[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   35.691414][   T23] audit: type=1800 audit(1570741057.691:25): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   35.711216][   T23] audit: type=1800 audit(1570741057.691:26): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   35.733567][   T23] audit: type=1800 audit(1570741057.691:27): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.151' (ECDSA) to the list of known hosts.
2019/10/10 20:57:47 fuzzer started
2019/10/10 20:57:49 dialing manager at 10.128.0.105:37331
2019/10/10 20:57:49 syscalls: 2523
2019/10/10 20:57:49 code coverage: enabled
2019/10/10 20:57:49 comparison tracing: enabled
2019/10/10 20:57:49 extra coverage: extra coverage is not supported by the kernel
2019/10/10 20:57:49 setuid sandbox: enabled
2019/10/10 20:57:49 namespace sandbox: enabled
2019/10/10 20:57:49 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/10 20:57:49 fault injection: enabled
2019/10/10 20:57:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/10 20:57:49 net packet injection: enabled
2019/10/10 20:57:49 net device setup: enabled
2019/10/10 20:57:49 concurrency sanitizer: enabled
20:57:51 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f00000005c0)=[{0x81, 0x1, 0x0, 0x0, @time, {}, {}, @raw8={"170a985f3961ef6038c3ecf9"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x4}}], 0x60)

syzkaller login: [   49.622522][ T7283] IPVS: ftp: loaded support on port[0] = 21
20:57:51 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[   49.712495][ T7283] chnl_net:caif_netlink_parms(): no params data found
[   49.761484][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.779660][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.787758][ T7283] device bridge_slave_0 entered promiscuous mode
[   49.811747][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.818958][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.830773][ T7283] device bridge_slave_1 entered promiscuous mode
[   49.876777][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.902159][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.944007][ T7283] team0: Port device team_slave_0 added
[   49.971062][ T7283] team0: Port device team_slave_1 added
20:57:52 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xa1d7, 0x3136564e, 0x0, @stepwise})

[   50.082531][ T7283] device hsr_slave_0 entered promiscuous mode
[   50.119933][ T7283] device hsr_slave_1 entered promiscuous mode
[   50.218814][ T7286] IPVS: ftp: loaded support on port[0] = 21
[   50.226098][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.233251][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.240636][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.247740][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.313408][ T7288] IPVS: ftp: loaded support on port[0] = 21
20:57:52 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[], 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/')
sendfile(r2, r3, 0x0, 0x1)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x0, 0x8010000400000084)
connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000001340))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x88c8]}, 0x45c)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
r7 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r9, 0x0, 0x0)
fallocate(r9, 0x0, 0x0, 0x2000002)
fallocate(r8, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, r9, 0x0, 0x8, 0x20})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r9})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0x0, 0x0, 0x20})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001300), &(0x7f0000001340)=0x8)
connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0)

[   50.408888][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.427374][ T7283] 8021q: adding VLAN 0 to HW filter on device team0
[   50.461204][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.482076][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.507150][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.523102][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   50.582891][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.600544][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.607698][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.616809][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.625498][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.632590][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.675455][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.691069][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.710809][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.751237][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   50.770176][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.778778][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
20:57:52 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
pipe(&(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1030d)

[   50.794412][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.803703][ T7286] chnl_net:caif_netlink_parms(): no params data found
[   50.825939][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.894697][ T7293] IPVS: ftp: loaded support on port[0] = 21
[   50.945334][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.987702][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.995067][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.005345][ T7286] device bridge_slave_0 entered promiscuous mode
[   51.023825][ T7288] chnl_net:caif_netlink_parms(): no params data found
[   51.037301][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.046487][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.062204][ T7286] device bridge_slave_1 entered promiscuous mode
[   51.155083][ T7286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.232655][ T7286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.244640][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.252521][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.263186][ T7288] device bridge_slave_0 entered promiscuous mode
[   51.320595][ T7286] team0: Port device team_slave_0 added
[   51.326415][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.350175][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.358232][ T7288] device bridge_slave_1 entered promiscuous mode
20:57:53 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

[   51.379301][ T7300] IPVS: ftp: loaded support on port[0] = 21
[   51.389696][ T7286] team0: Port device team_slave_1 added
[   51.416401][ T7293] chnl_net:caif_netlink_parms(): no params data found
20:57:53 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f00000005c0)=[{0x81, 0x1, 0x0, 0x0, @time, {}, {}, @raw8={"170a985f3961ef6038c3ecf9"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x4}}], 0x60)

20:57:53 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f00000005c0)=[{0x81, 0x1, 0x0, 0x0, @time, {}, {}, @raw8={"170a985f3961ef6038c3ecf9"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x4}}], 0x60)

[   51.532705][ T7286] device hsr_slave_0 entered promiscuous mode
[   51.570066][ T7286] device hsr_slave_1 entered promiscuous mode
[   51.619626][ T7286] debugfs: Directory 'hsr0' with parent '/' already present!
[   51.644777][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
20:57:53 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f00000005c0)=[{0x81, 0x1, 0x0, 0x0, @time, {}, {}, @raw8={"170a985f3961ef6038c3ecf9"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x4}}], 0x60)

[   51.694010][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.712469][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.719592][ T7286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.726889][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.733978][ T7286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.763011][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.775676][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state
20:57:53 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f00000005c0)=[{0x81, 0x1, 0x0, 0x0, @time, {}, {}, @raw8={"170a985f3961ef6038c3ecf9"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x4}}], 0x60)

[   51.815411][ T7288] team0: Port device team_slave_0 added
[   51.832652][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.844823][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.853403][ T7293] device bridge_slave_0 entered promiscuous mode
[   51.890709][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.897841][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.909339][ T7293] device bridge_slave_1 entered promiscuous mode
[   51.934110][ T7312] IPVS: ftp: loaded support on port[0] = 21
[   51.945696][ T7288] team0: Port device team_slave_1 added
20:57:53 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f00000005c0)=[{0x81, 0x1, 0x0, 0x0, @time, {}, {}, @raw8={"170a985f3961ef6038c3ecf9"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x4}}], 0x60)

[   51.981370][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0
20:57:54 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f00000005c0)=[{0x81, 0x1, 0x0, 0x0, @time, {}, {}, @raw8={"170a985f3961ef6038c3ecf9"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x4}}], 0x60)

[   52.077397][ T7286] 8021q: adding VLAN 0 to HW filter on device team0
[   52.093852][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.122357][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.130651][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
20:57:54 executing program 0:
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0x1)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x80000000000000, 0x4e95be9ae3034b6f}, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
ioctl$TCXONC(r0, 0x540a, 0x5)
r1 = fcntl$getown(r0, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x7f0)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000480)={0x8, 0xffffffffffffffff, 0x3f})
r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0)
ioctl$int_in(r2, 0x0, 0x0)
ioctl$int_in(r2, 0x800060c0045005, &(0x7f0000000140)=0x5ad)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000))
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0)
r5 = getpgrp(r1)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x93b7, 0x3, 0x0, 0x20, 0x100000001, 0x2, 0x8})
setpriority(0x0, r5, 0xffff)
fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x1f, r1})
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
r6 = socket(0x1e, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4(r6, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000100)=0xb5, 0x4)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r7=>0x0})
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)

[   52.182660][ T7288] device hsr_slave_0 entered promiscuous mode
[   52.233525][ T7288] device hsr_slave_1 entered promiscuous mode
[   52.299688][ T7288] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.309299][    C0] hrtimer: interrupt took 29153 ns
[   52.334531][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.354166][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.362870][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.372110][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.379164][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.387813][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.396589][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.405792][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.412886][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.428865][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.438357][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.481446][ T7300] chnl_net:caif_netlink_parms(): no params data found
[   52.495931][ T7293] team0: Port device team_slave_0 added
[   52.503071][ T7293] team0: Port device team_slave_1 added
[   52.519279][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.538341][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.547921][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.556946][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.566138][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.575363][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.583962][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.592330][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.601203][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.610316][ T7286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.644955][ T7286] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.722878][ T7293] device hsr_slave_0 entered promiscuous mode
[   52.779998][ T7293] device hsr_slave_1 entered promiscuous mode
[   52.819638][ T7293] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.859826][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.866915][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.878917][ T7300] device bridge_slave_0 entered promiscuous mode
[   52.901963][ T7312] chnl_net:caif_netlink_parms(): no params data found
[   52.926334][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.934113][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.945030][ T7300] device bridge_slave_1 entered promiscuous mode
[   52.965259][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.997752][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.015403][ T7288] 8021q: adding VLAN 0 to HW filter on device team0
[   53.025704][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.035463][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.044078][ T7312] device bridge_slave_0 entered promiscuous mode
[   53.064881][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.073560][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.083591][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.105109][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.112445][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.121880][ T7312] device bridge_slave_1 entered promiscuous mode
[   53.131210][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.140343][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.148859][ T2858] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.156023][ T2858] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.164983][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.174047][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.182695][ T2858] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.189797][ T2858] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.198003][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.207846][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.224764][ T7300] team0: Port device team_slave_0 added
[   53.280291][ T7300] team0: Port device team_slave_1 added
[   53.347252][ T2858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.410251][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.432771][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.449844][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.465838][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.497197][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.526122][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.556919][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.631876][ T7300] device hsr_slave_0 entered promiscuous mode
[   53.670167][ T7300] device hsr_slave_1 entered promiscuous mode
[   53.719636][ T7300] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.728835][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.738055][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.747720][ T7312] team0: Port device team_slave_0 added
[   53.755689][ T7312] team0: Port device team_slave_1 added
[   53.777584][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.787625][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.796733][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.815197][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.883302][ T7312] device hsr_slave_0 entered promiscuous mode
[   53.940062][ T7312] device hsr_slave_1 entered promiscuous mode
20:57:56 executing program 0:
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0x1)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x80000000000000, 0x4e95be9ae3034b6f}, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
ioctl$TCXONC(r0, 0x540a, 0x5)
r1 = fcntl$getown(r0, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x7f0)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000480)={0x8, 0xffffffffffffffff, 0x3f})
r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0)
ioctl$int_in(r2, 0x0, 0x0)
ioctl$int_in(r2, 0x800060c0045005, &(0x7f0000000140)=0x5ad)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000))
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0)
r5 = getpgrp(r1)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x93b7, 0x3, 0x0, 0x20, 0x100000001, 0x2, 0x8})
setpriority(0x0, r5, 0xffff)
fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x1f, r1})
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
r6 = socket(0x1e, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4(r6, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000100)=0xb5, 0x4)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r7=>0x0})
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)

[   53.980925][ T7312] debugfs: Directory 'hsr0' with parent '/' already present!
[   54.019378][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.045295][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   54.072256][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.080580][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.101013][ T7293] 8021q: adding VLAN 0 to HW filter on device team0
[   54.111896][ T7300] 8021q: adding VLAN 0 to HW filter on device team0
[   54.126427][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.139162][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.151224][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.165794][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.177953][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.192301][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.203436][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.210526][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.223947][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.234122][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.254810][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.261934][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.281204][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.304175][ T7312] 8021q: adding VLAN 0 to HW filter on device team0
[   54.325496][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.334315][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.346997][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.355629][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.362769][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.371333][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.380018][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.388392][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.395545][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.403536][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.411380][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.420892][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.430165][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.439456][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.448130][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.456896][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.466997][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.475066][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.499699][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.508550][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.518316][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.527579][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.536465][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.543627][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.551927][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.560674][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.569015][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.576431][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.584408][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.593730][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.602688][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.611472][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.620753][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.628946][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.662510][ T7293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.685186][ T7293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.696975][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.705985][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.717137][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.731103][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.740649][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.750116][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
20:57:56 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xa1d7, 0x3136564e, 0x0, @stepwise})

[   54.759051][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.768489][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.778009][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.788403][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.798695][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.807228][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.815974][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.825280][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.857075][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.879027][ T7300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.891973][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.904723][ T7312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.915714][ T7312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.927719][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.937473][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.946087][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.954988][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.971088][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.979669][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.988469][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.005800][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.018775][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.276368][ T7388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
20:57:57 executing program 0:
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0x1)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x80000000000000, 0x4e95be9ae3034b6f}, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
ioctl$TCXONC(r0, 0x540a, 0x5)
r1 = fcntl$getown(r0, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x7f0)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000480)={0x8, 0xffffffffffffffff, 0x3f})
r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0)
ioctl$int_in(r2, 0x0, 0x0)
ioctl$int_in(r2, 0x800060c0045005, &(0x7f0000000140)=0x5ad)
ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000))
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0)
r5 = getpgrp(r1)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x93b7, 0x3, 0x0, 0x20, 0x100000001, 0x2, 0x8})
setpriority(0x0, r5, 0xffff)
fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x1f, r1})
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
r6 = socket(0x1e, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4(r6, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000100)=0xb5, 0x4)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r7=>0x0})
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)

20:57:57 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

20:57:57 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xa1d7, 0x3136564e, 0x0, @stepwise})

20:57:57 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

20:57:57 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
pipe(&(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1030d)

20:57:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[], 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/')
sendfile(r2, r3, 0x0, 0x1)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x0, 0x8010000400000084)
connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000001340))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x88c8]}, 0x45c)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
r7 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r9, 0x0, 0x0)
fallocate(r9, 0x0, 0x0, 0x2000002)
fallocate(r8, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, r9, 0x0, 0x8, 0x20})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r9})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0x0, 0x0, 0x20})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001300), &(0x7f0000001340)=0x8)
connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0)

[   55.643079][   T23] kauditd_printk_skb: 3 callbacks suppressed
[   55.643114][   T23] audit: type=1800 audit(1570741077.641:31): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16536 res=0
20:57:58 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xa1d7, 0x3136564e, 0x0, @stepwise})

20:57:58 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
pipe(&(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1030d)

20:57:58 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

[   56.204937][ T7415] ==================================================================
[   56.213089][ T7415] BUG: KCSAN: data-race in poll_schedule_timeout.constprop.0 / pollwake
[   56.221406][ T7415] 
[   56.223735][ T7415] read to 0xffffc90001c93a60 of 4 bytes by task 7413 on cpu 0:
[   56.231266][ T7415]  poll_schedule_timeout.constprop.0+0x50/0xc0
[   56.237406][ T7415]  do_select+0xd7f/0x1020
[   56.241744][ T7415]  core_sys_select+0x38b/0x520
[   56.246494][ T7415]  __x64_sys_pselect6+0x22a/0x280
[   56.251508][ T7415]  do_syscall_64+0xcf/0x2f0
[   56.256011][ T7415]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   56.261880][ T7415] 
[   56.264200][ T7415] write to 0xffffc90001c93a60 of 4 bytes by task 7415 on cpu 1:
[   56.271816][ T7415]  pollwake+0xe3/0x140
[   56.275876][ T7415]  __wake_up_common+0x7b/0x180
[   56.280625][ T7415]  __wake_up_common_lock+0x77/0xb0
[   56.285735][ T7415]  __wake_up+0xe/0x10
[   56.289705][ T7415]  wakeup_pipe_writers+0x74/0xb0
[   56.294655][ T7415]  splice_from_pipe_next.part.0+0x17a/0x1d0
[   56.300555][ T7415]  __splice_from_pipe+0xa4/0x480
[   56.305485][ T7415]  do_vmsplice.part.0+0x1c5/0x210
[   56.310497][ T7415]  __do_sys_vmsplice+0x15f/0x1c0
[   56.315419][ T7415]  __x64_sys_vmsplice+0x5e/0x80
[   56.320261][ T7415]  do_syscall_64+0xcf/0x2f0
[   56.324753][ T7415]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   56.330619][ T7415] 
[   56.332928][ T7415] Reported by Kernel Concurrency Sanitizer on:
[   56.339068][ T7415] CPU: 1 PID: 7415 Comm: syz-executor.1 Not tainted 5.3.0+ #0
[   56.346507][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   56.356544][ T7415] ==================================================================
[   56.364598][ T7415] Kernel panic - not syncing: panic_on_warn set ...
[   56.371179][ T7415] CPU: 1 PID: 7415 Comm: syz-executor.1 Not tainted 5.3.0+ #0
[   56.378622][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   56.388664][ T7415] Call Trace:
[   56.391949][ T7415]  dump_stack+0xf5/0x159
[   56.396195][ T7415]  panic+0x209/0x639
[   56.400084][ T7415]  ? __do_sys_vmsplice+0x15f/0x1c0
[   56.405184][ T7415]  ? vprintk_func+0x8d/0x140
[   56.409768][ T7415]  kcsan_report.cold+0xc/0x1b
[   56.414437][ T7415]  __kcsan_setup_watchpoint+0x3ee/0x510
[   56.419985][ T7415]  __tsan_write4+0x32/0x40
[   56.424387][ T7415]  pollwake+0xe3/0x140
[   56.428448][ T7415]  ? wake_up_q+0x70/0x70
[   56.432683][ T7415]  __wake_up_common+0x7b/0x180
[   56.437440][ T7415]  __wake_up_common_lock+0x77/0xb0
[   56.442545][ T7415]  __wake_up+0xe/0x10
[   56.446516][ T7415]  wakeup_pipe_writers+0x74/0xb0
[   56.451458][ T7415]  splice_from_pipe_next.part.0+0x17a/0x1d0
[   56.457349][ T7415]  __splice_from_pipe+0xa4/0x480
[   56.462277][ T7415]  ? iter_to_pipe+0x3f0/0x3f0
[   56.466948][ T7415]  do_vmsplice.part.0+0x1c5/0x210
[   56.471969][ T7415]  __do_sys_vmsplice+0x15f/0x1c0
[   56.476896][ T7415]  ? __tsan_read8+0x2c/0x30
[   56.481404][ T7415]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[   56.487109][ T7415]  ? __kcsan_setup_watchpoint+0x96/0x510
[   56.492728][ T7415]  ? _copy_to_user+0x84/0xb0
[   56.497330][ T7415]  ? __kcsan_setup_watchpoint+0x96/0x510
[   56.502947][ T7415]  ? __kcsan_setup_watchpoint+0x96/0x510
[   56.508570][ T7415]  __x64_sys_vmsplice+0x5e/0x80
[   56.513413][ T7415]  do_syscall_64+0xcf/0x2f0
[   56.517918][ T7415]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   56.523793][ T7415] RIP: 0033:0x459a59
[   56.527689][ T7415] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   56.547276][ T7415] RSP: 002b:00007f3d69b8bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   56.555673][ T7415] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a59
[   56.563634][ T7415] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000008
[   56.571592][ T7415] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000
[   56.579664][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3d69b8c6d4
[   56.587657][ T7415] R13: 00000000004c94e5 R14: 00000000004e0c68 R15: 00000000ffffffff
[   56.596816][ T7415] Kernel Offset: disabled
[   56.601176][ T7415] Rebooting in 86400 seconds..