[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.530807][ T26] audit: type=1800 audit(1570929423.871:25): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.567470][ T26] audit: type=1800 audit(1570929423.871:26): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.613217][ T26] audit: type=1800 audit(1570929423.871:27): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/10/13 01:17:15 fuzzer started 2019/10/13 01:17:17 dialing manager at 10.128.0.26:33923 2019/10/13 01:17:18 syscalls: 2368 2019/10/13 01:17:18 code coverage: enabled 2019/10/13 01:17:18 comparison tracing: enabled 2019/10/13 01:17:18 extra coverage: extra coverage is not supported by the kernel 2019/10/13 01:17:18 setuid sandbox: enabled 2019/10/13 01:17:18 namespace sandbox: enabled 2019/10/13 01:17:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/13 01:17:18 fault injection: enabled 2019/10/13 01:17:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/13 01:17:18 net packet injection: enabled 2019/10/13 01:17:18 net device setup: enabled 2019/10/13 01:17:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 01:19:30 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x4000) io_setup(0x2, &(0x7f0000000280)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 01:19:30 executing program 1: syz_open_dev$vcsn(0x0, 0x0, 0x0) syzkaller login: [ 211.990224][ T9273] IPVS: ftp: loaded support on port[0] = 21 [ 212.184474][ T9275] IPVS: ftp: loaded support on port[0] = 21 01:19:30 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) [ 212.239545][ T9273] chnl_net:caif_netlink_parms(): no params data found [ 212.363199][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.374679][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.386849][ T9273] device bridge_slave_0 entered promiscuous mode [ 212.451588][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.459974][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.474872][ T9273] device bridge_slave_1 entered promiscuous mode [ 212.482156][ T9279] IPVS: ftp: loaded support on port[0] = 21 [ 212.540526][ T9275] chnl_net:caif_netlink_parms(): no params data found [ 212.558452][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.596044][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 01:19:31 executing program 3: getpid() fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000400)="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", 0xfc) [ 212.638724][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.645910][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.654272][ T9275] device bridge_slave_0 entered promiscuous mode [ 212.688178][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.696180][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.718528][ T9275] device bridge_slave_1 entered promiscuous mode [ 212.741919][ T9273] team0: Port device team_slave_0 added [ 212.771799][ T9273] team0: Port device team_slave_1 added [ 212.850645][ T9273] device hsr_slave_0 entered promiscuous mode [ 212.867197][ T9281] IPVS: ftp: loaded support on port[0] = 21 01:19:31 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40286608, &(0x7f0000000180)={0x10, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) [ 212.917984][ T9273] device hsr_slave_1 entered promiscuous mode [ 213.024069][ T9275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.087155][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.094563][ T9273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.102814][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.110109][ T9273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.131900][ T9284] IPVS: ftp: loaded support on port[0] = 21 [ 213.145324][ T9275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.198516][ T9279] chnl_net:caif_netlink_parms(): no params data found 01:19:31 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/pf\x00', 0x0, 0x0) [ 213.254670][ T9275] team0: Port device team_slave_0 added [ 213.273936][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.295162][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.329545][ T9275] team0: Port device team_slave_1 added [ 213.450873][ T9288] IPVS: ftp: loaded support on port[0] = 21 [ 213.460583][ T9275] device hsr_slave_0 entered promiscuous mode [ 213.518010][ T9275] device hsr_slave_1 entered promiscuous mode [ 213.559382][ T9275] debugfs: Directory 'hsr0' with parent '/' already present! [ 213.632150][ T9281] chnl_net:caif_netlink_parms(): no params data found [ 213.672771][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.680475][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.689145][ T9279] device bridge_slave_0 entered promiscuous mode [ 213.709057][ T9273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.723290][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.731568][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.739838][ T9281] device bridge_slave_0 entered promiscuous mode [ 213.750511][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.757725][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.765650][ T9279] device bridge_slave_1 entered promiscuous mode [ 213.802604][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.810302][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.818728][ T9281] device bridge_slave_1 entered promiscuous mode [ 213.837491][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.868612][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.880126][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.898608][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.910784][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.933369][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.962576][ T9273] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.982436][ T9281] team0: Port device team_slave_0 added [ 214.001890][ T9284] chnl_net:caif_netlink_parms(): no params data found [ 214.023533][ T9281] team0: Port device team_slave_1 added [ 214.031866][ T9279] team0: Port device team_slave_0 added [ 214.041701][ T9279] team0: Port device team_slave_1 added [ 214.120096][ T9281] device hsr_slave_0 entered promiscuous mode [ 214.168353][ T9281] device hsr_slave_1 entered promiscuous mode [ 214.227577][ T9281] debugfs: Directory 'hsr0' with parent '/' already present! [ 214.242698][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.252052][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.261078][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.268225][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.279214][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.288148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.296675][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.304156][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.332084][ T9284] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.339309][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.347562][ T9284] device bridge_slave_0 entered promiscuous mode [ 214.355614][ T9284] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.362894][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.370859][ T9284] device bridge_slave_1 entered promiscuous mode [ 214.436276][ T9284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.450645][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.460066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.469708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.478714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.487644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.550905][ T9279] device hsr_slave_0 entered promiscuous mode [ 214.597908][ T9279] device hsr_slave_1 entered promiscuous mode [ 214.637476][ T9279] debugfs: Directory 'hsr0' with parent '/' already present! [ 214.658338][ T9284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.680733][ T9275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.688463][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.697514][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.706160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.715077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.730647][ T9273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.743217][ T9273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.776152][ T9284] team0: Port device team_slave_0 added [ 214.786182][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.795618][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.826280][ T9284] team0: Port device team_slave_1 added [ 214.900717][ T9284] device hsr_slave_0 entered promiscuous mode [ 214.938299][ T9284] device hsr_slave_1 entered promiscuous mode [ 214.977542][ T9284] debugfs: Directory 'hsr0' with parent '/' already present! [ 214.989704][ T9273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.022403][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 215.044576][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.053852][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.109726][ T9275] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.152329][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.164429][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.173534][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.180688][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.195307][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.203098][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.212240][ T9288] device bridge_slave_0 entered promiscuous mode [ 215.221030][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.228263][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.236283][ T9288] device bridge_slave_1 entered promiscuous mode [ 215.261561][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.270561][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.279528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.279958][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.295218][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.310182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.326720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.376089][ T9284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.403052][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 215.423110][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.432837][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.446357][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.470935][ T9288] team0: Port device team_slave_0 added 01:19:33 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/bnep\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beee670fe1c777ffb000ee", 0x2a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x110000, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="54010000", @ANYRES16=r6, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x800, 0x0, 0x0, 0x9, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x9, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0x2, 0x0, 0xffff}) [ 215.479641][ T9288] team0: Port device team_slave_1 added [ 215.506240][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.539061][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.559096][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.574780][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.584004][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.592770][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.604014][ C1] hrtimer: interrupt took 35547 ns [ 215.606939][ T9284] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.651494][ T9300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 215.668246][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.676416][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.686981][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.695577][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.703914][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.712538][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.721886][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.739637][ T9281] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.749913][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.770653][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.820836][ T9288] device hsr_slave_0 entered promiscuous mode [ 215.857772][ T9288] device hsr_slave_1 entered promiscuous mode [ 215.903886][ T9288] debugfs: Directory 'hsr0' with parent '/' already present! [ 215.936841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 01:19:34 executing program 0: socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={r6, 0x4, 0x68d482490fec79c4, 0x1, 0x8}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f00000001c0)={[], 0x69, 0x92, 0xfffffffffffffffd, 0x8}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xf908, @mcast1, 0x7f}}}, 0x30) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x4ba7, 0x0, 0x3, 0x0, 0x0, 0x800, 0x1, 0xff, 0x0, 0x9, 0x6, 0xfffffffffffffffd, 0x1, 0x54, 0x3, 0x248, 0x4, 0x0, 0x4, 0x2, 0x8, 0x0, 0x1f, 0x0, 0x200, 0xcc71, 0x8005, 0x2, 0x2604e53d, 0x10001, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x1000, 0x9, 0x0, 0x6, 0x6, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000d77000/0x5000)=nil, 0x5000}}) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='GPL#@\x00') sync_file_range(0xffffffffffffffff, 0x4, 0x101, 0x1) [ 215.951243][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.976790][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.983981][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.000322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.012228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.023329][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.031062][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.095049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.103756][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.113091][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.123665][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.133892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.143510][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.152872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.161610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.168761][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.176700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.186874][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.212111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.219312][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.227540][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.256210][ T9275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.275461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.286128][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 01:19:34 executing program 0: socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={r6, 0x4, 0x68d482490fec79c4, 0x1, 0x8}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f00000001c0)={[], 0x69, 0x92, 0xfffffffffffffffd, 0x8}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xf908, @mcast1, 0x7f}}}, 0x30) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x4ba7, 0x0, 0x3, 0x0, 0x0, 0x800, 0x1, 0xff, 0x0, 0x9, 0x6, 0xfffffffffffffffd, 0x1, 0x54, 0x3, 0x248, 0x4, 0x0, 0x4, 0x2, 0x8, 0x0, 0x1f, 0x0, 0x200, 0xcc71, 0x8005, 0x2, 0x2604e53d, 0x10001, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x1000, 0x9, 0x0, 0x6, 0x6, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000d77000/0x5000)=nil, 0x5000}}) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='GPL#@\x00') sync_file_range(0xffffffffffffffff, 0x4, 0x101, 0x1) [ 216.301127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.311108][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.320142][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.330341][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.339301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.348219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.378934][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.395084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.410865][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.420401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.442562][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.453140][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.468749][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.490013][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.502951][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.511076][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.547745][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.556399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.584764][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.599669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.620456][ T9281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 01:19:35 executing program 1: socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={r6, 0x4, 0x68d482490fec79c4, 0x1, 0x8}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f00000001c0)={[], 0x69, 0x92, 0xfffffffffffffffd, 0x8}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xf908, @mcast1, 0x7f}}}, 0x30) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x4ba7, 0x0, 0x3, 0x0, 0x0, 0x800, 0x1, 0xff, 0x0, 0x9, 0x6, 0xfffffffffffffffd, 0x1, 0x54, 0x3, 0x248, 0x4, 0x0, 0x4, 0x2, 0x8, 0x0, 0x1f, 0x0, 0x200, 0xcc71, 0x8005, 0x2, 0x2604e53d, 0x10001, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x1000, 0x9, 0x0, 0x6, 0x6, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000d77000/0x5000)=nil, 0x5000}}) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='GPL#@\x00') sync_file_range(0xffffffffffffffff, 0x4, 0x101, 0x1) [ 216.656364][ T9284] 8021q: adding VLAN 0 to HW filter on device batadv0 01:19:35 executing program 0: socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={r6, 0x4, 0x68d482490fec79c4, 0x1, 0x8}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f00000001c0)={[], 0x69, 0x92, 0xfffffffffffffffd, 0x8}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xf908, @mcast1, 0x7f}}}, 0x30) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x4ba7, 0x0, 0x3, 0x0, 0x0, 0x800, 0x1, 0xff, 0x0, 0x9, 0x6, 0xfffffffffffffffd, 0x1, 0x54, 0x3, 0x248, 0x4, 0x0, 0x4, 0x2, 0x8, 0x0, 0x1f, 0x0, 0x200, 0xcc71, 0x8005, 0x2, 0x2604e53d, 0x10001, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x1000, 0x9, 0x0, 0x6, 0x6, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000d77000/0x5000)=nil, 0x5000}}) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='GPL#@\x00') sync_file_range(0xffffffffffffffff, 0x4, 0x101, 0x1) [ 216.706891][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.723221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.735812][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.743079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.781436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.811700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.832408][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.839610][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.847936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.875525][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.899354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.910887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.920529][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.930094][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.979706][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.989430][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.998626][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.010113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.021821][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 01:19:35 executing program 1: socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={r6, 0x4, 0x68d482490fec79c4, 0x1, 0x8}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xf}}, 0x20) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f00000001c0)={[], 0x69, 0x92, 0xfffffffffffffffd, 0x8}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xf908, @mcast1, 0x7f}}}, 0x30) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x4ba7, 0x0, 0x3, 0x0, 0x0, 0x800, 0x1, 0xff, 0x0, 0x9, 0x6, 0xfffffffffffffffd, 0x1, 0x54, 0x3, 0x248, 0x4, 0x0, 0x4, 0x2, 0x8, 0x0, 0x1f, 0x0, 0x200, 0xcc71, 0x8005, 0x2, 0x2604e53d, 0x10001, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x20}, 0x1000, 0x9, 0x0, 0x6, 0x6, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000d77000/0x5000)=nil, 0x5000}}) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='GPL#@\x00') sync_file_range(0xffffffffffffffff, 0x4, 0x101, 0x1) [ 217.031493][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.041710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.059460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.082077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.129629][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.141294][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.164856][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 01:19:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)={0x800, 0x18, [0x400, 0x5c70, 0xfffffff7, 0x2, 0x46, 0x6]}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:19:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 217.211557][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.238997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.309988][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.317111][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.369141][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.410061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.460481][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.467684][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.475607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.489341][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.541514][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.551611][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.561304][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.570793][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.580935][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.614119][ T9288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.639567][ T9288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.656505][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.691986][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.712463][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.725187][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.744822][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.771479][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.790809][ T9356] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.813028][ T9356] device ip6gretap0 entered promiscuous mode [ 217.854248][ T9279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.888353][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 01:19:36 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x22f64e316d000000, 0xfffffffc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2000, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xfffffffffffffd3a}}, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r4, 0x0, 0x0, 0x4, 0x292f6e98}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x28f, 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12100) 01:19:36 executing program 1: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000101100001007564703a73797a3040000c9644000400200001000a00000000000000ff0100000000000000001e00002000010080000020007c58643c5df8427604234adc50580200a76eb79bf87d27692b0a00001500000000ff0200240d0adfaf7f960c00"], 0x6c}}, 0x0) r4 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000009}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000d4}, 0x5) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x2000, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0x0) 01:19:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)={0x800, 0x18, [0x400, 0x5c70, 0xfffffff7, 0x2, 0x46, 0x6]}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:19:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 01:19:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)={0x800, 0x18, [0x400, 0x5c70, 0xfffffff7, 0x2, 0x46, 0x6]}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:19:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffc0, 0x440000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f00000f3000/0x4000)=nil, 0x80000001, 0x5, 0x17, &(0x7f0000ffc000/0x2000)=nil, 0x85d}) 01:19:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x22f64e316d000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x1, 0x5, 0x1b, 0x4}) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "ba49e5184d1f7bf139664668f8d3a0da"}, 0x11, 0x1) r3 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x1, 0x2) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/43, 0x200000ab}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYBLOB="03bd42291f46c1c5c6b1f9a45afae2c136240dacdd1f92d69cf352fd765ff09064ee00bbace65b8a3bfe7988f828e521893c6e186b1c188719de31026cbc4505b1833860be691ecc2cc7a00182781e7c", @ANYRES64], 0x0, 0x2, 0x0}) 01:19:36 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x22f64e316d000000, 0xfffffffc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2000, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xfffffffffffffd3a}}, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r4, 0x0, 0x0, 0x4, 0x292f6e98}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x28f, 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12100) [ 218.433197][ T9381] debugfs: Directory 'loop0' with parent 'block' already present! 01:19:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)={0x800, 0x18, [0x400, 0x5c70, 0xfffffff7, 0x2, 0x46, 0x6]}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:19:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffc0, 0x440000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f00000f3000/0x4000)=nil, 0x80000001, 0x5, 0x17, &(0x7f0000ffc000/0x2000)=nil, 0x85d}) 01:19:36 executing program 1: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000101100001007564703a73797a3040000c9644000400200001000a00000000000000ff0100000000000000001e00002000010080000020007c58643c5df8427604234adc50580200a76eb79bf87d27692b0a00001500000000ff0200240d0adfaf7f960c00"], 0x6c}}, 0x0) r4 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000009}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000d4}, 0x5) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x2000, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0x0) [ 218.538431][ T9390] debugfs: File '9389' in directory 'proc' already present! 01:19:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x37, &(0x7f0000000000), 0x20a154cc) r2 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x1, 0x2) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/43, 0x200000ab}], 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080), 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x1, 0x2) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/43, 0x200000ab}], 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x1, 0x2) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/43, 0x200000ab}], 0x1) write$nbd(r4, &(0x7f0000000240)={0x67446698, 0x0, 0x4, 0x0, 0x1, "65a1954a75c8e5e8377d980a58e908e7adc4816f847dd339b3b9d7c811"}, 0x2d) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r5 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffffffb, 0x8f4cc8e192ac93bb) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x2, 0xfa00, {0x0, &(0x7f0000000180), 0x2, 0xa}}, 0x20) r6 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x7, 0x870562b40d78ba4b) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) 01:19:37 executing program 2: set_mempolicy(0x2, &(0x7f0000000300)=0x77f, 0xaa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x40802, 0x0) r2 = fcntl$dupfd(r0, 0x9027474f76655668, r1) r3 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x1, 0x2) r4 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x1, 0x2) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/43, 0x200000ab}], 0x1) ioctl$CAPI_INSTALLED(r4, 0x80024322) readv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/45}, {&(0x7f0000000100)=""/7}], 0x10000000000001a2) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') [ 218.744811][ T9404] binder: 9389:9404 unknown command 2016477183 [ 218.756673][ T9404] binder: 9389:9404 ioctl c0306201 20000480 returned -22 [ 219.051812][ T9417] ------------[ cut here ]------------ [ 219.057582][ T9417] WARNING: CPU: 0 PID: 9417 at drivers/media/common/videobuf2/videobuf2-core.c:1882 __vb2_queue_cancel+0x8b6/0xc80 [ 219.070037][ T9417] Kernel panic - not syncing: panic_on_warn set ... [ 219.076755][ T9417] CPU: 0 PID: 9417 Comm: syz-executor.3 Not tainted 5.4.0-rc2+ #0 [ 219.084575][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.094654][ T9417] Call Trace: [ 219.097974][ T9417] dump_stack+0x172/0x1f0 [ 219.102316][ T9417] ? __vb2_queue_cancel+0x7d0/0xc80 [ 219.107535][ T9417] panic+0x2e3/0x75c [ 219.111717][ T9417] ? add_taint.cold+0x16/0x16 [ 219.116431][ T9417] ? printk+0xba/0xed [ 219.120442][ T9417] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 219.124202][ T3892] kobject: 'loop1' (0000000045b52113): kobject_uevent_env [ 219.125923][ T9417] ? __warn.cold+0x14/0x35 [ 219.137595][ T9417] ? __warn+0xd9/0x1d0 [ 219.141852][ T9417] ? __vb2_queue_cancel+0x8b6/0xc80 [ 219.147088][ T9417] __warn.cold+0x2f/0x35 [ 219.151369][ T9417] ? report_bug.cold+0x63/0xad [ 219.156154][ T9417] ? __vb2_queue_cancel+0x8b6/0xc80 [ 219.161363][ T9417] report_bug+0x289/0x300 [ 219.165716][ T9417] do_error_trap+0x11b/0x200 [ 219.167563][ T3892] kobject: 'loop1' (0000000045b52113): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 219.170323][ T9417] do_invalid_op+0x37/0x50 [ 219.170339][ T9417] ? __vb2_queue_cancel+0x8b6/0xc80 [ 219.170359][ T9417] invalid_op+0x23/0x30 [ 219.194425][ T9417] RIP: 0010:__vb2_queue_cancel+0x8b6/0xc80 [ 219.200254][ T9417] Code: 1e fb ff ff 48 89 df e8 08 89 da fc e9 11 fb ff ff e8 2e 2e 9f fc 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1a 2e 9f fc <0f> 0b 48 8b 45 d0 48 05 28 02 00 00 48 89 c2 48 89 45 88 48 b8 00 [ 219.219978][ T9417] RSP: 0018:ffff88805bcefc18 EFLAGS: 00010293 [ 219.226068][ T9417] RAX: ffff888094556140 RBX: 0000000000000001 RCX: ffffffff84d3dc4e [ 219.234058][ T9417] RDX: 0000000000000000 RSI: ffffffff84d3e3e6 RDI: 0000000000000005 [ 219.242050][ T9417] RBP: ffff88805bcefc90 R08: ffff888094556140 R09: ffffed1013ca9032 [ 219.250044][ T9417] R10: ffffed1013ca9031 R11: ffff88809e54818f R12: ffff88809e54818c [ 219.258047][ T9417] R13: ffff88809e548220 R14: ffff88809e547f48 R15: ffff88809e5446c0 [ 219.266064][ T9417] ? __vb2_queue_cancel+0x11e/0xc80 [ 219.271294][ T9417] ? __vb2_queue_cancel+0x8b6/0xc80 [ 219.276527][ T9417] ? __vb2_queue_cancel+0x8b6/0xc80 [ 219.281755][ T9417] vb2_core_streamoff+0x60/0x150 [ 219.286720][ T9417] __vb2_cleanup_fileio+0x78/0x170 [ 219.291897][ T9417] vb2_core_queue_release+0x20/0x80 [ 219.297126][ T9417] _vb2_fop_release+0x1cf/0x2a0 [ 219.302018][ T9417] vb2_fop_release+0x75/0xc0 [ 219.306635][ T9417] vivid_fop_release+0x18e/0x450 [ 219.311595][ T9417] ? vivid_req_validate+0xc0/0xc0 [ 219.316652][ T9417] v4l2_release+0x21f/0x390 [ 219.321192][ T9417] __fput+0x2ff/0x890 [ 219.325214][ T9417] ? dev_debug_store+0x110/0x110 [ 219.330279][ T9417] ____fput+0x16/0x20 [ 219.334277][ T9417] task_work_run+0x145/0x1c0 [ 219.338905][ T9417] exit_to_usermode_loop+0x316/0x380 [ 219.344237][ T9417] do_syscall_64+0x65f/0x760 [ 219.348877][ T9417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.354817][ T9417] RIP: 0033:0x413741 [ 219.357552][ T9436] kobject: 'integrity' (000000006d95dbe1): kobject_uevent_env [ 219.358720][ T9417] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 219.358728][ T9417] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 219.358742][ T9417] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000413741 [ 219.358750][ T9417] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000006 [ 219.358768][ T9417] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 219.358775][ T9417] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075c070 [ 219.358781][ T9417] R13: 000000000003577f R14: 0000000000760d20 R15: 000000000075c07c [ 219.368549][ T9417] Kernel Offset: disabled [ 219.441293][ T9417] Rebooting in 86400 seconds..