: 0000000000000000 R15: ffffffff89927ff8 [ 270.993211] ? default_idle+0xb5/0x490 [ 270.997104] ? rcu_dynticks_eqs_enter+0x4f/0x80 [ 271.001772] ? __sched_text_end+0x4/0x4 [ 271.005740] ? rcu_idle_enter+0x408/0x530 [ 271.009887] ? rcu_eqs_special_set+0x1c0/0x1c0 [ 271.014463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.019993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.025538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.031099] arch_cpu_idle+0x10/0x20 [ 271.034806] default_idle_call+0x36/0x90 [ 271.038862] do_idle+0x386/0x5d0 [ 271.042250] ? retint_kernel+0x2d/0x2d [ 271.046143] ? arch_cpu_idle_exit+0x80/0x80 [ 271.050462] cpu_startup_entry+0x1b/0x20 [ 271.054548] start_secondary+0x435/0x620 [ 271.058609] ? set_cpu_sibling_map+0x1850/0x1850 [ 271.063367] secondary_startup_64+0xa4/0xb0 [ 271.067694] Modules linked in: [ 271.070886] ---[ end trace 3c655fbb8902ece2 ]--- [ 271.075636] RIP: 0010:__bfs+0x2ce/0x7a0 [ 271.079622] Code: 49 01 00 00 49 8d 7f 10 4c 89 f8 4c 8b 1d ea d7 ee 09 48 89 f9 48 2d 20 47 32 8b 44 8b 15 3a d6 61 09 48 c1 e9 03 48 c1 f8 06 <42> 80 3c 21 00 0f 85 2c 03 00 00 49 8b 77 10 4c 8d 46 2c 4c 89 c1 [ 271.098517] RSP: 0018:ffff8880ae707110 EFLAGS: 00010003 [ 271.103881] RAX: 0000000001d336e3 RBX: ffffed1015ce0e3b RCX: 0000000000000002 [ 271.111146] RDX: 1ffff11015ce0e37 RSI: 0000000000000001 RDI: 0000000000000010 [ 271.118413] RBP: ffff8880ae707240 R08: 0000000000000001 R09: 1ffff11015ce0e3b [ 271.125676] R10: 000000000000ea77 R11: 0000000000002412 R12: dffffc0000000000 [ 271.132939] R13: ffffffff8b300150 R14: ffff8880ae707218 R15: 0000000000000000 [ 271.140248] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 271.148463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.154335] CR2: 00007fbc15e82db8 CR3: 0000000085d5b000 CR4: 00000000001406e0 [ 271.161612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.168888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.176166] Kernel panic - not syncing: Fatal exception in interrupt [ 272.358243] Shutting down cpus with NMI [ 272.363298] Kernel Offset: disabled [ 272.366938] Rebooting in 86400 seconds..