[ 51.812845][ T26] audit: type=1800 audit(1572994530.684:26): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 51.833412][ T26] audit: type=1800 audit(1572994530.684:27): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 51.892363][ T26] audit: type=1800 audit(1572994530.684:28): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.859107][ T26] audit: type=1800 audit(1572994531.744:29): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. 2019/11/05 22:55:41 fuzzer started 2019/11/05 22:55:43 dialing manager at 10.128.0.105:43787 2019/11/05 22:55:43 syscalls: 2553 2019/11/05 22:55:43 code coverage: enabled 2019/11/05 22:55:43 comparison tracing: enabled 2019/11/05 22:55:43 extra coverage: extra coverage is not supported by the kernel 2019/11/05 22:55:43 setuid sandbox: enabled 2019/11/05 22:55:43 namespace sandbox: enabled 2019/11/05 22:55:43 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/05 22:55:43 fault injection: enabled 2019/11/05 22:55:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/05 22:55:43 net packet injection: enabled 2019/11/05 22:55:43 net device setup: enabled 2019/11/05 22:55:43 concurrency sanitizer: enabled 2019/11/05 22:55:43 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 72.375924][ T8082] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/05 22:55:56 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'osq_lock' 'pipe_poll' 'lruvec_lru_size' 'find_get_pages_range_tag' 'virtqueue_disable_cb' 'xas_find_marked' 'echo_char' 'tick_sched_do_timer' '__add_to_page_cache_locked' 'generic_permission' 'blk_mq_sched_dispatch_requests' 'xas_clear_mark' 'icmp_global_allow' 'do_signal_stop' 'tomoyo_supervisor' 'mod_timer' 'ext4_free_inodes_count' 'n_tty_receive_buf_common' 'ktime_get_seconds' 'dd_has_work' 'kvm_arch_vcpu_load' 'futex_wait_queue_me' 'do_syslog' 'get_task_cred' 'fsnotify' 'tcp_add_backlog' 'exit_signals' 'generic_fillattr' 'ext4_has_free_clusters' 'do_readlinkat' 'eth_header_cache' 'blk_mq_run_hw_queue' 'copy_process' 'mem_cgroup_select_victim_node' 'kvm_write_tsc' 'blk_mq_dispatch_rq_list' 'tick_nohz_idle_stop_tick' 'add_timer' 'audit_log_start' 'vm_area_dup' 'sit_tunnel_xmit' 'ep_poll' 'rcu_gp_fqs_check_wake' 'snapshot_refaults' 'fprop_fraction_percpu' '__alloc_file' 'ext4_free_inode' 'run_timer_softirq' 'poll_schedule_timeout' 'ext4_nonda_switch' 'bio_endio' 'pcpu_alloc' 'page_counter_try_charge' 'ext4_setattr' 'pipe_wait' 'blk_mq_get_request' 'taskstats_exit' 'process_srcu' 'kauditd_thread' 'p9_poll_workfn' 'timer_clear_idle' 'tick_do_update_jiffies64' 'ktime_get_real_seconds' 'wbt_done' '__ext4_new_inode' 'inet_putpeer' 'atime_needs_update' 'alloc_empty_file' 'list_lru_count_one' 'yama_ptracer_del' 'tomoyo_domain_quota_is_ok' '__mark_inode_dirty' 'pid_update_inode' 'find_next_bit' 'generic_write_end' 'task_dump_owner' 'rcu_gp_fqs_loop' 'do_exit' 'lookup_fast' 'sk_common_release' 'mm_update_next_owner' 'do_nanosleep' 'blk_mq_free_request' 'virtqueue_enable_cb_delayed' 22:59:56 executing program 0: [ 318.020531][ T8086] IPVS: ftp: loaded support on port[0] = 21 22:59:56 executing program 1: [ 318.103127][ T8086] chnl_net:caif_netlink_parms(): no params data found [ 318.173835][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.181049][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.194151][ T8086] device bridge_slave_0 entered promiscuous mode [ 318.213379][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.220461][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.228744][ T8086] device bridge_slave_1 entered promiscuous mode [ 318.247489][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.264875][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.279724][ T8090] IPVS: ftp: loaded support on port[0] = 21 [ 318.302514][ T8086] team0: Port device team_slave_0 added [ 318.320399][ T8086] team0: Port device team_slave_1 added 22:59:57 executing program 2: [ 318.445719][ T8086] device hsr_slave_0 entered promiscuous mode [ 318.503671][ T8086] device hsr_slave_1 entered promiscuous mode [ 318.603127][ T8093] IPVS: ftp: loaded support on port[0] = 21 22:59:57 executing program 3: [ 318.792445][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.799573][ T8086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.806941][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.814035][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.935106][ T8090] chnl_net:caif_netlink_parms(): no params data found [ 319.101236][ T8086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.133208][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.140285][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.173566][ T8090] device bridge_slave_0 entered promiscuous mode [ 319.190021][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.214151][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.258658][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 319.303688][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.310767][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.343479][ T8090] device bridge_slave_1 entered promiscuous mode [ 319.399117][ T8086] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.418688][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.428288][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.465656][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.493078][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 319.507916][ T8123] IPVS: ftp: loaded support on port[0] = 21 [ 319.515537][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.543390][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.552005][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.559065][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.613252][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.621991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.663059][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.671913][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.723167][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.732128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.763696][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.786080][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.805076][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.845044][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.853489][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.862325][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.875260][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 22:59:58 executing program 4: [ 319.890331][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.898975][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.908037][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.922019][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.014654][ T8090] team0: Port device team_slave_0 added [ 320.021293][ T8090] team0: Port device team_slave_1 added [ 320.072346][ T8086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.108094][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.122788][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.130438][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.151744][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.203587][ T8093] device bridge_slave_0 entered promiscuous mode [ 320.261647][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.270158][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.321654][ T8093] device bridge_slave_1 entered promiscuous mode [ 320.365521][ T8090] device hsr_slave_0 entered promiscuous mode [ 320.422936][ T8090] device hsr_slave_1 entered promiscuous mode [ 320.482671][ T8090] debugfs: Directory 'hsr0' with parent '/' already present! 22:59:59 executing program 5: [ 320.580279][ T8130] IPVS: ftp: loaded support on port[0] = 21 [ 320.587800][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.657505][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.716720][ T8123] chnl_net:caif_netlink_parms(): no params data found 22:59:59 executing program 0: semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() clock_gettime(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = creat(0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="c6292fdfe740aba82d39d230ab243347a178fb1fb08609f55c860b7274ce37fba681b500d0c814f800b8011a484e65b37e866369e0751b310c2e4c24e0ef4ea10fc5291793ea975cc22ca7c07ced93b665d9e45871f7687d63f44d4d868a2bf9e07a4bbec7665b0a0fe52f521c2b62"], 0x83) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)) write$apparmor_current(r4, &(0x7f00000001c0)=@hat={'permhat '}, 0x1b) lseek(r4, 0x0, 0x3) write$UHID_CREATE(r4, &(0x7f0000000400)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000340)=""/184, 0xb8, 0x8, 0x9, 0x101, 0x3, 0x2}, 0x120) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x84480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e, 0x0, @perf_bp={&(0x7f00000002c0), 0x17}, 0x12400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000580)='./file0\x00', 0x800000000004, 0x9, &(0x7f0000000a40)=[{&(0x7f00000005c0)="a5350ba2415fb8be98f2ed96ed687abfa2f48fd846c6630a626103075398a7fd4f18f16f12a8487c33dd4c6233db2be2b1f670738c9ade92fdb22ab3433691c2e5511cf59a7955b4581ff30277496c9b05915cd53316ed92925e52cf1b19a36d8d2a5a8af7fb7fcb4597853b18ff2f0212f460f6b30831de9192358a4282082bc3b66a7daff71d62c6153339c6d1da0fa3bd4a8d", 0x94}, {&(0x7f0000000680)="9616907a0b189374797b539e875b5b0f", 0x10, 0xff}, {&(0x7f00000006c0)="1c6e3d9f815163bf2bd7e384e9a0a325ee996c43d470c41e184e527dfd0e60266df4b314d8c469df5559102db62a8e108527b3f984d9789ed6a8885d3b0306417ae15019314a9111886e9baedcf101dc1cbb0eefc4423444dfadf65f22a4ce63192568b3d5b3285022428e89675b5f98290a0d965e87958ed09f83d6a2a6c89941258b85d5b06bc83d6f0effa4b9c188443fe3fda650f32ff832ffc62126a74d50b3", 0xa2, 0x3}, {&(0x7f0000000800)="36327ac7d3fc25a11c240b85db7ab48d24aa9ed20ed45b2bab40", 0x1a, 0x3f}, {&(0x7f0000000840)="7d9d", 0x2, 0x4}, {&(0x7f0000000880)="0e07177ea8063c8cb71e91136740be5f41a926", 0x13, 0x1ff}, {&(0x7f00000008c0)="c43894311401c77f15aef7322c48d26f03ac0d5930418ffcef16629c787465dc128359827833654373b8d4cf520fbd250803daf586ef533e24b3a694bbb428af6b78b7a5274c08fd9db68b042a0c3e9f5f34c711", 0x54, 0x6}, {&(0x7f0000000940)="e288e47d6f29c60e0c28d1e8f8fac46c0f0dd47ad493e7e307c21af03a36c34eb6311e436c5353997175c88606a99c486bfd4634fc8fafaece655a5881", 0x3d}, {&(0x7f0000000a00), 0x0, 0x8}], 0x4000000, 0x0) [ 320.859046][ T8093] team0: Port device team_slave_0 added [ 320.970078][ T8093] team0: Port device team_slave_1 added [ 320.980445][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.992886][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.053252][ T8167] devpts: called with bogus options [ 321.065011][ T8123] device bridge_slave_0 entered promiscuous mode [ 321.121782][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.145314][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.164706][ T8123] device bridge_slave_1 entered promiscuous mode [ 321.207763][ T8165] IPVS: ftp: loaded support on port[0] = 21 [ 321.224997][ C0] hrtimer: interrupt took 26471 ns [ 321.262872][ T8167] FAT-fs (loop0): invalid media value (0x93) [ 321.269022][ T8167] FAT-fs (loop0): Can't find a valid FAT filesystem [ 321.338382][ T8093] device hsr_slave_0 entered promiscuous mode [ 321.412976][ T8093] device hsr_slave_1 entered promiscuous mode [ 321.443098][ T8093] debugfs: Directory 'hsr0' with parent '/' already present! [ 321.500408][ T8123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.536353][ T8130] chnl_net:caif_netlink_parms(): no params data found [ 321.554778][ T8123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.658128][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.677157][ T8123] team0: Port device team_slave_0 added [ 321.746159][ T8123] team0: Port device team_slave_1 added [ 321.827791][ T8171] devpts: called with bogus options [ 321.858927][ T8090] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.872797][ T8191] FAT-fs (loop0): invalid media value (0x93) [ 321.878822][ T8191] FAT-fs (loop0): Can't find a valid FAT filesystem [ 321.962363][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.971826][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.993602][ T8130] device bridge_slave_0 entered promiscuous mode [ 322.044016][ T8122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.051731][ T8122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.115093][ T8123] device hsr_slave_0 entered promiscuous mode [ 322.183110][ T8123] device hsr_slave_1 entered promiscuous mode [ 322.223422][ T8123] debugfs: Directory 'hsr0' with parent '/' already present! [ 322.263297][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.270401][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.293619][ T8130] device bridge_slave_1 entered promiscuous mode [ 322.329556][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.363265][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.405995][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.413094][ T8120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.488977][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.538165][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.574435][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.581528][ T8120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.633170][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.667675][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.787973][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.804451][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.833811][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.863446][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.872330][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.933602][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.942091][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.013491][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.056526][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.103454][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.130352][ T8165] chnl_net:caif_netlink_parms(): no params data found [ 323.177191][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.201895][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.254967][ T8130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.296195][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.342054][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.393698][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.401269][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.456193][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.502482][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.534762][ T8130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.603292][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.611831][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.643176][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.650363][ T8120] bridge0: port 1(bridge_slave_0) entered forwarding state 23:00:02 executing program 0: semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() clock_gettime(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = creat(0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="c6292fdfe740aba82d39d230ab243347a178fb1fb08609f55c860b7274ce37fba681b500d0c814f800b8011a484e65b37e866369e0751b310c2e4c24e0ef4ea10fc5291793ea975cc22ca7c07ced93b665d9e45871f7687d63f44d4d868a2bf9e07a4bbec7665b0a0fe52f521c2b62"], 0x83) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)) write$apparmor_current(r4, &(0x7f00000001c0)=@hat={'permhat '}, 0x1b) lseek(r4, 0x0, 0x3) write$UHID_CREATE(r4, &(0x7f0000000400)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000340)=""/184, 0xb8, 0x8, 0x9, 0x101, 0x3, 0x2}, 0x120) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x84480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e, 0x0, @perf_bp={&(0x7f00000002c0), 0x17}, 0x12400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000580)='./file0\x00', 0x800000000004, 0x9, &(0x7f0000000a40)=[{&(0x7f00000005c0)="a5350ba2415fb8be98f2ed96ed687abfa2f48fd846c6630a626103075398a7fd4f18f16f12a8487c33dd4c6233db2be2b1f670738c9ade92fdb22ab3433691c2e5511cf59a7955b4581ff30277496c9b05915cd53316ed92925e52cf1b19a36d8d2a5a8af7fb7fcb4597853b18ff2f0212f460f6b30831de9192358a4282082bc3b66a7daff71d62c6153339c6d1da0fa3bd4a8d", 0x94}, {&(0x7f0000000680)="9616907a0b189374797b539e875b5b0f", 0x10, 0xff}, {&(0x7f00000006c0)="1c6e3d9f815163bf2bd7e384e9a0a325ee996c43d470c41e184e527dfd0e60266df4b314d8c469df5559102db62a8e108527b3f984d9789ed6a8885d3b0306417ae15019314a9111886e9baedcf101dc1cbb0eefc4423444dfadf65f22a4ce63192568b3d5b3285022428e89675b5f98290a0d965e87958ed09f83d6a2a6c89941258b85d5b06bc83d6f0effa4b9c188443fe3fda650f32ff832ffc62126a74d50b3", 0xa2, 0x3}, {&(0x7f0000000800)="36327ac7d3fc25a11c240b85db7ab48d24aa9ed20ed45b2bab40", 0x1a, 0x3f}, {&(0x7f0000000840)="7d9d", 0x2, 0x4}, {&(0x7f0000000880)="0e07177ea8063c8cb71e91136740be5f41a926", 0x13, 0x1ff}, {&(0x7f00000008c0)="c43894311401c77f15aef7322c48d26f03ac0d5930418ffcef16629c787465dc128359827833654373b8d4cf520fbd250803daf586ef533e24b3a694bbb428af6b78b7a5274c08fd9db68b042a0c3e9f5f34c711", 0x54, 0x6}, {&(0x7f0000000940)="e288e47d6f29c60e0c28d1e8f8fac46c0f0dd47ad493e7e307c21af03a36c34eb6311e436c5353997175c88606a99c486bfd4634fc8fafaece655a5881", 0x3d}, {&(0x7f0000000a00), 0x0, 0x8}], 0x4000000, 0x0) [ 323.693218][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.701970][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.736526][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.743625][ T8120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.772472][ T8232] devpts: called with bogus options [ 323.793223][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.802374][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.854110][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.883050][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.990615][ T8232] FAT-fs (loop0): invalid media value (0x93) [ 324.006903][ T8232] FAT-fs (loop0): Can't find a valid FAT filesystem [ 324.024796][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.032016][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.173427][ T8165] device bridge_slave_0 entered promiscuous mode [ 324.265670][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.276086][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.343764][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.412774][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.421933][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.548284][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.623539][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.632438][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.763941][ T8130] team0: Port device team_slave_0 added [ 324.773637][ T8130] team0: Port device team_slave_1 added [ 324.860897][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.914844][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.982002][ T8165] device bridge_slave_1 entered promiscuous mode [ 325.084201][ T8093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.099707][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.190872][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.285136][ T8130] device hsr_slave_0 entered promiscuous mode [ 325.342979][ T8130] device hsr_slave_1 entered promiscuous mode [ 325.372646][ T8130] debugfs: Directory 'hsr0' with parent '/' already present! [ 325.380633][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.406659][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.451730][ T8123] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.511212][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.552705][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.560727][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.624812][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.707412][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.726959][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.752271][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.759393][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.807702][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.832514][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.858068][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.865178][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.943456][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.951297][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.015941][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.041903][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.051056][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.077275][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.088772][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.111316][ T8123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.145921][ T8123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.174895][ T8165] team0: Port device team_slave_0 added [ 326.180785][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.207745][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.226455][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.247355][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.273914][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.294833][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.341970][ T8123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.367743][ T8165] team0: Port device team_slave_1 added [ 326.401129][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.415817][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.535806][ T8165] device hsr_slave_0 entered promiscuous mode [ 326.583007][ T8165] device hsr_slave_1 entered promiscuous mode [ 326.612707][ T8165] debugfs: Directory 'hsr0' with parent '/' already present! [ 326.623227][ T8130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.695107][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.734198][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.775525][ T8130] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.869172][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.903395][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.912160][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.919296][ T8261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.990043][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.037822][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.086938][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.094045][ T8261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.126757][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.197073][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.209599][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:00:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$input_event(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) msgget$private(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100)="1b", 0x1, 0x8000, 0x0, 0x8f4b3a4c8fb86a) close(r0) [ 327.253674][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.273866][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.333770][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.371352][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 23:00:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x1, &(0x7f0000000080), 0x0, 0x8) [ 327.421829][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 23:00:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x20000000) 23:00:06 executing program 0: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0xa5a023b491cb7db6, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @empty, 0xffffffff}, r3}}, 0x30) r4 = getpid() r5 = semget(0x3, 0x3, 0x8) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) semctl$SEM_INFO(r5, 0x2, 0x13, &(0x7f0000000180)=""/229) tkill(r4, 0x9) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x0, 0x9, 0x5, 0x8001}) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="31dd9638e37faaaaaaaaaabb86dd6014000000442f00fe80000500518361c589896f580000aafe8000000000000000000000000000aa26206558000000"], 0x0) [ 327.584489][ T8130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.682633][ T8130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.800983][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.820667][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 23:00:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0xb0ff20, 0x1, 0x11, r0, 0x0) 23:00:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) [ 327.913595][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.922048][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.113636][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.178208][ T8130] 8021q: adding VLAN 0 to HW filter on device batadv0 23:00:07 executing program 2: [ 328.303291][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.310841][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 23:00:07 executing program 3: [ 328.426086][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.572696][ T8165] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.684668][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.693000][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.802282][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.852359][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.953023][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.960102][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.081054][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.146215][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.193860][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.202426][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.209610][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.343353][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.352436][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.443961][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.483011][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.492044][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.563749][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.609022][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.638780][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.673417][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.694592][ T8165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.763335][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.798620][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.817456][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.866831][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.883383][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 23:00:08 executing program 4: [ 329.913231][ T8165] 8021q: adding VLAN 0 to HW filter on device batadv0 23:00:09 executing program 5: 23:00:09 executing program 1: 23:00:09 executing program 0: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0xa5a023b491cb7db6, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @empty, 0xffffffff}, r3}}, 0x30) r4 = getpid() r5 = semget(0x3, 0x3, 0x8) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) semctl$SEM_INFO(r5, 0x2, 0x13, &(0x7f0000000180)=""/229) tkill(r4, 0x9) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x0, 0x9, 0x5, 0x8001}) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="31dd9638e37faaaaaaaaaabb86dd6014000000442f00fe80000500518361c589896f580000aafe8000000000000000000000000000aa26206558000000"], 0x0) 23:00:09 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0xa5a023b491cb7db6, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @empty, 0xffffffff}, r3}}, 0x30) r4 = getpid() r5 = semget(0x3, 0x3, 0x8) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) semctl$SEM_INFO(r5, 0x2, 0x13, &(0x7f0000000180)=""/229) tkill(r4, 0x9) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x0, 0x9, 0x5, 0x8001}) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="31dd9638e37faaaaaaaaaabb86dd6014000000442f00fe80000500518361c589896f580000aafe8000000000000000000000000000aa26206558000000"], 0x0) 23:00:09 executing program 3: 23:00:09 executing program 4: 23:00:09 executing program 1: 23:00:09 executing program 4: 23:00:09 executing program 5: 23:00:09 executing program 3: 23:00:09 executing program 2: 23:00:09 executing program 0: 23:00:09 executing program 1: 23:00:09 executing program 4: 23:00:09 executing program 0: 23:00:09 executing program 3: 23:00:09 executing program 2: 23:00:09 executing program 5: 23:00:09 executing program 1: 23:00:09 executing program 4: 23:00:09 executing program 0: 23:00:10 executing program 2: 23:00:10 executing program 1: 23:00:10 executing program 3: 23:00:10 executing program 5: 23:00:10 executing program 4: 23:00:10 executing program 0: 23:00:10 executing program 2: 23:00:10 executing program 1: 23:00:10 executing program 5: 23:00:10 executing program 3: 23:00:10 executing program 4: 23:00:10 executing program 1: 23:00:10 executing program 5: 23:00:10 executing program 2: 23:00:10 executing program 0: 23:00:10 executing program 3: 23:00:10 executing program 5: 23:00:10 executing program 1: 23:00:11 executing program 2: 23:00:11 executing program 4: 23:00:11 executing program 0: 23:00:11 executing program 5: 23:00:11 executing program 3: 23:00:11 executing program 4: 23:00:11 executing program 5: 23:00:11 executing program 1: 23:00:11 executing program 2: 23:00:11 executing program 0: 23:00:11 executing program 3: 23:00:11 executing program 4: 23:00:11 executing program 5: 23:00:11 executing program 1: 23:00:11 executing program 2: 23:00:11 executing program 0: 23:00:11 executing program 3: 23:00:11 executing program 5: 23:00:11 executing program 4: 23:00:11 executing program 0: 23:00:12 executing program 2: 23:00:12 executing program 3: 23:00:12 executing program 1: 23:00:12 executing program 0: 23:00:12 executing program 5: 23:00:12 executing program 4: 23:00:12 executing program 3: 23:00:12 executing program 0: 23:00:12 executing program 2: 23:00:12 executing program 1: 23:00:12 executing program 5: 23:00:12 executing program 3: 23:00:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0xff}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab667) 23:00:12 executing program 1: write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="31dd9638e37f", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "1400", 0x44, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) 23:00:12 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) 23:00:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 23:00:12 executing program 5: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x400000000080803, 0x0) write(r3, &(0x7f0000001540)="240000001a00d17da53a7c36fef7001d0b49ffed00000080002800faff030001f3ff00", 0x1b6) read(r3, &(0x7f0000000200)=""/4096, 0x9f8) 23:00:12 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000080)={0x4ae3}) 23:00:12 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00\xc7\xec\xac\x1d;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xb2\xed;pC\x19\xbf\x04\x00\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xe7\xbd\x19\xc3\xd6S\x9e\xb7m4\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x9) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000288, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000288, 0x0) 23:00:13 executing program 5: socket$netlink(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0xfd00) utimes(0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) prctl$PR_SET_TIMERSLACK(0xf, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140)) r2 = gettid() tkill(0x0, 0x0) tkill(r2, 0x1000000000016) 23:00:13 executing program 1: write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="31dd9638e37f", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "1400", 0x44, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) 23:00:13 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="f4001100002b2b25fe8000000000000005baa68754ba00e8c1344f3e62d76c27e800004102ffffff8400b1d67cbad909f1ed4887aaa9a77a90e1c9c70a3aeec1", 0x40}], 0x1}, 0x0) [ 334.392645][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 334.398480][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:00:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000288, 0x62139bc298) 23:00:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ppoll(&(0x7f0000000000)=[{r1}, {r0}, {r3}, {r5, 0x2500}], 0x4, 0x0, &(0x7f00000000c0)={0x70}, 0x8) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) [ 334.552668][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 334.558506][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:00:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0xff}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab667) 23:00:13 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="f4001100002b2b25fe8000000000000005baa68754ba00e8c1344f3e62d76c27e800004102ffffff8400b1d67cbad909f1ed4887aaa9a77a90e1c9c70a3aeec1", 0x40}], 0x1}, 0x0) 23:00:13 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="f4001100002b2b25fe8000000000000005baa68754ba00e8c1344f3e62d76c27e800004102ffffff8400b1d67cbad909f1ed4887aaa9a77a90e1c9c70a3aeec1", 0x40}], 0x1}, 0x0) [ 334.952621][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 334.952649][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 334.958537][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 334.964244][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:00:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000288, 0x62139bc298) 23:00:13 executing program 3: perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='eth1\\\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0xa, 0x5, 0x1}, 0xa) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 23:00:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 23:00:14 executing program 3: perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='eth1\\\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0xa, 0x5, 0x1}, 0xa) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 23:00:14 executing program 1: socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 23:00:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:14 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x38, 0x0, 0x0, @ipv4, @mcast2, {[@fragment], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @mcast2, @local}}}}}}}, 0x0) 23:00:14 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00\xc7\xec\xac\x1d;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xb2\xed;pC\x19\xbf\x04\x00\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xe7\xbd\x19\xc3\xd6S\x9e\xb7m4\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x9) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000288, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000288, 0x0) 23:00:14 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00\xc7\xec\xac\x1d;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xb2\xed;pC\x19\xbf\x04\x00\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xe7\xbd\x19\xc3\xd6S\x9e\xb7m4\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x9) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000288, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000288, 0x0) 23:00:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0xff}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab667) 23:00:14 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00\xc7\xec\xac\x1d;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xb2\xed;pC\x19\xbf\x04\x00\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xe7\xbd\x19\xc3\xd6S\x9e\xb7m4\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x9) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000288, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000288, 0x0) 23:00:14 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00\xc7\xec\xac\x1d;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xb2\xed;pC\x19\xbf\x04\x00\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xe7\xbd\x19\xc3\xd6S\x9e\xb7m4\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x9) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000288, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000288, 0x0) [ 335.912671][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 335.918480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 336.266145][ T8645] ================================================================== [ 336.274323][ T8645] BUG: KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_add [ 336.282389][ T8645] [ 336.284738][ T8645] read to 0xffff888121f32718 of 2 bytes by task 8651 on cpu 0: [ 336.292297][ T8645] batadv_tt_local_add+0x11b/0x1020 [ 336.297520][ T8645] batadv_interface_tx+0x398/0xae0 [ 336.302657][ T8645] dev_hard_start_xmit+0xef/0x430 [ 336.307720][ T8645] __dev_queue_xmit+0x14ab/0x1b40 [ 336.312796][ T8645] dev_queue_xmit+0x21/0x30 [ 336.317313][ T8645] ip_finish_output2+0x836/0xe40 [ 336.322264][ T8645] __ip_finish_output+0x23a/0x490 [ 336.327304][ T8645] ip_finish_output+0x41/0x160 [ 336.332081][ T8645] ip_mc_output+0x143/0x620 [ 336.336602][ T8645] ip_local_out+0x74/0x90 [ 336.340946][ T8645] ip_send_skb+0x35/0xb0 [ 336.345200][ T8645] udp_send_skb.isra.0+0x3ce/0x8c0 [ 336.350321][ T8645] udp_sendmsg+0x1568/0x1900 [ 336.354924][ T8645] inet_sendmsg+0x6d/0x90 [ 336.360297][ T8645] sock_sendmsg+0x9f/0xc0 [ 336.364660][ T8645] ___sys_sendmsg+0x2b7/0x5d0 [ 336.369348][ T8645] __sys_sendmmsg+0x123/0x350 [ 336.374040][ T8645] __x64_sys_sendmmsg+0x64/0x80 [ 336.378905][ T8645] do_syscall_64+0xcc/0x370 [ 336.383414][ T8645] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.389296][ T8645] [ 336.391732][ T8645] write to 0xffff888121f32718 of 2 bytes by task 8645 on cpu 1: [ 336.399378][ T8645] batadv_tt_local_add+0x21b/0x1020 [ 336.404591][ T8645] batadv_interface_tx+0x398/0xae0 [ 336.409719][ T8645] dev_hard_start_xmit+0xef/0x430 [ 336.414762][ T8645] __dev_queue_xmit+0x14ab/0x1b40 [ 336.419799][ T8645] dev_queue_xmit+0x21/0x30 [ 336.424313][ T8645] ip_finish_output2+0x836/0xe40 [ 336.429267][ T8645] __ip_finish_output+0x23a/0x490 [ 336.434309][ T8645] ip_finish_output+0x41/0x160 [ 336.439086][ T8645] ip_mc_output+0x143/0x620 [ 336.443604][ T8645] ip_local_out+0x74/0x90 [ 336.447946][ T8645] ip_send_skb+0x35/0xb0 [ 336.452213][ T8645] udp_send_skb.isra.0+0x3ce/0x8c0 [ 336.457336][ T8645] udp_sendmsg+0x1568/0x1900 [ 336.461933][ T8645] inet_sendmsg+0x6d/0x90 [ 336.466276][ T8645] sock_sendmsg+0x9f/0xc0 [ 336.470614][ T8645] ___sys_sendmsg+0x2b7/0x5d0 [ 336.475298][ T8645] __sys_sendmmsg+0x123/0x350 [ 336.479977][ T8645] __x64_sys_sendmmsg+0x64/0x80 [ 336.484849][ T8645] do_syscall_64+0xcc/0x370 [ 336.489383][ T8645] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.495261][ T8645] [ 336.497586][ T8645] Reported by Kernel Concurrency Sanitizer on: [ 336.503757][ T8645] CPU: 1 PID: 8645 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0 [ 336.511568][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.521756][ T8645] ================================================================== [ 336.529828][ T8645] Kernel panic - not syncing: panic_on_warn set ... [ 336.536435][ T8645] CPU: 1 PID: 8645 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0 [ 336.544245][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.554304][ T8645] Call Trace: [ 336.557620][ T8645] dump_stack+0xf5/0x159 [ 336.561881][ T8645] panic+0x210/0x640 [ 336.565816][ T8645] ? vprintk_func+0x8d/0x140 [ 336.570449][ T8645] kcsan_report.cold+0xc/0xe [ 336.575066][ T8645] kcsan_setup_watchpoint+0x3fe/0x410 [ 336.580468][ T8645] __tsan_unaligned_write2+0x143/0x1f0 [ 336.585950][ T8645] batadv_tt_local_add+0x21b/0x1020 [ 336.591177][ T8645] ? __read_once_size.constprop.0+0x12/0x20 [ 336.597103][ T8645] batadv_interface_tx+0x398/0xae0 [ 336.602253][ T8645] dev_hard_start_xmit+0xef/0x430 [ 336.607317][ T8645] __dev_queue_xmit+0x14ab/0x1b40 [ 336.612368][ T8645] ? ipt_do_table+0x8e9/0xe60 [ 336.617061][ T8645] ? __this_cpu_preempt_check+0x4a/0x170 [ 336.622796][ T8645] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 336.628711][ T8645] ? __rcu_read_unlock+0x66/0x3c0 [ 336.633757][ T8645] ? nf_nat_packet+0xc2/0x110 [ 336.638458][ T8645] dev_queue_xmit+0x21/0x30 [ 336.642982][ T8645] ip_finish_output2+0x836/0xe40 [ 336.647940][ T8645] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 336.653867][ T8645] __ip_finish_output+0x23a/0x490 [ 336.658917][ T8645] ip_finish_output+0x41/0x160 [ 336.663708][ T8645] ip_mc_output+0x143/0x620 [ 336.668243][ T8645] ? __ip_finish_output+0x490/0x490 [ 336.673474][ T8645] ip_local_out+0x74/0x90 [ 336.677821][ T8645] ip_send_skb+0x35/0xb0 [ 336.682082][ T8645] udp_send_skb.isra.0+0x3ce/0x8c0 [ 336.687218][ T8645] udp_sendmsg+0x1568/0x1900 [ 336.691834][ T8645] ? ip_reply_glue_bits+0xb0/0xb0 [ 336.696893][ T8645] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 336.703154][ T8645] ? aa_label_sk_perm+0x89/0xe0 [ 336.708044][ T8645] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 336.714309][ T8645] inet_sendmsg+0x6d/0x90 [ 336.718674][ T8645] ? inet_sendmsg+0x6d/0x90 [ 336.723204][ T8645] ? inet_send_prepare+0x200/0x200 [ 336.728339][ T8645] sock_sendmsg+0x9f/0xc0 [ 336.732705][ T8645] ___sys_sendmsg+0x2b7/0x5d0 [ 336.737409][ T8645] ? __rcu_read_unlock+0x66/0x3c0 [ 336.742458][ T8645] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 336.748378][ T8645] ? __fget+0xb8/0x1d0 [ 336.752476][ T8645] ? __fget_light+0xaf/0x190 [ 336.757093][ T8645] __sys_sendmmsg+0x123/0x350 [ 336.761806][ T8645] ? __read_once_size+0x5a/0xe0 [ 336.766682][ T8645] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 336.772413][ T8645] ? _copy_to_user+0x84/0xb0 [ 336.777035][ T8645] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 336.783485][ T8645] ? put_timespec64+0x94/0xc0 [ 336.788190][ T8645] __x64_sys_sendmmsg+0x64/0x80 [ 336.793086][ T8645] do_syscall_64+0xcc/0x370 [ 336.797627][ T8645] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.803553][ T8645] RIP: 0033:0x45a219 [ 336.807476][ T8645] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.827186][ T8645] RSP: 002b:00007f2ae4518c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 336.835621][ T8645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219 [ 336.843621][ T8645] RDX: 0400000000000288 RSI: 0000000020007fc0 RDI: 000000000000000a [ 336.851614][ T8645] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 336.859625][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ae45196d4 [ 336.867636][ T8645] R13: 00000000004c7f9d R14: 00000000004de3c8 R15: 00000000ffffffff [ 336.877022][ T8645] Kernel Offset: disabled [ 336.881354][ T8645] Rebooting in 86400 seconds..