[ 41.649548][ T26] audit: type=1800 audit(1571045749.468:21): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 41.685459][ T26] audit: type=1800 audit(1571045749.468:22): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 41.706254][ T26] audit: type=1800 audit(1571045749.478:23): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. 2019/10/14 09:36:00 fuzzer started 2019/10/14 09:36:01 dialing manager at 10.128.0.105:43961 2019/10/14 09:36:01 syscalls: 2523 2019/10/14 09:36:01 code coverage: enabled 2019/10/14 09:36:01 comparison tracing: enabled 2019/10/14 09:36:01 extra coverage: extra coverage is not supported by the kernel 2019/10/14 09:36:01 setuid sandbox: enabled 2019/10/14 09:36:01 namespace sandbox: enabled 2019/10/14 09:36:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/14 09:36:01 fault injection: enabled 2019/10/14 09:36:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/14 09:36:01 net packet injection: enabled 2019/10/14 09:36:01 net device setup: enabled 2019/10/14 09:36:01 concurrency sanitizer: enabled 09:36:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syzkaller login: [ 56.290235][ T7515] IPVS: ftp: loaded support on port[0] = 21 09:36:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 56.389000][ T7515] chnl_net:caif_netlink_parms(): no params data found [ 56.476893][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.484171][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.493712][ T7515] device bridge_slave_0 entered promiscuous mode [ 56.517283][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.524900][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.555379][ T7515] device bridge_slave_1 entered promiscuous mode [ 56.596883][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.626196][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.670437][ T7515] team0: Port device team_slave_0 added [ 56.680134][ T7515] team0: Port device team_slave_1 added [ 56.697166][ T7518] IPVS: ftp: loaded support on port[0] = 21 09:36:04 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x80000001, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg$inet6(r0, &(0x7f00000057c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x2, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x2, 0x0) [ 56.798532][ T7515] device hsr_slave_0 entered promiscuous mode [ 56.864927][ T7515] device hsr_slave_1 entered promiscuous mode [ 56.958993][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.966785][ T7515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.974697][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.985703][ T7515] bridge0: port 1(bridge_slave_0) entered forwarding state 09:36:04 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 57.123354][ T7520] IPVS: ftp: loaded support on port[0] = 21 [ 57.153360][ T7515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.265231][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.280827][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.296071][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.335176][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.356040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.425433][ T7518] chnl_net:caif_netlink_parms(): no params data found [ 57.439349][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.455497][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.464772][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.471826][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.489655][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.498649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.508305][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.515450][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.523894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.557925][ T7525] IPVS: ftp: loaded support on port[0] = 21 [ 57.574079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.587591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.598623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 09:36:05 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x205d6a92b46c1c5, 0x0) [ 57.609660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.619671][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.639342][ T7515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.653382][ T7515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.727295][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.737784][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.747192][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.758256][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.785628][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.809191][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.819571][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.828874][ T7518] device bridge_slave_0 entered promiscuous mode [ 57.869858][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.913664][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.924791][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.944670][ T7518] device bridge_slave_1 entered promiscuous mode [ 57.999970][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.017602][ T7528] IPVS: ftp: loaded support on port[0] = 21 09:36:05 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000002340)=[{0x0, 0x0, 0x10001}, {&(0x7f0000000240)="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", 0x1d8, 0xa}]) [ 58.106067][ T7520] chnl_net:caif_netlink_parms(): no params data found [ 58.124196][ T7518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.179230][ T7518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.302573][ T7536] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.313239][ T7518] team0: Port device team_slave_0 added [ 58.396798][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.405765][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.415518][ T7520] device bridge_slave_0 entered promiscuous mode [ 58.446403][ T7518] team0: Port device team_slave_1 added [ 58.459009][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.496785][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state 09:36:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 58.545569][ T7520] device bridge_slave_1 entered promiscuous mode [ 58.638510][ T7525] chnl_net:caif_netlink_parms(): no params data found 09:36:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 58.702960][ T7520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.741759][ T7543] IPVS: ftp: loaded support on port[0] = 21 [ 58.798570][ T7518] device hsr_slave_0 entered promiscuous mode 09:36:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 58.874900][ T7518] device hsr_slave_1 entered promiscuous mode [ 58.928176][ T7518] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.972179][ T7528] chnl_net:caif_netlink_parms(): no params data found [ 59.001303][ T7520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 09:36:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 59.153016][ T7520] team0: Port device team_slave_0 added [ 59.177625][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.196634][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.208946][ T7525] device bridge_slave_0 entered promiscuous mode [ 59.229645][ T7520] team0: Port device team_slave_1 added [ 59.272347][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.280022][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.292327][ T7525] device bridge_slave_1 entered promiscuous mode [ 59.300595][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state 09:36:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 59.319433][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.340729][ T7528] device bridge_slave_0 entered promiscuous mode [ 59.404377][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.411644][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state 09:36:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 59.455440][ T7528] device bridge_slave_1 entered promiscuous mode [ 59.467456][ T7525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.480182][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.547968][ T7520] device hsr_slave_0 entered promiscuous mode [ 59.604984][ T7520] device hsr_slave_1 entered promiscuous mode [ 59.644733][ T7520] debugfs: Directory 'hsr0' with parent '/' already present! 09:36:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 59.691835][ T7525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.843974][ T7525] team0: Port device team_slave_0 added [ 59.882814][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.896729][ T7528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.907417][ T7525] team0: Port device team_slave_1 added [ 59.916313][ T7528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.935561][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.943835][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.987991][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.001959][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.012180][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.021229][ T2880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.033514][ T7543] chnl_net:caif_netlink_parms(): no params data found [ 60.051355][ T7528] team0: Port device team_slave_0 added [ 60.063826][ T7528] team0: Port device team_slave_1 added [ 60.073431][ T7520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.084239][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.094128][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.105345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.115744][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.124262][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.133084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.197754][ T7525] device hsr_slave_0 entered promiscuous mode [ 60.265010][ T7525] device hsr_slave_1 entered promiscuous mode [ 60.304571][ T7525] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.320097][ T7520] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.335014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.347416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.359392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.373145][ T7518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.385809][ T7518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.428424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.438212][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.449097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.458860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.472342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.481090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.492644][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.506659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.515444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.524342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.535301][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.542824][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.551349][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.560615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.569240][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.576351][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.584642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.593733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.603961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.613098][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.622628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.633363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.641682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.650810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.727932][ T7528] device hsr_slave_0 entered promiscuous mode [ 60.765218][ T7528] device hsr_slave_1 entered promiscuous mode [ 60.804610][ T7528] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.826097][ T7543] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.833307][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.842541][ T7543] device bridge_slave_0 entered promiscuous mode [ 60.858008][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.872968][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.885190][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.894298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.924640][ T7543] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.932524][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.942631][ T7543] device bridge_slave_1 entered promiscuous mode [ 60.970334][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.985391][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.997015][ T7520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.028199][ T7525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.037542][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.054315][ T7520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.070043][ T7543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.104599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.117339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.147857][ T7525] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.181973][ T7543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.225697][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.250258][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.261820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.292618][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.303819][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.320204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.330044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.339888][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.351957][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.362852][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.375699][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.389932][ T7543] team0: Port device team_slave_0 added [ 61.401944][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.421213][ T7525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.432693][ T7525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.448784][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.457669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.469465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.480424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.492313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.503622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.512930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.522616][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.532398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.542106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.552440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.571845][ T7543] team0: Port device team_slave_1 added [ 61.610818][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.638207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.648717][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.660087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.681923][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.692266][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.701016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.712084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.724389][ C0] hrtimer: interrupt took 46952 ns [ 61.735139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.746574][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.757119][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.798005][ T7525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.807870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.816869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.826528][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.836466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.857151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.871784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.881737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.897217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.911927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.947613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.968489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.007485][ T7583] loop1: p1 p2[EZD] p3 p4 [ 62.010660][ T7528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.036119][ T7583] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 62.077724][ T7543] device hsr_slave_0 entered promiscuous mode [ 62.094898][ T7583] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 62.135044][ T7543] device hsr_slave_1 entered promiscuous mode [ 62.184569][ T7543] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.370122][ T7543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.445313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.505600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.516495][ T7543] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.612057][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.637148][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 09:36:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 09:36:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 62.706445][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.713651][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.808777][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.819746][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.840144][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.855521][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.864234][ T7566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.880024][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.913061][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.941033][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 09:36:10 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x80000001, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg$inet6(r0, &(0x7f00000057c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x2, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x2, 0x0) 09:36:10 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 62.988670][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.040538][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.100505][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.138993][ T7543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.228576][ T7543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.338011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.346433][ T7626] loop1: p1 p2[EZD] p3 p4 [ 63.373198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.411620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.443209][ T7626] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 63.457460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.474255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.525365][ T7626] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 63.560387][ T7543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.056777][ T7654] loop5: AHDI p2 p3 [ 64.062387][ T7654] loop5: p2 start 33028169 is beyond EOD, truncated 09:36:12 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000002340)=[{0x0, 0x0, 0x10001}, {&(0x7f0000000240)="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", 0x1d8, 0xa}]) [ 64.225833][ T7654] loop5: AHDI p2 p3 [ 64.231038][ T7654] loop5: p2 start 33028169 is beyond EOD, truncated 09:36:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b661f4110b39c13165b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:36:12 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x205d6a92b46c1c5, 0x0) 09:36:12 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x80000001, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg$inet6(r0, &(0x7f00000057c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x2, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x2, 0x0) 09:36:12 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 09:36:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 09:36:12 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x205d6a92b46c1c5, 0x0) 09:36:12 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x80000001, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg$inet6(r0, &(0x7f00000057c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x2, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x2, 0x0) [ 64.646308][ T7681] loop5: AHDI p2 p3 [ 64.674711][ T7681] loop5: p2 start 33028169 is beyond EOD, truncated 09:36:12 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 09:36:12 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 64.776373][ T7673] loop1: p1 p2[EZD] p3 p4 [ 64.802460][ T7673] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 64.821183][ T7673] loop1: p3 size 1912633224 extends beyond EOD, truncated 09:36:12 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x205d6a92b46c1c5, 0x0) 09:36:13 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 09:36:13 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000002340)=[{0x0, 0x0, 0x10001}, {&(0x7f0000000240)="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", 0x1d8, 0xa}]) 09:36:13 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 09:36:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 09:36:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 09:36:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 65.646954][ T7711] loop5: AHDI p2 p3 [ 65.651648][ T7711] loop5: p2 start 33028169 is beyond EOD, truncated [ 65.755202][ T7518] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 65.802183][ T7719] blk_update_request: I/O error, dev loop1, sector 201856 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 65.839275][ T7723] blk_update_request: I/O error, dev loop1, sector 201856 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 65.881959][ T7724] blk_update_request: I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:36:13 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 65.944759][ T2508] blk_update_request: I/O error, dev loop1, sector 201856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.961811][ T2508] Buffer I/O error on dev loop1p2, logical block 50464, async page read [ 65.972327][ T2508] blk_update_request: I/O error, dev loop1, sector 201856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.984958][ T2508] Buffer I/O error on dev loop1p3, logical block 50464, async page read [ 65.994205][ T2508] blk_update_request: I/O error, dev loop1, sector 201860 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.006769][ T2508] Buffer I/O error on dev loop1p3, logical block 50465, async page read [ 66.018029][ T7723] blk_update_request: I/O error, dev loop1, sector 202064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.018133][ T2508] blk_update_request: I/O error, dev loop1, sector 201860 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.018168][ T2508] Buffer I/O error on dev loop1p2, logical block 50465, async page read [ 66.037543][ T7729] blk_update_request: I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.046498][ T7719] blk_update_request: I/O error, dev loop1, sector 202064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.073589][ T2509] Buffer I/O error on dev loop1p3, logical block 50516, async page read [ 66.127127][ T2509] Buffer I/O error on dev loop1p3, logical block 50517, async page read [ 66.141396][ T2509] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 66.150536][ T2509] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 66.162484][ T2509] Buffer I/O error on dev loop1p1, logical block 1, async page read 09:36:14 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 09:36:14 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000002340)=[{0x0, 0x0, 0x10001}, {&(0x7f0000000240)="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", 0x1d8, 0xa}]) [ 66.172584][ T2509] Buffer I/O error on dev loop1p1, logical block 2, async page read [ 66.213041][ T7734] loop3: p1 p2[EZD] p3 p4 [ 66.248751][ T7734] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 66.304661][ T7742] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 66.335798][ T7734] loop3: p3 size 1912633224 extends beyond EOD, truncated [ 66.402884][ T7731] loop4: p1 p2[EZD] p3 p4 09:36:14 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 66.462746][ T7731] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 66.551397][ T7731] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 66.561827][ T7751] loop5: AHDI p2 p3 [ 66.587205][ T7751] loop5: p2 start 33028169 is beyond EOD, truncated 09:36:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 09:36:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 09:36:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 67.192958][ T7768] loop1: p1 p2[EZD] p3 p4 [ 67.233852][ T7768] loop1: p2 size 1073741824 extends beyond EOD, truncated 09:36:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 09:36:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 67.408822][ T7768] loop1: p3 size 1912633224 extends beyond EOD, truncated 09:36:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00), 0x4, 0xf3b6ccdc400cd531, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x200000000000000, 0x50400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 67.661385][ T7773] loop3: p1 p2[EZD] p3 p4 [ 67.743111][ T7804] ================================================================== [ 67.752151][ T7804] BUG: KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor [ 67.766702][ T7804] [ 67.769337][ T7804] write to 0xffffffff860bff28 of 8 bytes by task 7810 on cpu 1: [ 67.779016][ T7804] tomoyo_supervisor+0x1ec/0xd20 [ 67.784490][ T7804] tomoyo_path_permission+0x121/0x160 [ 67.790574][ T7804] tomoyo_path_perm+0x23e/0x390 [ 67.797183][ T7804] tomoyo_path_truncate+0x26/0x40 [ 67.802684][ T7804] security_path_truncate+0x9b/0xd0 [ 67.808135][ T7804] do_sys_ftruncate+0x27d/0x340 [ 67.813635][ T7804] __x64_sys_ftruncate+0x3f/0x50 [ 67.819078][ T7804] do_syscall_64+0xcf/0x2f0 [ 67.823780][ T7804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.830117][ T7804] [ 67.832531][ T7804] write to 0xffffffff860bff28 of 8 bytes by task 7804 on cpu 0: [ 67.840172][ T7804] tomoyo_supervisor+0x1ec/0xd20 [ 67.846600][ T7804] tomoyo_path_permission+0x121/0x160 [ 67.852457][ T7804] tomoyo_check_open_permission+0x2fd/0x320 [ 67.859891][ T7804] tomoyo_file_open+0x75/0x90 [ 67.865043][ T7804] security_file_open+0x69/0x210 [ 67.870636][ T7804] do_dentry_open+0x20a/0x900 [ 67.875610][ T7804] vfs_open+0x62/0x80 [ 67.879905][ T7804] path_openat+0xf75/0x3530 [ 67.884448][ T7804] do_filp_open+0x11e/0x1b0 [ 67.889359][ T7804] do_sys_open+0x3b3/0x4f0 [ 67.894406][ T7804] __x64_sys_open+0x55/0x70 [ 67.899847][ T7804] do_syscall_64+0xcf/0x2f0 [ 67.904450][ T7804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.911007][ T7804] [ 67.913341][ T7804] Reported by Kernel Concurrency Sanitizer on: [ 67.920958][ T7804] CPU: 0 PID: 7804 Comm: udevd Not tainted 5.3.0+ #0 [ 67.927957][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.938634][ T7804] ================================================================== [ 67.947921][ T7804] Kernel panic - not syncing: panic_on_warn set ... [ 67.955144][ T7804] CPU: 0 PID: 7804 Comm: udevd Not tainted 5.3.0+ #0 [ 67.967103][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.981133][ T7804] Call Trace: [ 67.986268][ T7804] dump_stack+0xf5/0x159 [ 67.992384][ T7804] panic+0x209/0x639 [ 67.997594][ T7804] ? do_filp_open+0x11e/0x1b0 [ 68.004489][ T7804] ? vprintk_func+0x8d/0x140 [ 68.009529][ T7804] kcsan_report.cold+0xc/0x1b [ 68.014710][ T7804] __kcsan_setup_watchpoint+0x3ee/0x510 [ 68.021102][ T7804] __tsan_write8+0x32/0x40 [ 68.027566][ T7804] tomoyo_supervisor+0x1ec/0xd20 [ 68.038144][ T7804] ? __kcsan_setup_watchpoint+0x96/0x510 [ 68.046616][ T7804] ? __kcsan_setup_watchpoint+0x96/0x510 [ 68.053021][ T7804] ? __tsan_write1+0x32/0x40 [ 68.058163][ T7804] ? tomoyo_compare_name_union+0xa0/0xa0 [ 68.065053][ T7804] tomoyo_path_permission+0x121/0x160 [ 68.071776][ T7804] tomoyo_check_open_permission+0x2fd/0x320 [ 68.078564][ T7804] tomoyo_file_open+0x75/0x90 [ 68.088128][ T7804] security_file_open+0x69/0x210 [ 68.098173][ T7804] do_dentry_open+0x20a/0x900 [ 68.106404][ T7804] ? security_inode_permission+0xa5/0xc0 [ 68.115168][ T7804] ? __kcsan_setup_watchpoint+0x96/0x510 [ 68.124649][ T7804] vfs_open+0x62/0x80 [ 68.131866][ T7804] path_openat+0xf75/0x3530 [ 68.137540][ T7804] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 68.145272][ T7804] do_filp_open+0x11e/0x1b0 [ 68.151964][ T7804] ? __alloc_fd+0x316/0x4c0 [ 68.158353][ T7804] do_sys_open+0x3b3/0x4f0 [ 68.167751][ T7804] __x64_sys_open+0x55/0x70 [ 68.172768][ T7804] do_syscall_64+0xcf/0x2f0 [ 68.178083][ T7804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.186378][ T7804] RIP: 0033:0x7f7c8cc65120 [ 68.192893][ T7804] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 68.220780][ T7804] RSP: 002b:00007fff435c3448 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 68.230378][ T7804] RAX: ffffffffffffffda RBX: 00000000012bfa80 RCX: 00007f7c8cc65120 [ 68.244706][ T7804] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007fff435c3520 [ 68.255357][ T7804] RBP: 00007fff435c34c0 R08: 0000000000000008 R09: 0000000000000001 [ 68.265096][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 68.275759][ T7804] R13: 000000000041f57a R14: 00000000012b8250 R15: 000000000000000b [ 68.288439][ T7804] Kernel Offset: disabled [ 68.293517][ T7804] Rebooting in 86400 seconds..