Warning: Permanently added '10.128.1.45' (ECDSA) to the list of known hosts. 2019/10/07 07:45:20 fuzzer started 2019/10/07 07:45:21 dialing manager at 10.128.0.105:39369 2019/10/07 07:45:21 syscalls: 2523 2019/10/07 07:45:21 code coverage: enabled 2019/10/07 07:45:21 comparison tracing: enabled 2019/10/07 07:45:21 extra coverage: extra coverage is not supported by the kernel 2019/10/07 07:45:21 setuid sandbox: enabled 2019/10/07 07:45:21 namespace sandbox: enabled 2019/10/07 07:45:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/07 07:45:21 fault injection: enabled 2019/10/07 07:45:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/07 07:45:21 net packet injection: enabled 2019/10/07 07:45:21 net device setup: enabled 2019/10/07 07:45:21 concurrency sanitizer: enabled 07:45:22 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x48, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x4, 0xae1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() syz_open_procfs(r3, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf2, 0x0, 0x0) syzkaller login: [ 53.810893][ T7313] IPVS: ftp: loaded support on port[0] = 21 07:45:22 executing program 1: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_open_procfs(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x80) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) [ 53.900051][ T7313] chnl_net:caif_netlink_parms(): no params data found [ 53.943960][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.968786][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.976677][ T7313] device bridge_slave_0 entered promiscuous mode [ 53.999906][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.006994][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.015348][ T7313] device bridge_slave_1 entered promiscuous mode [ 54.052857][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.070515][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.121653][ T7313] team0: Port device team_slave_0 added [ 54.139176][ T7313] team0: Port device team_slave_1 added 07:45:23 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) write$binfmt_aout(r1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) open(0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 54.251683][ T7313] device hsr_slave_0 entered promiscuous mode [ 54.298975][ T7313] device hsr_slave_1 entered promiscuous mode [ 54.355151][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.355859][ T7316] IPVS: ftp: loaded support on port[0] = 21 [ 54.362319][ T7313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.362416][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.382608][ T7313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.447998][ T7318] IPVS: ftp: loaded support on port[0] = 21 07:45:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000140), 0x4) [ 54.527655][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.631577][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.659290][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.679290][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.699228][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.716258][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 54.747898][ T7313] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.795207][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.805422][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.812504][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.867257][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.875988][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.883055][ T7325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.917122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.922873][ T7324] IPVS: ftp: loaded support on port[0] = 21 [ 54.925803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.941965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.950819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 07:45:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38f37fdba040c4d5415a871b0f013a"], 0x0, 0xf}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 54.961770][ T7318] chnl_net:caif_netlink_parms(): no params data found [ 54.972427][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.986097][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.995098][ T7316] device bridge_slave_0 entered promiscuous mode [ 55.009437][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.018636][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.029894][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.038500][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.060255][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.088901][ T7313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.109906][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.116949][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.140204][ T7316] device bridge_slave_1 entered promiscuous mode [ 55.177696][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.210279][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.280725][ T7316] team0: Port device team_slave_0 added [ 55.291924][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.313952][ T7316] team0: Port device team_slave_1 added 07:45:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) r1 = gettid() r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x701, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, [@typed={0x8, 0x4, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000200)="4373d55f1fbbc40d532e5f279552db9661757ea5ee4a8ec35b9bcdc4435e3670cad62fd4eb25264bfa986cc2dac463c8cf6af61f9df99dcc65f8f58a2ff0f276b9ccc870fe2a30735083d7872094518a7dcb570da0b82094489b91899e3899b7b2b0be5abc6f3ab1a145c2d52c7382541598325d78afce770f54840bb93a1c419a24360348ea158ee20b06e6a0a609c9f9fc2b20f7ea859c204285ef021336803a3b69001816d95664abe3f972b8") prctl$PR_SET_PTRACER(0x59616d61, r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000140)) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) fstat(r3, &(0x7f00000002c0)) kcmp(r1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x0) sendto$inet(r0, 0x0, 0x0, 0x24054095, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe16, 0x5dc, 0x0, 0xffffffffffffffa0) [ 55.344903][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.354168][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.362774][ T7318] device bridge_slave_0 entered promiscuous mode [ 55.431517][ T7316] device hsr_slave_0 entered promiscuous mode [ 55.469005][ T7316] device hsr_slave_1 entered promiscuous mode [ 55.511067][ T7316] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.519839][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.526881][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.537163][ T7318] device bridge_slave_1 entered promiscuous mode [ 55.554773][ T7329] IPVS: ftp: loaded support on port[0] = 21 [ 55.584231][ T7335] IPVS: ftp: loaded support on port[0] = 21 [ 55.597872][ T7318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.656784][ T7318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.694997][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.705945][ C1] hrtimer: interrupt took 26426 ns [ 55.743213][ T7318] team0: Port device team_slave_0 added [ 55.753424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 55.795811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.803810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.819148][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.827270][ T7318] team0: Port device team_slave_1 added [ 55.870003][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.878576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.887161][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.894227][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.904477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.913087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.923835][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.930918][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.976658][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.990044][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.002155][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.036366][ T7316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.047093][ T7316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.076116][ T7324] chnl_net:caif_netlink_parms(): no params data found [ 56.087633][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.097222][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.109460][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.117880][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.128814][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.191825][ T7318] device hsr_slave_0 entered promiscuous mode [ 56.229156][ T7318] device hsr_slave_1 entered promiscuous mode [ 56.278748][ T7318] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.300843][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.315106][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.442474][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 56.475760][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.483203][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.491351][ T7324] device bridge_slave_0 entered promiscuous mode [ 56.507466][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.527641][ T7329] chnl_net:caif_netlink_parms(): no params data found 07:45:25 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x48, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x4, 0xae1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() syz_open_procfs(r3, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf2, 0x0, 0x0) [ 56.537479][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.548708][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.569714][ T7324] device bridge_slave_1 entered promiscuous mode [ 56.612617][ T7318] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.678374][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.691840][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.770862][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.790883][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.799736][ T7335] device bridge_slave_0 entered promiscuous mode [ 56.817607][ T7318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.832855][ T7318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.846842][ T7324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.864828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.878167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.892301][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.899389][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.912849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.932749][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.954634][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.961728][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state 07:45:25 executing program 1: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_open_procfs(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x80) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) [ 57.005841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.037137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.048083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.062054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.072711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.084112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.094901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.106779][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.117238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.131220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.142380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.151998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.171352][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.191166][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.214761][ T7335] device bridge_slave_1 entered promiscuous mode [ 57.251597][ T7318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.277768][ T7324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.363488][ T7324] team0: Port device team_slave_0 added [ 57.380231][ T7324] team0: Port device team_slave_1 added [ 57.414957][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 07:45:26 executing program 1: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_open_procfs(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x80) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) 07:45:26 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x48, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x4, 0xae1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() syz_open_procfs(r3, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf2, 0x0, 0x0) [ 57.466806][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.487941][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.501868][ T7329] device bridge_slave_0 entered promiscuous mode [ 57.541805][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.641645][ T7324] device hsr_slave_0 entered promiscuous mode [ 57.689436][ T7324] device hsr_slave_1 entered promiscuous mode [ 57.729433][ T7324] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.737456][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.764727][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.777451][ T7329] device bridge_slave_1 entered promiscuous mode [ 57.902640][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 07:45:26 executing program 1: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_open_procfs(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x80) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) [ 57.959158][ T7335] team0: Port device team_slave_0 added [ 57.965987][ T7335] team0: Port device team_slave_1 added [ 58.010492][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.097533][ T7324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.181560][ T7335] device hsr_slave_0 entered promiscuous mode [ 58.219539][ T7335] device hsr_slave_1 entered promiscuous mode [ 58.258791][ T7335] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.275913][ T7329] team0: Port device team_slave_0 added 07:45:27 executing program 1: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_open_procfs(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x80) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) [ 58.312511][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.334463][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.374268][ T7324] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.391641][ T7329] team0: Port device team_slave_1 added 07:45:27 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) write$binfmt_aout(r1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) open(0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 58.430881][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.467514][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.495316][ T2872] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.502431][ T2872] bridge0: port 1(bridge_slave_0) entered forwarding state 07:45:27 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x48, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x4, 0xae1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() syz_open_procfs(r3, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf2, 0x0, 0x0) [ 58.564979][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.609455][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.663272][ T2872] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.670394][ T2872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.744618][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.755391][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.770883][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.780979][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.790700][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.800209][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.833890][ T7335] 8021q: adding VLAN 0 to HW filter on device team0 07:45:27 executing program 1: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_open_procfs(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x80) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) [ 58.922233][ T7329] device hsr_slave_0 entered promiscuous mode [ 58.959411][ T7329] device hsr_slave_1 entered promiscuous mode [ 58.999631][ T7329] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.028445][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.055099][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.113056][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.151554][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.162202][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.172680][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.182740][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.195539][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.206280][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.216968][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.229563][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.238032][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.245115][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.257582][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.296433][ T7324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.329250][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.356828][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.368152][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.375248][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.387720][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.419044][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.428589][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.441685][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.453536][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.465809][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.489690][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.506654][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.534907][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.563956][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.580063][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.596452][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.624356][ T7335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.675999][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.694972][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.711154][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.723721][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.760886][ T7329] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.770626][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.780113][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.788557][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.795644][ T7323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.826458][ T7329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.863096][ T7329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 07:45:28 executing program 1: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_open_procfs(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x80) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) [ 59.894502][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.902667][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.921951][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.931033][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.938178][ T7323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.947753][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.967438][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.977668][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.986537][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.995903][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.005088][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.014596][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.023452][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.033038][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.041887][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.051167][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.059833][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.083024][ T7329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.298565][ T7419] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:45:29 executing program 0: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) write$binfmt_aout(r1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) open(0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:45:29 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) write$binfmt_aout(r1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) open(0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:45:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000140), 0x4) 07:45:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000140), 0x4) 07:45:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) r1 = gettid() r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x701, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, [@typed={0x8, 0x4, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000200)="4373d55f1fbbc40d532e5f279552db9661757ea5ee4a8ec35b9bcdc4435e3670cad62fd4eb25264bfa986cc2dac463c8cf6af61f9df99dcc65f8f58a2ff0f276b9ccc870fe2a30735083d7872094518a7dcb570da0b82094489b91899e3899b7b2b0be5abc6f3ab1a145c2d52c7382541598325d78afce770f54840bb93a1c419a24360348ea158ee20b06e6a0a609c9f9fc2b20f7ea859c204285ef021336803a3b69001816d95664abe3f972b8") prctl$PR_SET_PTRACER(0x59616d61, r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000140)) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) fstat(r3, &(0x7f00000002c0)) kcmp(r1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x0) sendto$inet(r0, 0x0, 0x0, 0x24054095, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe16, 0x5dc, 0x0, 0xffffffffffffffa0) 07:45:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38f37fdba040c4d5415a871b0f013a"], 0x0, 0xf}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:45:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000140), 0x4) 07:45:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000140), 0x4) 07:45:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) r1 = gettid() r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x701, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, [@typed={0x8, 0x4, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000200)="4373d55f1fbbc40d532e5f279552db9661757ea5ee4a8ec35b9bcdc4435e3670cad62fd4eb25264bfa986cc2dac463c8cf6af61f9df99dcc65f8f58a2ff0f276b9ccc870fe2a30735083d7872094518a7dcb570da0b82094489b91899e3899b7b2b0be5abc6f3ab1a145c2d52c7382541598325d78afce770f54840bb93a1c419a24360348ea158ee20b06e6a0a609c9f9fc2b20f7ea859c204285ef021336803a3b69001816d95664abe3f972b8") prctl$PR_SET_PTRACER(0x59616d61, r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000140)) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) fstat(r3, &(0x7f00000002c0)) kcmp(r1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x0) sendto$inet(r0, 0x0, 0x0, 0x24054095, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe16, 0x5dc, 0x0, 0xffffffffffffffa0) [ 60.941805][ T7425] ================================================================== [ 60.950033][ T7425] BUG: KCSAN: data-race in ext4_es_lookup_extent / ext4_es_lookup_extent [ 60.958431][ T7425] [ 60.960760][ T7425] write to 0xffff888129a04c28 of 8 bytes by task 7427 on cpu 1: [ 60.968388][ T7425] ext4_es_lookup_extent+0x3d3/0x510 [ 60.973662][ T7425] ext4_da_get_block_prep+0x159/0xa60 [ 60.979032][ T7425] __block_write_begin_int+0x2ea/0xf10 [ 60.984491][ T7425] block_page_mkwrite+0x19f/0x230 [ 60.989513][ T7425] ext4_page_mkwrite+0x5af/0xce0 [ 60.994449][ T7425] do_page_mkwrite+0x8f/0x1a0 [ 60.999121][ T7425] do_wp_page+0xa91/0xd00 [ 61.003710][ T7425] __handle_mm_fault+0x1c3d/0x2d00 [ 61.008814][ T7425] handle_mm_fault+0x21b/0x520 [ 61.013575][ T7425] __do_page_fault+0x3fb/0x9e0 [ 61.018331][ T7425] do_page_fault+0x54/0x233 [ 61.022832][ T7425] page_fault+0x34/0x40 [ 61.026985][ T7425] copy_user_enhanced_fast_string+0xe/0x20 [ 61.032786][ T7425] copy_page_to_iter+0x1b4/0x890 [ 61.037700][ T7425] [ 61.040028][ T7425] read to 0xffff888129a04c28 of 8 bytes by task 7425 on cpu 0: [ 61.047566][ T7425] ext4_es_lookup_extent+0x3ba/0x510 [ 61.052846][ T7425] ext4_da_get_block_prep+0x159/0xa60 [ 61.058214][ T7425] __block_write_begin_int+0x2ea/0xf10 [ 61.063666][ T7425] block_page_mkwrite+0x19f/0x230 [ 61.068682][ T7425] ext4_page_mkwrite+0x5af/0xce0 [ 61.073613][ T7425] do_page_mkwrite+0x8f/0x1a0 [ 61.078287][ T7425] do_wp_page+0xa91/0xd00 [ 61.082617][ T7425] __handle_mm_fault+0x1c3d/0x2d00 [ 61.087725][ T7425] handle_mm_fault+0x21b/0x520 [ 61.092482][ T7425] __do_page_fault+0x3fb/0x9e0 [ 61.097241][ T7425] do_page_fault+0x54/0x233 [ 61.101740][ T7425] page_fault+0x34/0x40 [ 61.105896][ T7425] copy_user_enhanced_fast_string+0xe/0x20 [ 61.111687][ T7425] [ 61.114002][ T7425] Reported by Kernel Concurrency Sanitizer on: [ 61.120155][ T7425] CPU: 0 PID: 7425 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 61.127606][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.137680][ T7425] ================================================================== [ 61.145737][ T7425] Kernel panic - not syncing: panic_on_warn set ... [ 61.152321][ T7425] CPU: 0 PID: 7425 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 61.159764][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.169816][ T7425] Call Trace: [ 61.173103][ T7425] dump_stack+0xf5/0x159 [ 61.177346][ T7425] panic+0x209/0x639 [ 61.181246][ T7425] ? vprintk_func+0x8d/0x140 [ 61.185832][ T7425] kcsan_report.cold+0x57/0xeb [ 61.190594][ T7425] __kcsan_setup_watchpoint+0x342/0x500 [ 61.196128][ T7425] __tsan_read8+0x2c/0x30 [ 61.200446][ T7425] ext4_es_lookup_extent+0x3ba/0x510 [ 61.205725][ T7425] ext4_da_get_block_prep+0x159/0xa60 [ 61.211090][ T7425] ? ext4_bmap+0x220/0x220 [ 61.215495][ T7425] __block_write_begin_int+0x2ea/0xf10 [ 61.220945][ T7425] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 61.226824][ T7425] ? apic_timer_interrupt+0xa/0x20 [ 61.231922][ T7425] ? ext4_bmap+0x220/0x220 [ 61.236349][ T7425] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 61.242253][ T7425] block_page_mkwrite+0x19f/0x230 [ 61.247264][ T7425] ? ext4_bmap+0x220/0x220 [ 61.251671][ T7425] ext4_page_mkwrite+0x5af/0xce0 [ 61.256690][ T7425] do_page_mkwrite+0x8f/0x1a0 [ 61.261356][ T7425] do_wp_page+0xa91/0xd00 [ 61.265678][ T7425] __handle_mm_fault+0x1c3d/0x2d00 [ 61.270795][ T7425] handle_mm_fault+0x21b/0x520 [ 61.275553][ T7425] __do_page_fault+0x3fb/0x9e0 [ 61.280311][ T7425] do_page_fault+0x54/0x233 [ 61.284803][ T7425] page_fault+0x34/0x40 [ 61.288953][ T7425] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 61.295530][ T7425] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 61.315118][ T7425] RSP: 0018:ffffc9000193bbc0 EFLAGS: 00010206 [ 61.321187][ T7425] RAX: 0000000000040000 RBX: 0000000000001000 RCX: 0000000000000500 [ 61.329145][ T7425] RDX: 0000000000001000 RSI: ffff888103056b00 RDI: 000000002003a000 [ 61.337107][ T7425] RBP: ffffc9000193bbf8 R08: ffff888103c3f100 R09: 0000888103c3fc1f [ 61.345064][ T7425] R10: 00000000aaaaaaab R11: ffffffff86042e10 R12: 0000000020039500 [ 61.353020][ T7425] R13: 000000002003a500 R14: 0000000000000000 R15: 00007ffffffff000 [ 61.360992][ T7425] ? copyout+0xa5/0xb0 [ 61.365066][ T7425] copy_page_to_iter+0x1b4/0x890 [ 61.369994][ T7425] ? free_unref_page+0xa8/0xc0 [ 61.374752][ T7425] pipe_to_user+0x71/0xc0 [ 61.379070][ T7425] __splice_from_pipe+0x248/0x480 [ 61.384081][ T7425] ? iter_to_pipe+0x3f0/0x3f0 [ 61.388748][ T7425] do_vmsplice.part.0+0x1c5/0x210 [ 61.393764][ T7425] __do_sys_vmsplice+0x15f/0x1c0 [ 61.398699][ T7425] ? __kcsan_setup_watchpoint+0x34/0x500 [ 61.404358][ T7425] __x64_sys_vmsplice+0x5e/0x80 [ 61.409202][ T7425] do_syscall_64+0xcf/0x2f0 [ 61.413787][ T7425] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 61.419667][ T7425] RIP: 0033:0x459a59 [ 61.423553][ T7425] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.443141][ T7425] RSP: 002b:00007f7d282ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 61.451548][ T7425] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a59 [ 61.459507][ T7425] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006 [ 61.467465][ T7425] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 61.475427][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d282ed6d4 [ 61.483389][ T7425] R13: 00000000004c94e3 R14: 00000000004e0c68 R15: 00000000ffffffff [ 61.492630][ T7425] Kernel Offset: disabled [ 61.496953][ T7425] Rebooting in 86400 seconds..