[ 52.235259][ T26] audit: type=1800 audit(1572913039.059:27): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 52.283519][ T26] audit: type=1800 audit(1572913039.059:28): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.828387][ T26] audit: type=1800 audit(1572913039.719:29): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 52.848521][ T26] audit: type=1800 audit(1572913039.719:30): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2019/11/05 00:17:29 fuzzer started 2019/11/05 00:17:30 dialing manager at 10.128.0.105:37793 2019/11/05 00:17:30 syscalls: 2553 2019/11/05 00:17:30 code coverage: enabled 2019/11/05 00:17:30 comparison tracing: enabled 2019/11/05 00:17:30 extra coverage: extra coverage is not supported by the kernel 2019/11/05 00:17:30 setuid sandbox: enabled 2019/11/05 00:17:30 namespace sandbox: enabled 2019/11/05 00:17:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/05 00:17:30 fault injection: enabled 2019/11/05 00:17:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/05 00:17:30 net packet injection: enabled 2019/11/05 00:17:30 net device setup: enabled 2019/11/05 00:17:30 concurrency sanitizer: enabled 2019/11/05 00:17:30 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 66.347792][ T8116] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/05 00:17:34 adding functions to KCSAN blacklist: 'ktime_get_real_seconds' 'generic_write_end' 'rcu_gp_fqs_check_wake' 'tick_do_update_jiffies64' 'tcp_add_backlog' 'run_timer_softirq' 'generic_permission' 'blk_mq_sched_dispatch_requests' '__ext4_new_inode' 'ep_poll' 'tomoyo_supervisor' '__hrtimer_run_queues' 'ext4_free_inodes_count' 'find_next_bit' 'ext4_nonda_switch' 'poll_schedule_timeout' 'ext4_free_inode' 'mod_timer' 'atime_needs_update' 'tick_sched_do_timer' 'pid_update_inode' 'do_nanosleep' 00:17:41 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'em1\\lo\\em1{md5sum(cgroup)[+)posix_acl_access.nodev}'}, 0x8}]}}) 00:17:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_FWMARK={0x8}]]]}}}]}, 0x3c}}, 0x0) [ 75.190540][ T8120] IPVS: ftp: loaded support on port[0] = 21 [ 75.284049][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 75.365326][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.372456][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.380717][ T8120] device bridge_slave_0 entered promiscuous mode [ 75.404574][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.411678][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.420034][ T8120] device bridge_slave_1 entered promiscuous mode [ 75.440990][ T8120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.445596][ T8123] IPVS: ftp: loaded support on port[0] = 21 [ 75.452373][ T8120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.479091][ T8120] team0: Port device team_slave_0 added [ 75.486799][ T8120] team0: Port device team_slave_1 added 00:17:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) [ 75.606299][ T8120] device hsr_slave_0 entered promiscuous mode [ 75.693847][ T8120] device hsr_slave_1 entered promiscuous mode 00:17:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00\x9c_tjF\x897\xd6y\x06\xe3I[\x88\x14h\xaaqw6C\x00\xe7J{\xac\xf6\xad\x8ev\xc3\xa9\xa9\xc7\xcb\xf0=\xae;O\x98\x8f0\'\xce\xbaA\x16\x18\x89\xd2\x85\xe0l\xeer\xd0\x87\xf3\xf14\xe1\xd0)\xe2') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r0, 0x0, 0x88004) [ 75.822670][ T8125] IPVS: ftp: loaded support on port[0] = 21 [ 75.940295][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.947402][ T8120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.954746][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.961785][ T8120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.249099][ T8123] chnl_net:caif_netlink_parms(): no params data found [ 76.267756][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 00:17:43 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000300)="16") [ 76.336187][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.358787][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.434219][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.455074][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.500341][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.554976][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 76.579955][ T8153] IPVS: ftp: loaded support on port[0] = 21 [ 76.604519][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.611589][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.654745][ T8123] device bridge_slave_0 entered promiscuous mode [ 76.674199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.693991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.735320][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.742379][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.783922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.815587][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.845535][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.852619][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.894199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.914516][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.954521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.985798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.036252][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.043305][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.074523][ T8123] device bridge_slave_1 entered promiscuous mode [ 77.121505][ T8120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.163549][ T8120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 00:17:44 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 77.207636][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.216872][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.246166][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.278477][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.325958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.355660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.386382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.486901][ T8158] IPVS: ftp: loaded support on port[0] = 21 [ 77.506812][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.530871][ T8123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.566986][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.574539][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.606070][ T8125] device bridge_slave_0 entered promiscuous mode [ 77.629247][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.645749][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.662160][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.672692][ T8123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.708378][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.715662][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.725873][ T8125] device bridge_slave_1 entered promiscuous mode [ 77.739683][ T8160] IPVS: ftp: loaded support on port[0] = 21 [ 77.787402][ T8123] team0: Port device team_slave_0 added [ 77.800953][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.812940][ T8123] team0: Port device team_slave_1 added [ 77.827799][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.896214][ T8123] device hsr_slave_0 entered promiscuous mode [ 77.933917][ T8123] device hsr_slave_1 entered promiscuous mode [ 77.994000][ T8123] debugfs: Directory 'hsr0' with parent '/' already present! [ 78.026238][ T8125] team0: Port device team_slave_0 added [ 78.053735][ T8125] team0: Port device team_slave_1 added [ 78.150114][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 78.294521][ T8158] chnl_net:caif_netlink_parms(): no params data found 00:17:45 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'em1\\lo\\em1{md5sum(cgroup)[+)posix_acl_access.nodev}'}, 0x8}]}}) [ 78.365080][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.373144][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.386918][ T8153] device bridge_slave_0 entered promiscuous mode [ 78.476071][ T8125] device hsr_slave_0 entered promiscuous mode [ 78.503870][ T8125] device hsr_slave_1 entered promiscuous mode [ 78.543522][ T8125] debugfs: Directory 'hsr0' with parent '/' already present! [ 78.567219][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.583519][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state 00:17:45 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'em1\\lo\\em1{md5sum(cgroup)[+)posix_acl_access.nodev}'}, 0x8}]}}) [ 78.642811][ T8153] device bridge_slave_1 entered promiscuous mode [ 78.671029][ T8160] chnl_net:caif_netlink_parms(): no params data found [ 78.770880][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.849080][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.899009][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:17:45 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'em1\\lo\\em1{md5sum(cgroup)[+)posix_acl_access.nodev}'}, 0x8}]}}) [ 79.002522][ T8123] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.035609][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.062860][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.139284][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.151171][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.223659][ T8158] device bridge_slave_0 entered promiscuous mode [ 79.253621][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.262273][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.323908][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.331035][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.384418][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.438513][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.523900][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.531037][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state 00:17:46 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'em1\\lo\\em1{md5sum(cgroup)[+)posix_acl_access.nodev}'}, 0x8}]}}) [ 79.618292][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.678892][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.723524][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.730624][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.813652][ T8160] device bridge_slave_0 entered promiscuous mode [ 79.862066][ T8153] team0: Port device team_slave_0 added [ 79.873745][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.880827][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.943601][ T8158] device bridge_slave_1 entered promiscuous mode 00:17:46 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'em1\\lo\\em1{md5sum(cgroup)[+)posix_acl_access.nodev}'}, 0x8}]}}) [ 79.993202][ T8123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.047344][ T8123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.178556][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.200193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.264415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.334577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.374181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 00:17:47 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'em1\\lo\\em1{md5sum(cgroup)[+)posix_acl_access.nodev}'}, 0x8}]}}) [ 80.428544][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.498663][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.568485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.600588][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.657451][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.683410][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.721638][ T8160] device bridge_slave_1 entered promiscuous mode [ 80.757634][ T8153] team0: Port device team_slave_1 added [ 80.784143][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.800924][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.856351][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 00:17:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r2, r1, 0x0) [ 80.940068][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.016301][ T8123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.073889][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.086808][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.145716][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.206015][ T8153] device hsr_slave_0 entered promiscuous mode [ 81.243832][ T8153] device hsr_slave_1 entered promiscuous mode [ 81.297308][ T8153] debugfs: Directory 'hsr0' with parent '/' already present! [ 81.310896][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.339195][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.370117][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.382515][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.504007][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.594192][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.603144][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.670043][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.677179][ T8157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.762231][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.818773][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.859343][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.866502][ T8157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.914335][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.945682][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.994726][ T8158] team0: Port device team_slave_0 added [ 82.004955][ T8160] team0: Port device team_slave_0 added [ 82.040227][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.064594][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 00:17:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_FWMARK={0x8}]]]}}}]}, 0x3c}}, 0x0) [ 82.114365][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.123369][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.194348][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.234790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.254064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.265276][ T8125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.291993][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.331769][ T8160] team0: Port device team_slave_1 added [ 82.366036][ T8158] team0: Port device team_slave_1 added [ 82.406371][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.415396][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.444111][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.460494][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.596121][ T8160] device hsr_slave_0 entered promiscuous mode [ 82.657472][ T8160] device hsr_slave_1 entered promiscuous mode [ 82.718327][ T8160] debugfs: Directory 'hsr0' with parent '/' already present! [ 82.744238][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.751812][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.831391][ T8158] device hsr_slave_0 entered promiscuous mode [ 82.893933][ T8158] device hsr_slave_1 entered promiscuous mode [ 82.923542][ T8158] debugfs: Directory 'hsr0' with parent '/' already present! [ 82.938744][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.003311][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.068645][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.077192][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.114279][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.152960][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.213981][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.221141][ T8138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.264089][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.272753][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.344041][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.351125][ T8138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.384286][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.428487][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.534091][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.542254][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.621691][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.684658][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.693327][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.884693][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.893172][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 00:17:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) [ 84.034284][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.042735][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.155990][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.224734][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.241380][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.337872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.345731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.474255][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.493910][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.567211][ T8158] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.618442][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.640823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.686787][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.724288][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.732099][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.769480][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.823981][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.867585][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.874749][ T8157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.944167][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.998052][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.044179][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.051279][ T8157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.114591][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.208514][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.246008][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.299065][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.360543][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.390605][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.423413][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.457253][ T2819] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.464357][ T2819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.537800][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.566796][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.603988][ T2819] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.611089][ T2819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.649483][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.690015][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.718680][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.748578][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.780198][ T2819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.831555][ T8158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.881962][ T8158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:17:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r2, r1, 0x0) [ 85.997327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.017428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.104591][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.142307][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.199017][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.307440][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.359083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.407027][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.464399][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.534524][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.589722][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.644156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.652941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.714280][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.721766][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.811374][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.828720][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.858774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.918842][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.948146][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.977751][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0 00:17:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000300)="16") 00:17:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_FWMARK={0x8}]]]}}}]}, 0x3c}}, 0x0) 00:17:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) 00:17:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00\x9c_tjF\x897\xd6y\x06\xe3I[\x88\x14h\xaaqw6C\x00\xe7J{\xac\xf6\xad\x8ev\xc3\xa9\xa9\xc7\xcb\xf0=\xae;O\x98\x8f0\'\xce\xbaA\x16\x18\x89\xd2\x85\xe0l\xeer\xd0\x87\xf3\xf14\xe1\xd0)\xe2') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r0, 0x0, 0x88004) 00:17:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r2, r1, 0x0) 00:17:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000300)="16") 00:17:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_FWMARK={0x8}]]]}}}]}, 0x3c}}, 0x0) 00:17:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00\x9c_tjF\x897\xd6y\x06\xe3I[\x88\x14h\xaaqw6C\x00\xe7J{\xac\xf6\xad\x8ev\xc3\xa9\xa9\xc7\xcb\xf0=\xae;O\x98\x8f0\'\xce\xbaA\x16\x18\x89\xd2\x85\xe0l\xeer\xd0\x87\xf3\xf14\xe1\xd0)\xe2') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r0, 0x0, 0x88004) 00:17:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000300)="16") 00:17:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) 00:17:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r2, r1, 0x0) 00:17:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:54 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:54 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000300)="16") 00:17:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00\x9c_tjF\x897\xd6y\x06\xe3I[\x88\x14h\xaaqw6C\x00\xe7J{\xac\xf6\xad\x8ev\xc3\xa9\xa9\xc7\xcb\xf0=\xae;O\x98\x8f0\'\xce\xbaA\x16\x18\x89\xd2\x85\xe0l\xeer\xd0\x87\xf3\xf14\xe1\xd0)\xe2') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r0, 0x0, 0x88004) 00:17:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) 00:17:55 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000300)="16") 00:17:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:55 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) 00:17:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r2, r1, 0x0) 00:17:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000300)="16") 00:17:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) 00:17:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) 00:17:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:55 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000e7ff00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:17:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r2, r1, 0x0) 00:17:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) 00:17:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc008551a, &(0x7f00000003c0)={0x2, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "74e1bf4c2b283796ba5c5f798943eb8d"}) 00:17:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001700)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, '[ridge\x03s,ave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 00:17:55 executing program 1: unshare(0x40600) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/56, 0x38) 00:17:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYRESDEC], 0x1c) 00:17:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r2, r1, 0x0) 00:17:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc008551a, &(0x7f00000003c0)={0x2, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "74e1bf4c2b283796ba5c5f798943eb8d"}) 00:17:55 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 00:17:56 executing program 1: unshare(0x40600) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/56, 0x38) 00:17:56 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff020}, {0x80000006}]}, 0x10) [ 89.265645][ T8510] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:17:56 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0xc0984124, 0x100000000000000) [ 89.323914][ C0] hrtimer: interrupt took 35619 ns 00:17:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001700)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, '[ridge\x03s,ave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 00:17:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc008551a, &(0x7f00000003c0)={0x2, 0x8, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "74e1bf4c2b283796ba5c5f798943eb8d"}) 00:17:56 executing program 1: unshare(0x40600) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/56, 0x38) 00:17:56 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0xc0984124, 0x100000000000000) 00:17:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001700)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, '[ridge\x03s,ave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 89.780843][ T8531] ================================================================== [ 89.789014][ T8531] BUG: KCSAN: data-race in vm_area_dup / vma_interval_tree_remove [ 89.796812][ T8531] [ 89.799157][ T8531] write to 0xffff888123c5e9d0 of 8 bytes by task 8530 on cpu 0: [ 89.806805][ T8531] vma_interval_tree_remove+0x49c/0x8a0 [ 89.812361][ T8531] __remove_shared_vm_struct+0xad/0xd0 [ 89.817827][ T8531] unlink_file_vma+0x69/0x90 [ 89.822446][ T8531] free_pgtables+0xbe/0x200 [ 89.826961][ T8531] unmap_region+0x21c/0x270 [ 89.831489][ T8531] __do_munmap+0x661/0xb60 [ 89.835931][ T8531] mmap_region+0x165/0xd50 [ 89.840368][ T8531] do_mmap+0x6d4/0xba0 [ 89.844456][ T8531] vm_mmap_pgoff+0x12d/0x190 [ 89.849060][ T8531] ksys_mmap_pgoff+0x2d8/0x420 [ 89.853840][ T8531] __x64_sys_mmap+0x91/0xc0 [ 89.858353][ T8531] do_syscall_64+0xcc/0x370 [ 89.862867][ T8531] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 89.868749][ T8531] [ 89.871088][ T8531] read to 0xffff888123c5e960 of 200 bytes by task 8531 on cpu 1: 00:17:56 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff020}, {0x80000006}]}, 0x10) [ 89.878813][ T8531] vm_area_dup+0x70/0xf0 [ 89.883064][ T8531] __split_vma+0x88/0x350 [ 89.887412][ T8531] split_vma+0x73/0xa0 [ 89.891510][ T8531] mprotect_fixup+0x43f/0x510 [ 89.896200][ T8531] do_mprotect_pkey+0x3eb/0x660 [ 89.901067][ T8531] __x64_sys_mprotect+0x51/0x70 [ 89.905933][ T8531] do_syscall_64+0xcc/0x370 [ 89.910455][ T8531] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 89.916348][ T8531] [ 89.918676][ T8531] Reported by Kernel Concurrency Sanitizer on: [ 89.924841][ T8531] CPU: 1 PID: 8531 Comm: blkid Not tainted 5.4.0-rc6+ #0 [ 89.931868][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.941927][ T8531] ================================================================== [ 89.949993][ T8531] Kernel panic - not syncing: panic_on_warn set ... [ 89.956602][ T8531] CPU: 1 PID: 8531 Comm: blkid Not tainted 5.4.0-rc6+ #0 [ 89.963634][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.973726][ T8531] Call Trace: [ 89.977044][ T8531] dump_stack+0xf5/0x159 00:17:56 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0xc0984124, 0x100000000000000) [ 89.981309][ T8531] panic+0x210/0x640 [ 89.985226][ T8531] ? vprintk_func+0x8d/0x140 [ 89.989828][ T8531] kcsan_report.cold+0xc/0xe [ 89.994450][ T8531] kcsan_setup_watchpoint+0x3fe/0x410 [ 89.999852][ T8531] __tsan_read_range+0x13f/0x1e0 [ 90.004807][ T8531] vm_area_dup+0x70/0xf0 [ 90.009064][ T8531] __split_vma+0x88/0x350 [ 90.013416][ T8531] split_vma+0x73/0xa0 [ 90.017514][ T8531] mprotect_fixup+0x43f/0x510 [ 90.022242][ T8531] do_mprotect_pkey+0x3eb/0x660 [ 90.027112][ T8531] __x64_sys_mprotect+0x51/0x70 00:17:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001700)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, '[ridge\x03s,ave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 90.031986][ T8531] do_syscall_64+0xcc/0x370 [ 90.036509][ T8531] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 90.042405][ T8531] RIP: 0033:0x7fdf52bb0447 [ 90.046857][ T8531] Code: 73 01 c3 48 8d 0d 5d ad 20 00 31 d2 48 29 c2 89 11 48 83 c8 ff eb eb 90 90 90 90 90 90 90 90 90 90 90 90 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 2d ad 20 00 31 d2 48 29 c2 89 [ 90.066468][ T8531] RSP: 002b:00007ffe35d2dbd8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 90.074891][ T8531] RAX: ffffffffffffffda RBX: 00007fdf52db2000 RCX: 00007fdf52bb0447 [ 90.082864][ T8531] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007fdf525e4000 [ 90.090831][ T8531] RBP: 00007ffe35d2dcd0 R08: 0000000000000001 R09: 0000000000000010 [ 90.098808][ T8531] R10: 00007fdf523e25d0 R11: 0000000000000206 R12: 00007fdf523e1000 [ 90.106774][ T8531] R13: 00007fdf525e5180 R14: 00007fdf523e25d0 R15: 00007fdf525e4fe0 [ 90.116020][ T8531] Kernel Offset: disabled [ 90.120347][ T8531] Rebooting in 86400 seconds..