[ 43.380052][ T26] audit: type=1800 audit(1573150744.555:27): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.408115][ T26] audit: type=1800 audit(1573150744.555:28): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.909465][ T26] audit: type=1800 audit(1573150745.155:29): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.928821][ T26] audit: type=1800 audit(1573150745.155:30): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. 2019/11/07 18:19:15 fuzzer started 2019/11/07 18:19:15 dialing manager at 10.128.0.26:43705 2019/11/07 18:19:15 checking machine... 2019/11/07 18:19:15 checking revisions... 2019/11/07 18:19:15 testing simple program... syzkaller login: [ 54.868407][ T8021] IPVS: ftp: loaded support on port[0] = 21 2019/11/07 18:19:16 building call list... [ 55.605552][ T8011] can: request_module (can-proto-0) failed. executing program [ 58.196526][ T8011] can: request_module (can-proto-0) failed. [ 58.207993][ T8011] can: request_module (can-proto-0) failed. 2019/11/07 18:19:24 syscalls: 2566 2019/11/07 18:19:24 code coverage: enabled 2019/11/07 18:19:24 comparison tracing: enabled 2019/11/07 18:19:24 extra coverage: extra coverage is not supported by the kernel 2019/11/07 18:19:24 setuid sandbox: enabled 2019/11/07 18:19:24 namespace sandbox: enabled 2019/11/07 18:19:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/07 18:19:24 fault injection: enabled 2019/11/07 18:19:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/07 18:19:24 net packet injection: enabled 2019/11/07 18:19:24 net device setup: enabled 2019/11/07 18:19:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/07 18:19:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 18:19:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000000044e, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @sliced}) 18:19:25 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) dup3(r0, r1, 0x0) [ 64.159923][ T8068] IPVS: ftp: loaded support on port[0] = 21 [ 64.271232][ T8068] chnl_net:caif_netlink_parms(): no params data found [ 64.365014][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.372717][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.395945][ T8068] device bridge_slave_0 entered promiscuous mode [ 64.405073][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.412374][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.414366][ T8071] IPVS: ftp: loaded support on port[0] = 21 [ 64.426699][ T8068] device bridge_slave_1 entered promiscuous mode [ 64.448114][ T8068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.460310][ T8068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.489210][ T8068] team0: Port device team_slave_0 added [ 64.497229][ T8068] team0: Port device team_slave_1 added 18:19:25 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) [ 64.567765][ T8068] device hsr_slave_0 entered promiscuous mode [ 64.615294][ T8068] device hsr_slave_1 entered promiscuous mode [ 64.710230][ T8073] IPVS: ftp: loaded support on port[0] = 21 18:19:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) [ 64.910275][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.917712][ T8068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.925741][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.932828][ T8068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.076982][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 65.101368][ T8099] IPVS: ftp: loaded support on port[0] = 21 18:19:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) [ 65.292524][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.301139][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.337593][ T8071] device bridge_slave_0 entered promiscuous mode [ 65.386248][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.393343][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.466219][ T8071] device bridge_slave_1 entered promiscuous mode [ 65.516897][ T8068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.548572][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.583086][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.600077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.660406][ T8068] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.687927][ T8107] IPVS: ftp: loaded support on port[0] = 21 [ 65.715516][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.723990][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.761578][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.790041][ T8073] chnl_net:caif_netlink_parms(): no params data found [ 65.801139][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 18:19:27 executing program 5: io_uring_setup(0x0, &(0x7f0000000100)) [ 65.810511][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.819264][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.826392][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.868263][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.885414][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.894746][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.906750][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.913821][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.923301][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.932395][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.964907][ T8071] team0: Port device team_slave_0 added [ 65.974052][ T8071] team0: Port device team_slave_1 added [ 65.980361][ T8099] chnl_net:caif_netlink_parms(): no params data found [ 65.999179][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.008605][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.018499][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.064421][ T8116] IPVS: ftp: loaded support on port[0] = 21 [ 66.073922][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.086448][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.108238][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.118337][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.127661][ T8073] device bridge_slave_0 entered promiscuous mode [ 66.135422][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.142476][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.150548][ T8073] device bridge_slave_1 entered promiscuous mode [ 66.160152][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.169463][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.179012][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.187575][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.247705][ T8071] device hsr_slave_0 entered promiscuous mode [ 66.305443][ T8071] device hsr_slave_1 entered promiscuous mode [ 66.365134][ T8071] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.374147][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.382165][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.391601][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.399749][ T8099] device bridge_slave_0 entered promiscuous mode [ 66.407818][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.414861][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.422656][ T8099] device bridge_slave_1 entered promiscuous mode [ 66.444083][ T8099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.455197][ T8099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.515287][ T8099] team0: Port device team_slave_0 added [ 66.535418][ T8073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.580283][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.597091][ T8073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.651725][ T8099] team0: Port device team_slave_1 added [ 66.663134][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.677355][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.948258][ T8099] device hsr_slave_0 entered promiscuous mode [ 67.016886][ T8099] device hsr_slave_1 entered promiscuous mode [ 67.055690][ T8099] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.076829][ T8073] team0: Port device team_slave_0 added [ 67.099173][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 67.157216][ T8107] chnl_net:caif_netlink_parms(): no params data found 18:19:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000000044e, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @sliced}) [ 67.259377][ T8073] team0: Port device team_slave_1 added 18:19:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000000044e, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @sliced}) [ 67.488444][ T8073] device hsr_slave_0 entered promiscuous mode [ 67.525402][ T8073] device hsr_slave_1 entered promiscuous mode [ 67.564537][ T8073] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.632940][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 18:19:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000000044e, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @sliced}) [ 67.674032][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.696300][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.704332][ T8107] device bridge_slave_0 entered promiscuous mode [ 67.750045][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.766836][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state 18:19:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000000044e, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @sliced}) [ 67.800398][ T8116] device bridge_slave_0 entered promiscuous mode 18:19:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000000044e, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @sliced}) [ 68.015318][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.022743][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.076241][ T8107] device bridge_slave_1 entered promiscuous mode [ 68.100874][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 18:19:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000000044e, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @sliced}) [ 68.124276][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.143192][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.199164][ T8116] device bridge_slave_1 entered promiscuous mode [ 68.261624][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.285598][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:19:29 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8a003e) write$sndseq(r0, &(0x7f0000000300)=[{}], 0x30) sendfile(r1, r0, &(0x7f0000000040), 0x800) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) [ 68.413883][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.445554][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.454016][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.461241][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.553421][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.602997][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.650201][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.657956][ T8106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.690965][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.715783][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.726371][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.747707][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.833892][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.891271][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.917410][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.937052][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.971387][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.983163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.003931][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.020325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.030554][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.041666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.050576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.065969][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.080794][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.093938][ T8099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.105803][ T8107] team0: Port device team_slave_0 added [ 69.123971][ T8116] team0: Port device team_slave_0 added [ 69.141774][ T8099] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.150062][ T8107] team0: Port device team_slave_1 added [ 69.162532][ T8116] team0: Port device team_slave_1 added [ 69.172855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.181437][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.217200][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.226643][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.235708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.242744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.250400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.258984][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.267481][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.275111][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.282588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.290499][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.298003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.306450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.316596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.325884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.334295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.345369][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.353624][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.362143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.370559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.378993][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.387637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.395588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.467931][ T8107] device hsr_slave_0 entered promiscuous mode [ 69.505810][ T8107] device hsr_slave_1 entered promiscuous mode [ 69.545090][ T8107] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.553928][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.607834][ T8116] device hsr_slave_0 entered promiscuous mode [ 69.645626][ T8116] device hsr_slave_1 entered promiscuous mode [ 69.685146][ T8116] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.721363][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.759196][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.830717][ T8099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.926044][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.933978][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.059243][ T8073] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.135358][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.143047][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.256167][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.264808][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.345578][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.352665][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.435312][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.443970][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.517066][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.524159][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.595969][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.690338][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.718433][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.785812][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.794514][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 18:19:32 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) dup3(r0, r1, 0x0) [ 70.871528][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.916280][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.931045][ T8073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.998053][ T8073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.054762][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.150667][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.177900][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.243365][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.261118][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.294546][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.307663][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.326990][ T8107] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.334570][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.343532][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.352116][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.374659][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.386997][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.402216][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.410958][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.419973][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.432092][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.440506][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.447590][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.455689][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.463302][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.471097][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.479674][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.488635][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.496284][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.506246][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.514091][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.536774][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.549173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.559776][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.569046][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.577849][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.586404][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.594566][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.603938][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.611728][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.620577][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.629179][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.636263][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.644436][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.658110][ T8107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.669270][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.680085][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.689096][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.712049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.736496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.750599][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.757800][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.765800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.774223][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.783656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.793417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.803728][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 18:19:33 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:33 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8a003e) write$sndseq(r0, &(0x7f0000000300)=[{}], 0x30) sendfile(r1, r0, &(0x7f0000000040), 0x800) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) [ 71.843019][ T8107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.870484][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.881848][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.920217][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.941818][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.950718][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.959168][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.967701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.976323][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.986340][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.042267][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.056430][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.063912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:19:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:33 executing program 5: io_uring_setup(0x0, &(0x7f0000000100)) 18:19:33 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) dup3(r0, r1, 0x0) 18:19:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:33 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8a003e) write$sndseq(r0, &(0x7f0000000300)=[{}], 0x30) sendfile(r1, r0, &(0x7f0000000040), 0x800) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 18:19:33 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:33 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:33 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) dup3(r0, r1, 0x0) 18:19:33 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8a003e) write$sndseq(r0, &(0x7f0000000300)=[{}], 0x30) sendfile(r1, r0, &(0x7f0000000040), 0x800) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 18:19:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:33 executing program 5: io_uring_setup(0x0, &(0x7f0000000100)) 18:19:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:33 executing program 5: io_uring_setup(0x0, &(0x7f0000000100)) 18:19:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, r2, r3) 18:19:34 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) getdents64(r3, &(0x7f0000000740)=""/226, 0xe2) 18:19:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:19:34 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) dup3(r0, r1, 0x0) 18:19:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) [ 73.682595][ T8489] ------------[ cut here ]------------ [ 73.688265][ T8489] WARNING: CPU: 1 PID: 8489 at drivers/media/common/videobuf2/videobuf2-core.c:1882 __vb2_queue_cancel+0xa57/0xd60 [ 73.700323][ T8489] Kernel panic - not syncing: panic_on_warn set ... [ 73.706914][ T8489] CPU: 1 PID: 8489 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 73.714728][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.724793][ T8489] Call Trace: [ 73.728087][ T8489] dump_stack+0x1fb/0x318 [ 73.732421][ T8489] panic+0x264/0x7a9 [ 73.736311][ T8489] ? __warn+0x105/0x210 [ 73.740464][ T8489] ? __vb2_queue_cancel+0xa57/0xd60 [ 73.745662][ T8489] __warn+0x20e/0x210 [ 73.749641][ T8489] ? __vb2_queue_cancel+0xa57/0xd60 [ 73.754841][ T8489] report_bug+0x1b6/0x2f0 [ 73.759173][ T8489] ? __vb2_queue_cancel+0xa57/0xd60 [ 73.764368][ T8489] do_error_trap+0xd7/0x440 [ 73.768872][ T8489] do_invalid_op+0x36/0x40 [ 73.771477][ T3900] kobject: 'loop1' (00000000c6bad924): kobject_uevent_env [ 73.773284][ T8489] ? __vb2_queue_cancel+0xa57/0xd60 [ 73.785605][ T8489] invalid_op+0x23/0x30 [ 73.787280][ T3900] kobject: 'loop1' (00000000c6bad924): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 73.789754][ T8489] RIP: 0010:__vb2_queue_cancel+0xa57/0xd60 [ 73.789765][ T8489] Code: ff e8 dd 33 b3 fc 48 8b 55 d0 e9 cc fc ff ff e8 7f f6 79 fc eb 05 e8 78 f6 79 fc 48 83 c4 48 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b 4d 8d ac 24 28 02 00 00 4c 89 e9 48 c1 e9 03 48 b8 00 00 00 [ 73.789771][ T8489] RSP: 0018:ffff8880a0d2fbb0 EFLAGS: 00010202 [ 73.789779][ T8489] RAX: ffff888098f8e480 RBX: 0000000000000001 RCX: 0000000000000002 [ 73.789785][ T8489] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 73.789790][ T8489] RBP: ffff8880a0d2fc20 R08: ffffffff84f95545 R09: ffffed1043024e88 [ 73.789796][ T8489] R10: ffffed1043024e88 R11: 0000000000000000 R12: ffff8882181271f8 [ 73.789801][ T8489] R13: ffff8882181271f8 R14: 1ffff11043024e9a R15: 1ffff11043024e87 [ 73.789815][ T8489] ? __vb2_queue_cancel+0x105/0xd60 [ 73.823510][ T3900] kobject: 'loop2' (000000007712d2fe): kobject_uevent_env 18:19:35 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) dup3(r0, r1, 0x0) 18:19:35 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400b739000000"], 0x0, 0x26}, 0x20) dup3(r0, r1, 0x0) [ 73.825381][ T8489] vb2_core_queue_release+0x51/0x240 [ 73.825394][ T8489] vb2_fop_release+0x154/0x1e0 [ 73.825408][ T8489] vivid_fop_release+0x5ae/0x700 [ 73.825422][ T8489] v4l2_release+0x1da/0x360 [ 73.825430][ T8489] ? vivid_req_validate+0xc0/0xc0 [ 73.825444][ T8489] ? v4l2_open+0x310/0x310 [ 73.850920][ T3900] kobject: 'loop2' (000000007712d2fe): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 73.855588][ T8489] __fput+0x2e4/0x740 [ 73.855607][ T8489] ____fput+0x15/0x20 [ 73.855618][ T8489] task_work_run+0x17e/0x1b0 [ 73.855636][ T8489] prepare_exit_to_usermode+0x459/0x580 [ 73.855651][ T8489] syscall_return_slowpath+0x113/0x4a0 [ 73.855663][ T8489] do_syscall_64+0x11f/0x1c0 [ 73.855678][ T8489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.956970][ T8489] RIP: 0033:0x45a219 [ 73.960855][ T8489] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.981145][ T8489] RSP: 002b:00007f1d1e88fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 73.989563][ T8489] RAX: 0000000000000003 RBX: 0000000000000002 RCX: 000000000045a219 [ 73.997528][ T8489] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 74.005498][ T8489] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 74.013464][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d1e8906d4 [ 74.021413][ T8489] R13: 00000000004c0ad5 R14: 00000000004d3568 R15: 00000000ffffffff [ 74.030824][ T8489] Kernel Offset: disabled [ 74.035371][ T8489] Rebooting in 86400 seconds..