[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[  115.269908][   T31] audit: type=1800 audit(1565015845.315:25): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[  115.294882][   T31] audit: type=1800 audit(1565015845.345:26): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[  115.334927][   T31] audit: type=1800 audit(1565015845.365:27): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts.
2019/08/05 14:37:38 fuzzer started
2019/08/05 14:37:44 dialing manager at 10.128.0.26:46627
2019/08/05 14:37:47 syscalls: 2367
2019/08/05 14:37:47 code coverage: enabled
2019/08/05 14:37:47 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/08/05 14:37:47 extra coverage: enabled
2019/08/05 14:37:47 setuid sandbox: enabled
2019/08/05 14:37:47 namespace sandbox: enabled
2019/08/05 14:37:47 Android sandbox: /sys/fs/selinux/policy does not exist
2019/08/05 14:37:47 fault injection: enabled
2019/08/05 14:37:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/08/05 14:37:47 net packet injection: enabled
2019/08/05 14:37:47 net device setup: enabled
14:40:17 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
unshare(0x400)
ioctl(r0, 0xc2604110, 0x0)

syzkaller login: [  288.281509][T13287] IPVS: ftp: loaded support on port[0] = 21
[  288.476100][T13287] chnl_net:caif_netlink_parms(): no params data found
[  288.547837][T13287] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.555176][T13287] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.564431][T13287] device bridge_slave_0 entered promiscuous mode
[  288.575805][T13287] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.583149][T13287] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.592574][T13287] device bridge_slave_1 entered promiscuous mode
[  288.632742][T13287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.647169][T13287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.687338][T13287] team0: Port device team_slave_0 added
[  288.697804][T13287] team0: Port device team_slave_1 added
[  288.778071][T13287] device hsr_slave_0 entered promiscuous mode
[  289.033255][T13287] device hsr_slave_1 entered promiscuous mode
[  289.100938][T13287] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.108430][T13287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.116489][T13287] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.123851][T13287] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.236216][T13287] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.261058][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  289.273828][  T756] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.286462][  T756] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.299636][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  289.322398][T13287] 8021q: adding VLAN 0 to HW filter on device team0
[  289.355727][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  289.366761][  T756] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.374161][  T756] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.383014][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  289.392431][  T756] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.399668][  T756] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.466780][T13287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  289.477984][T13287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.502993][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  289.513885][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  289.525394][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  289.535588][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  289.581759][T13287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.596242][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  289.605833][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
14:40:19 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
unshare(0x400)
ioctl(r0, 0xc2604110, 0x0)

14:40:19 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
unshare(0x400)
ioctl(r0, 0xc2604110, 0x0)

14:40:20 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
unshare(0x400)
ioctl(r0, 0xc2604110, 0x0)

14:40:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000180)="1600000014000724030e0031120f02002c000100f5fe", 0x16)

14:40:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000180)="1600000014000724030e0031120f02002c000100f5fe", 0x16)

14:40:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000180)="1600000014000724030e0031120f02002c000100f5fe", 0x16)

14:40:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000180)="1600000014000724030e0031120f02002c000100f5fe", 0x16)

14:40:20 executing program 0:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0)

14:40:20 executing program 0:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0)

14:40:20 executing program 0:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0)

14:40:20 executing program 0:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0)

14:40:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  290.874193][T13329] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
14:40:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:40:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:40:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:40:21 executing program 0:
unshare(0x24020400)
r0 = socket(0x1e, 0x2, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0)

14:40:21 executing program 0:
unshare(0x20400)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200))
poll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, 0x7fffffff)

14:40:21 executing program 0:
unshare(0x20400)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200))
poll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, 0x7fffffff)

14:40:21 executing program 0:
unshare(0x20400)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200))
poll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, 0x7fffffff)

14:40:21 executing program 0:
unshare(0x20400)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200))
poll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, 0x7fffffff)

14:40:22 executing program 0:
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000040)=0x9b)

14:40:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38e3c45cdba040d14c21368e425ee5302a"], 0x0, 0x18}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000140)=0x2)

14:40:22 executing program 0:
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f0000000180), 0x13b)
sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x18400, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x6, 0x854, [0x0, 0x20000600, 0x20000630, 0x2000085c], 0x0, &(0x7f0000000080), &(0x7f0000000600)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x40, 0x0, 'ip6erspan0\x00', 'syzkaller1\x00', 'rose0\x00', 'nlmon0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xffff, 0x7f, 0x0, 0x0, 0x0, "26e866c1b6ec597ed2ff5a71540f8c4c2f87a0e94ab918bf5f7fd2358c9158c87771aea8c69e04d4e80dfdc71afe032be5d0ace25a4882cec7c4f8003eb8735c"}}}}, {0xf, 0x1, 0x10, '\x00', 'batadv0\x00', 'ip6tnl0\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x2, 0x1, 0x7}}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x14e3416209e3135c, 0x4, 0x6558, 'nlmon0\x00', 'bond_slave_0\x00', 'veth1_to_hsr\x00', 'bridge_slave_0\x00', @dev={[], 0x11}, [0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xee, 0xee, 0x13e, [@owner={'owner\x00', 0x18, {{r2, r3, r4, r5, 0x5, 0x4}}}, @mark_m={'mark_m\x00', 0x18, {{0x47, 0x3, 0x1, 0x3}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', 0x7}}}}, {0x19, 0x20, 0x88f5, 'batadv0\x00', 'bridge_slave_0\x00', 'lapb0\x00', 'gretap0\x00', @random="c4dcbef9d100", [0x0, 0xff, 0xff, 0x0, 0xff], @random="f57472540c2e", [0xff, 0x0, 0xff, 0x0, 0xff], 0x1d6, 0x206, 0x24e, [@comment={'comment\x00', 0x100}, @time={'time\x00', 0x18, {{0x7, 0x8, 0x297b, 0xc7d9, 0x80000000, 0x20, 0x1}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}], @common=@ERROR={'ERROR\x00', 0x20, {"8802d2639c0c93364c240eee8d70bf2c9ea8591e3cf427634b6e017156d1"}}}]}, {0x0, '\x00', 0x4, 0x0, 0x2, [{0x1d, 0x40, 0x8847, 'syzkaller0\x00', 'tunl0\x00', 'bpq0\x00', 'sit0\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@ERROR={'ERROR\x00', 0x20, {"319059628b39118a7defdeeff8a1dc176cf19f29f9cffa0d078409f3e0cf"}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffffffffffffff7}}}], @common=@dnat={'dnat\x00', 0x10, {{@random="39dfa833974e", 0xffffffffffffffff}}}}, {0x3, 0x1, 0xaaff, 'team_slave_1\x00', 'hsr0\x00', 'batadv0\x00', 'team_slave_1\x00', @broadcast, [0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xb6c3d83272762c8e, 0xff, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@log={'log\x00', 0x28, {{0x2, "d47bc53a877e8196da8cfa531681094acaa636424e3590142d0556ebd371", 0x5}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xbc}}}}]}]}, 0x8cc)

14:40:22 executing program 0:
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f0000000180), 0x13b)
sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x18400, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x6, 0x854, [0x0, 0x20000600, 0x20000630, 0x2000085c], 0x0, &(0x7f0000000080), &(0x7f0000000600)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x40, 0x0, 'ip6erspan0\x00', 'syzkaller1\x00', 'rose0\x00', 'nlmon0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xffff, 0x7f, 0x0, 0x0, 0x0, "26e866c1b6ec597ed2ff5a71540f8c4c2f87a0e94ab918bf5f7fd2358c9158c87771aea8c69e04d4e80dfdc71afe032be5d0ace25a4882cec7c4f8003eb8735c"}}}}, {0xf, 0x1, 0x10, '\x00', 'batadv0\x00', 'ip6tnl0\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x2, 0x1, 0x7}}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x14e3416209e3135c, 0x4, 0x6558, 'nlmon0\x00', 'bond_slave_0\x00', 'veth1_to_hsr\x00', 'bridge_slave_0\x00', @dev={[], 0x11}, [0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xee, 0xee, 0x13e, [@owner={'owner\x00', 0x18, {{r2, r3, r4, r5, 0x5, 0x4}}}, @mark_m={'mark_m\x00', 0x18, {{0x47, 0x3, 0x1, 0x3}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', 0x7}}}}, {0x19, 0x20, 0x88f5, 'batadv0\x00', 'bridge_slave_0\x00', 'lapb0\x00', 'gretap0\x00', @random="c4dcbef9d100", [0x0, 0xff, 0xff, 0x0, 0xff], @random="f57472540c2e", [0xff, 0x0, 0xff, 0x0, 0xff], 0x1d6, 0x206, 0x24e, [@comment={'comment\x00', 0x100}, @time={'time\x00', 0x18, {{0x7, 0x8, 0x297b, 0xc7d9, 0x80000000, 0x20, 0x1}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}], @common=@ERROR={'ERROR\x00', 0x20, {"8802d2639c0c93364c240eee8d70bf2c9ea8591e3cf427634b6e017156d1"}}}]}, {0x0, '\x00', 0x4, 0x0, 0x2, [{0x1d, 0x40, 0x8847, 'syzkaller0\x00', 'tunl0\x00', 'bpq0\x00', 'sit0\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@ERROR={'ERROR\x00', 0x20, {"319059628b39118a7defdeeff8a1dc176cf19f29f9cffa0d078409f3e0cf"}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffffffffffffff7}}}], @common=@dnat={'dnat\x00', 0x10, {{@random="39dfa833974e", 0xffffffffffffffff}}}}, {0x3, 0x1, 0xaaff, 'team_slave_1\x00', 'hsr0\x00', 'batadv0\x00', 'team_slave_1\x00', @broadcast, [0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xb6c3d83272762c8e, 0xff, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@log={'log\x00', 0x28, {{0x2, "d47bc53a877e8196da8cfa531681094acaa636424e3590142d0556ebd371", 0x5}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xbc}}}}]}]}, 0x8cc)

14:40:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000e552d3cc799ade5ac8", @ANYRES16=r1, @ANYBLOB="020125bd7000fddbdf2510000000280002000400040008000100ff7f0000040004000400040008000200060000000800010040000000500001000c00010069623a73697430000c00020008000300ff03000034000200080001001f00000008000400040000000800040000000080080001000900000008000300ff7f00000800040024d900001c000200080002004808000008000200040000000800010000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x81)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000200)=0x2)
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000340))
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f00000002c0)=0x8)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2501000000000000000001000000000000000141000000200017000000000000000069623a76657468315f746f5f6272696467650200"], 0x3c}}, 0x0)

14:40:22 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x4}, &(0x7f0000000200)=0x8)

[  292.730349][T13375] Enabling of bearer <ib:veth1_to_bridge> rejected, illegal name
[  292.874807][T13380] loop: Write error at byte offset 0, length 4096.
[  292.881647][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  292.892992][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:23 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x4}, &(0x7f0000000200)=0x8)

[  293.014665][T13380] loop: Write error at byte offset 0, length 2048.
[  293.021926][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  293.033456][    C0] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:23 executing program 1:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x800)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x9, @loopback, 0x3f}}, 0x3e600237, 0x7fffffff, 0x4, 0xcce, 0x7}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x8008, 0xa0, 0x0, r1}, &(0x7f0000000180)=0x10)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000001c0)={0x7ff, "e6977ab316dbfd05f2e24ced6589f29ea70b961d650ce3c579d2bbf8021dc11a", 0x2, 0x808, 0x6, 0x10001, 0xc, 0x1, 0x8, 0x8})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)=0x8)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, [], [{0x6, 0xfff, 0x3, 0x7fffffff, 0x80, 0xc50}, {0xee5c, 0x3, 0x9, 0x6, 0xc6}], [[]]})
r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x7f, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000003c0)={<r3=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000400)={r3, 0x1})
fstatfs(r2, &(0x7f0000000440)=""/80)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setuid(r4)
ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000540)={[], 0x7, 0x40, 0x0, 0x0, 0x6, 0x100000, 0x2000, [], 0x7fff})
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000700)={0xae, {{0xa, 0x4e24, 0x2, @rand_addr="30384c4799cb47c53cdf787ba69e5fd3", 0x2}}}, 0x88)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000007c0)=0x1)
setsockopt(r2, 0x80, 0x3, &(0x7f0000000800)="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", 0xff)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000900)=""/75, &(0x7f0000000980)=0x4b)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000009c0)={0x5c, ""/92})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x17)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000a40)='/dev/snd/pcmC#D#c\x00', 0x8, 0x20000)
ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000b40)={0x1ff, 0x3, 0xfffffffffffffffe, 0x8, 0x7fffffff, 0x1, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x4, 0x5, 0x6, 0xffffffff00000001, 0x3190, 0xa9, &(0x7f0000000a80)=""/186, 0xffff, 0x0, 0x800})
ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205)
ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000bc0))
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000d00)={&(0x7f0000ffd000/0x2000)=nil, 0x2, 0x0, 0x42, &(0x7f0000ffd000/0x1000)=nil, 0xd3db})
ioctl$KIOCSOUND(r0, 0x4b2f, 0x9)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000d80)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e23, @empty}, 0x204, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)='syzkaller1\x00', 0x3, 0x9, 0xfb})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000e00))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f00)={&(0x7f0000000ec0)='./file0\x00', 0x0, 0x10}, 0x10)
link(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='./file0\x00')

[  293.345717][T13388] loop: Write error at byte offset 0, length 4096.
[  293.352526][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  293.363819][    C0] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:23 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x4}, &(0x7f0000000200)=0x8)

[  293.596336][T13390] IPVS: ftp: loaded support on port[0] = 21
[  293.623130][T13394] loop: Write error at byte offset 0, length 4096.
[  293.629959][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  293.641193][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:23 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x4}, &(0x7f0000000200)=0x8)

[  293.868689][T13390] chnl_net:caif_netlink_parms(): no params data found
[  293.956620][T13390] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.964070][T13390] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.968848][T13400] loop: Write error at byte offset 0, length 4096.
[  293.973278][T13390] device bridge_slave_0 entered promiscuous mode
[  293.979327][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  293.991707][T13390] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.996772][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  294.012849][T13390] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.022020][T13390] device bridge_slave_1 entered promiscuous mode
14:40:24 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)

[  294.067917][T13390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.084979][T13390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.155385][T13390] team0: Port device team_slave_0 added
[  294.167105][T13390] team0: Port device team_slave_1 added
14:40:24 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)

[  294.338498][T13390] device hsr_slave_0 entered promiscuous mode
[  294.393622][T13390] device hsr_slave_1 entered promiscuous mode
[  294.423911][T13408] loop: Write error at byte offset 0, length 4096.
[  294.430696][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  294.441926][    C0] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  294.453373][T13390] debugfs: Directory 'hsr0' with parent '/' already present!
14:40:24 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))

[  294.520057][T13390] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.527458][T13390] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.535481][T13390] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.542829][T13390] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.646343][T13412] loop: Write error at byte offset 0, length 4096.
[  294.655150][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  294.666338][    C0] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:24 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))

[  294.743989][T13390] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.777350][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.815224][ T3890] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.855160][ T3890] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.875827][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  294.912498][T13421] loop: Write error at byte offset 0, length 4096.
[  294.918247][T13390] 8021q: adding VLAN 0 to HW filter on device team0
[  294.919303][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  294.937248][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  294.965250][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  294.975633][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  294.985019][ T3890] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.992449][ T3890] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.001360][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  295.011363][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  295.020790][ T3890] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.028141][ T3890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.044295][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  295.065506][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  295.107229][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  295.117861][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  295.147312][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
14:40:25 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  295.157219][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  295.167594][  T756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  295.212606][T13390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  295.223364][T13390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.238212][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.247975][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.258719][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.268441][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.279502][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.350355][T13390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.414920][T13427] loop: Write error at byte offset 0, length 4096.
[  295.424297][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  295.435483][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:25 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:25 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  295.729235][T13437] loop: Write error at byte offset 0, length 4096.
[  295.736115][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  295.747336][    C0] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:25 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sync()

14:40:25 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:26 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sync()

14:40:26 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sync()

14:40:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sync()

14:40:26 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sync()

14:40:26 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sync()

14:40:27 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:27 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:28 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:28 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:28 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:28 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:28 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x5)
sync()

14:40:28 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:28 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:28 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x5)
sync()

14:40:29 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x5)
sync()

14:40:29 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x5)
sync()

14:40:29 executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r0, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x5)
sync()

14:40:29 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x5)
sync()

14:40:29 executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r0, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x5)
sync()

14:40:29 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:29 executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r0, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x5)
sync()

14:40:29 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:30 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:30 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:30 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:30 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:30 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:30 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sync()

14:40:30 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:30 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:30 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:31 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  301.156025][T13602] IPVS: ftp: loaded support on port[0] = 21
14:40:31 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  301.395976][T13608] lo_write_bvec: 1 callbacks suppressed
[  301.396001][T13608] loop: Write error at byte offset 0, length 4096.
[  301.409756][    C1] print_req_error: 1 callbacks suppressed
[  301.409806][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  301.426816][    C1] buffer_io_error: 1 callbacks suppressed
[  301.426846][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  301.549473][T13602] chnl_net:caif_netlink_parms(): no params data found
14:40:31 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(0x0, 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  301.733133][T13602] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.740479][T13602] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.750135][T13602] device bridge_slave_0 entered promiscuous mode
14:40:31 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(0x0, 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  301.852998][T13602] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.860286][T13602] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.870397][T13602] device bridge_slave_1 entered promiscuous mode
[  302.055690][T13602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.070466][T13602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.144903][T13602] team0: Port device team_slave_0 added
[  302.187910][T13602] team0: Port device team_slave_1 added
[  302.319025][T13602] device hsr_slave_0 entered promiscuous mode
[  302.372951][T13602] device hsr_slave_1 entered promiscuous mode
[  302.522309][T13602] debugfs: Directory 'hsr0' with parent '/' already present!
[  302.674923][T13602] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.699195][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  302.708220][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  302.727226][T13602] 8021q: adding VLAN 0 to HW filter on device team0
[  302.745840][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  302.756296][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  302.765684][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.772964][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.790674][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.799949][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  302.810002][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  302.820019][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.827382][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.844957][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  302.864263][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  302.883296][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  302.894316][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  302.931678][T13602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.942950][T13602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.959946][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  302.969672][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.980283][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  302.990475][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  303.001294][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  303.011730][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  303.021685][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  303.034354][ T3890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.091326][T13602] 8021q: adding VLAN 0 to HW filter on device batadv0
14:40:33 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:33 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(0x0, 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:33 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))

14:40:33 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:33 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:33 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))

[  303.608583][T13648] loop: Write error at byte offset 0, length 4096.
[  303.618428][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  303.629976][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:33 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:33 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:33 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))

14:40:34 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)

14:40:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)

14:40:34 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:34 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)

14:40:34 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  304.521736][T13686] loop: Write error at byte offset 0, length 4096.
[  304.528588][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  304.539836][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:34 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:34 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x7}}, 0x6, 0x1ff}, &(0x7f0000000080)=0x90)

14:40:35 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  304.874560][T13701] loop: Write error at byte offset 0, length 4096.
[  304.881410][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  304.893477][    C1] Buffer I/O error on dev loop0, logical block 0, lost async page write
14:40:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00010005000000000000190e00060000006c010000000153b4", 0x2e}], 0x1}, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8001, 0x200000)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)

14:40:35 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:35 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x10001, 0x1000})
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0)

14:40:35 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, 0x0, 0x0, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  305.941979][    C0] hrtimer: interrupt took 194779 ns
14:40:38 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  309.074158][    C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large:
[  309.086378][    C1] clocksource:                       'acpi_pm' wd_now: 90896f wd_last: cd6db8 mask: ffffff
[  309.096712][    C1] clocksource:                       'tsc' cs_now: aa7f89947a cs_last: a895d4f768 mask: ffffffffffffffff
[  309.108114][    C1] tsc: Marking TSC unstable due to clocksource watchdog
[  309.134092][   T32] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'.
[  309.144235][   T32] sched_clock: Marking unstable (309192281394, -58212765)<-(309254488722, -120419842)
[  313.525276][T13729] clocksource: Switched to clocksource acpi_pm
14:40:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000)
r4 = socket(0x20000000000a, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x200000000000053}, 0x90)

14:40:43 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, 0x0, 0x0, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:44 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, 0x0, 0x0, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000)
r4 = socket(0x20000000000a, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x200000000000053}, 0x90)

14:40:44 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, 0x0, 0x0, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  314.315246][T13749] IPVS: ftp: loaded support on port[0] = 21
14:40:44 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340), 0x0, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:44 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, 0x0, 0x0, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

14:40:44 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
pwritev(r1, &(0x7f0000000340), 0x0, 0x1081806)
fcntl$addseals(r1, 0x409, 0xc)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x5)
sync()

[  314.693990][T13749] chnl_net:caif_netlink_parms(): no params data found
14:40:44 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000001c80)=ANY=[@ANYBLOB="18040000000000000200000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff000000000000001900df000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a000000000000002f6465762f637573650000000000000000000000000000000000000000000000ffffffffffffffff00"/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000e000000000000007d73797374656d73656c66c76c6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev/cuse\x00'/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000026000000000000002d776c616e30656d3073656c696e75782f73656c6666706f7369785f61636c5f6163636573730000000000000000000000000000000000000000000000000000000000000000000059a600"/184, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev/cuse\x00'/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00user)md5sum}\x00\x00\x00\x00'], 0x418)
socketpair(0xf, 0xa, 0xc43, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f00000001c0)="899d682a23614461c185609abcc2cbca3b96164b66cf46b160c3009b7c69ba665c4401b4bb1a55d2596136cddc30a0f0faf4d95303ec9de5f9c096f0419c90bd814bcedcfb8077d76f7249b97a4059f31a69c87a32cae51069af3c82cd270700b699f078c50d1b163f8a058e54aba44267346abd2642bb3c", 0x78)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0xa0000, 0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x8, 0xc040)
write$P9_RXATTRCREATE(r2, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0xffffffffffffffe8)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x8)

[  314.925988][T13749] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.933806][T13749] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.943368][T13749] device bridge_slave_0 entered promiscuous mode
[  314.978524][T13749] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.986146][T13749] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.996358][T13749] device bridge_slave_1 entered promiscuous mode
[  315.097819][T13749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.128908][T13749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.190318][T13749] team0: Port device team_slave_0 added
[  315.224777][T13749] team0: Port device team_slave_1 added
[  315.320944][T13726] debugfs: File 'dropped' in directory 'sg0' already present!
[  315.328701][T13726] debugfs: File 'msg' in directory 'sg0' already present!
[  315.358205][T13749] device hsr_slave_0 entered promiscuous mode
[  315.393824][T13749] device hsr_slave_1 entered promiscuous mode
[  315.462625][T13749] debugfs: Directory 'hsr0' with parent '/' already present!
[  315.518248][T13749] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.525676][T13749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.533914][T13749] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.541193][T13749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.258536][T13726] debugfs: File 'trace0' in directory 'sg0' already present!
[  320.318335][ T3890] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.331059][ T3890] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.413820][    C0] ==================================================================
[  320.421911][    C0] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70
[  320.421911][    C0] CPU: 0 PID: 13726 Comm: syz-executor.2 Not tainted 5.3.0-rc3+ #16
[  320.421911][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  320.421911][    C0] Call Trace:
[  320.421911][    C0]  <IRQ>
[  320.421911][    C0]  dump_stack+0x191/0x1f0
[  320.421911][    C0]  kmsan_report+0x162/0x2d0
[  320.421911][    C0]  __msan_warning+0x75/0xe0
[  320.421911][    C0]  kmem_cache_alloc_node+0x5d0/0xe70
[  320.421911][    C0]  ? __alloc_skb+0x215/0xa10
[  320.421911][    C0]  __alloc_skb+0x215/0xa10
[  320.421911][    C0]  aoecmd_cfg+0x205/0xa80
[  320.421911][    C0]  discover_timer+0x86/0xa0
[  320.421911][    C0]  call_timer_fn+0x232/0x530
[  320.421911][    C0]  ? skbfree+0x4a0/0x4a0
[  320.421911][    C0]  __run_timers+0xcdc/0x11a0
[  320.421911][    C0]  ? skbfree+0x4a0/0x4a0
[  320.421911][    C0]  ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[  320.421911][    C0]  run_timer_softirq+0x2d/0x50
[  320.421911][    C0]  ? timers_dead_cpu+0x9d0/0x9d0
[  320.421911][    C0]  __do_softirq+0x4a1/0x83a
[  320.421911][    C0]  irq_exit+0x230/0x280
[  320.421911][    C0]  exiting_irq+0xe/0x10
[  320.421911][    C0]  smp_apic_timer_interrupt+0x48/0x70
[  320.421911][    C0]  apic_timer_interrupt+0x2e/0x40
[  320.421911][    C0]  </IRQ>
[  320.421911][    C0] RIP: 0010:kmsan_slab_free+0xac/0x100
[  320.421911][    C0] Code: 00 b9 01 00 00 00 e8 93 c9 ff ff 65 ff 0d 30 be fe 7d 65 8b 05 29 be fe 7d 85 c0 75 2e e8 4c fb 37 ff 4c 89 7d d0 ff 75 d0 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 e0 75 0b 48 83 c4 18 5b 41 5e
[  320.421911][    C0] RSP: 0018:ffff88805337f380 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  320.421911][    C0] RAX: 0000000000000000 RBX: ffff88812f8188c0 RCX: 0000000000000017
[  320.421911][    C0] RDX: 0000000000000016 RSI: ffffd0ffffffffff RDI: ffff88808e7ccfd0
[  320.421911][    C0] RBP: ffff88805337f3b0 R08: ffffea000000000f R09: ffff88812fffb000
[  320.421911][    C0] R10: 0000000000000013 R11: ffffffff8182bd40 R12: 0000000000000000
[  320.421911][    C0] R13: 0000000000000000 R14: ffff88808e7ccf78 R15: 0000000000000246
[  320.421911][    C0]  ? stack_trace_save+0x1b0/0x1b0
[  320.421911][    C0]  kmem_cache_free+0x2d1/0x2b70
[  320.421911][    C0]  ? __free_vmap_area+0xa10/0x34a0
[  320.421911][    C0]  ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[  320.421911][    C0]  __free_vmap_area+0xa10/0x34a0
[  320.421911][    C0]  __purge_vmap_area_lazy+0x306/0x470
[  320.421911][    C0]  free_unmap_vmap_area+0x283/0x2c0
[  320.421911][    C0]  __vunmap+0x76f/0x11a0
[  320.421911][    C0]  vunmap+0x68/0x90
[  320.421911][    C0]  relay_destroy_buf+0xa8/0x440
[  320.421911][    C0]  relay_open_buf+0x1178/0x1940
[  320.421911][    C0]  ? blk_subbuf_start_callback+0x51/0x130
[  320.421911][    C0]  relay_open+0x9ea/0x11b0
[  320.421911][    C0]  do_blk_trace_setup+0x8d8/0x1330
[  320.421911][    C0]  blk_trace_setup+0x1fd/0x350
[  320.421911][    C0]  sg_ioctl+0xe12/0x5370
[  320.421911][    C0]  ? kmsan_set_origin+0x26d/0x340
[  320.421911][    C0]  ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[  320.421911][    C0]  ? sg_poll+0x780/0x780
[  320.421911][    C0]  do_vfs_ioctl+0xea8/0x2c50
[  320.421911][    C0]  ? security_file_ioctl+0x1bd/0x200
[  320.421911][    C0]  __se_sys_ioctl+0x1da/0x270
[  320.421911][    C0]  __x64_sys_ioctl+0x4a/0x70
[  320.421911][    C0]  do_syscall_64+0xbc/0xf0
[  320.421911][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  320.421911][    C0] RIP: 0033:0x459829
[  320.421911][    C0] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  320.421911][    C0] RSP: 002b:00007faa296a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  320.421911][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829
[  320.421911][    C0] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000004
[  320.421911][    C0] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  320.421911][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa296a86d4
[  320.421911][    C0] R13: 00000000004c0ed9 R14: 00000000004d3ff0 R15: 00000000ffffffff
[  320.421911][    C0] 
[  320.421911][    C0] Uninit was stored to memory at:
[  320.421911][    C0]  kmsan_internal_chain_origin+0xcc/0x150
[  320.421911][    C0]  __msan_chain_origin+0x6b/0xe0
[  320.421911][    C0]  ___slab_alloc+0x1dbc/0x1fb0
[  320.421911][    C0]  kmem_cache_alloc_node+0x769/0xe70
[  320.421911][    C0]  __alloc_skb+0x215/0xa10
[  320.421911][    C0]  aoecmd_cfg+0x205/0xa80
[  320.421911][    C0]  discover_timer+0x86/0xa0
[  320.421911][    C0]  call_timer_fn+0x232/0x530
[  320.421911][    C0]  __run_timers+0xcdc/0x11a0
[  320.421911][    C0]  run_timer_softirq+0x2d/0x50
[  320.421911][    C0]  __do_softirq+0x4a1/0x83a
[  320.421911][    C0]  irq_exit+0x230/0x280
[  320.421911][    C0]  exiting_irq+0xe/0x10
[  320.421911][    C0]  smp_apic_timer_interrupt+0x48/0x70
[  320.421911][    C0]  apic_timer_interrupt+0x2e/0x40
[  320.421911][    C0]  kmsan_slab_free+0xac/0x100
[  320.421911][    C0]  kmem_cache_free+0x2d1/0x2b70
[  320.421911][    C0]  __free_vmap_area+0xa10/0x34a0
[  320.421911][    C0]  __purge_vmap_area_lazy+0x306/0x470
[  320.421911][    C0]  free_unmap_vmap_area+0x283/0x2c0
[  320.421911][    C0]  __vunmap+0x76f/0x11a0
[  320.421911][    C0]  vunmap+0x68/0x90
[  320.421911][    C0]  relay_destroy_buf+0xa8/0x440
[  320.421911][    C0]  relay_open_buf+0x1178/0x1940
[  320.421911][    C0]  relay_open+0x9ea/0x11b0
[  320.421911][    C0]  do_blk_trace_setup+0x8d8/0x1330
[  320.421911][    C0]  blk_trace_setup+0x1fd/0x350
[  320.421911][    C0]  sg_ioctl+0xe12/0x5370
[  320.421911][    C0]  do_vfs_ioctl+0xea8/0x2c50
[  320.421911][    C0]  __se_sys_ioctl+0x1da/0x270
[  320.421911][    C0]  __x64_sys_ioctl+0x4a/0x70
[  320.421911][    C0]  do_syscall_64+0xbc/0xf0
[  320.421911][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  320.421911][    C0] 
[  320.421911][    C0] Uninit was created at:
[  320.421911][    C0]  kmsan_internal_poison_shadow+0x53/0xa0
[  320.421911][    C0]  kmsan_slab_free+0x8d/0x100
[  320.421911][    C0]  kmem_cache_free_bulk+0x3ad9/0x3f50
[  320.421911][    C0]  __kfree_skb_flush+0xb0/0x100
[  320.421911][    C0]  net_rx_action+0x1908/0x1950
[  320.421911][    C0]  __do_softirq+0x4a1/0x83a
[  320.421911][    C0]  irq_exit+0x230/0x280
[  320.421911][    C0]  do_IRQ+0x20d/0x3a0
[  320.421911][    C0]  ret_from_intr+0x0/0x33
[  320.421911][    C0] ==================================================================
[  320.421911][    C0] Disabling lock debugging due to kernel taint
[  320.421911][    C0] Kernel panic - not syncing: panic_on_warn set ...
[  320.421911][    C0] CPU: 0 PID: 13726 Comm: syz-executor.2 Tainted: G    B             5.3.0-rc3+ #16
[  320.421911][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  320.421911][    C0] Call Trace:
[  320.421911][    C0]  <IRQ>
[  320.421911][    C0]  dump_stack+0x191/0x1f0
[  320.421911][    C0]  panic+0x3c9/0xc1e
[  320.421911][    C0]  kmsan_report+0x2ca/0x2d0
[  320.421911][    C0]  __msan_warning+0x75/0xe0
[  320.421911][    C0]  kmem_cache_alloc_node+0x5d0/0xe70
[  320.421911][    C0]  ? __alloc_skb+0x215/0xa10
[  320.421911][    C0]  __alloc_skb+0x215/0xa10
[  320.421911][    C0]  aoecmd_cfg+0x205/0xa80
[  320.421911][    C0]  discover_timer+0x86/0xa0
[  320.421911][    C0]  call_timer_fn+0x232/0x530
[  320.421911][    C0]  ? skbfree+0x4a0/0x4a0
[  320.421911][    C0]  __run_timers+0xcdc/0x11a0
[  320.421911][    C0]  ? skbfree+0x4a0/0x4a0
[  320.421911][    C0]  ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[  320.421911][    C0]  run_timer_softirq+0x2d/0x50
[  320.421911][    C0]  ? timers_dead_cpu+0x9d0/0x9d0
[  320.421911][    C0]  __do_softirq+0x4a1/0x83a
[  320.421911][    C0]  irq_exit+0x230/0x280
[  320.421911][    C0]  exiting_irq+0xe/0x10
[  320.421911][    C0]  smp_apic_timer_interrupt+0x48/0x70
[  320.421911][    C0]  apic_timer_interrupt+0x2e/0x40
[  320.421911][    C0]  </IRQ>
[  320.421911][    C0] RIP: 0010:kmsan_slab_free+0xac/0x100
[  320.421911][    C0] Code: 00 b9 01 00 00 00 e8 93 c9 ff ff 65 ff 0d 30 be fe 7d 65 8b 05 29 be fe 7d 85 c0 75 2e e8 4c fb 37 ff 4c 89 7d d0 ff 75 d0 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 e0 75 0b 48 83 c4 18 5b 41 5e
[  320.421911][    C0] RSP: 0018:ffff88805337f380 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  320.421911][    C0] RAX: 0000000000000000 RBX: ffff88812f8188c0 RCX: 0000000000000017
[  320.421911][    C0] RDX: 0000000000000016 RSI: ffffd0ffffffffff RDI: ffff88808e7ccfd0
[  320.421911][    C0] RBP: ffff88805337f3b0 R08: ffffea000000000f R09: ffff88812fffb000
[  320.421911][    C0] R10: 0000000000000013 R11: ffffffff8182bd40 R12: 0000000000000000
[  320.421911][    C0] R13: 0000000000000000 R14: ffff88808e7ccf78 R15: 0000000000000246
[  320.421911][    C0]  ? stack_trace_save+0x1b0/0x1b0
[  320.421911][    C0]  kmem_cache_free+0x2d1/0x2b70
[  320.421911][    C0]  ? __free_vmap_area+0xa10/0x34a0
[  320.421911][    C0]  ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[  320.421911][    C0]  __free_vmap_area+0xa10/0x34a0
[  320.421911][    C0]  __purge_vmap_area_lazy+0x306/0x470
[  320.421911][    C0]  free_unmap_vmap_area+0x283/0x2c0
[  320.421911][    C0]  __vunmap+0x76f/0x11a0
[  320.421911][    C0]  vunmap+0x68/0x90
[  320.421911][    C0]  relay_destroy_buf+0xa8/0x440
[  320.421911][    C0]  relay_open_buf+0x1178/0x1940
[  320.421911][    C0]  ? blk_subbuf_start_callback+0x51/0x130
[  320.421911][    C0]  relay_open+0x9ea/0x11b0
[  320.421911][    C0]  do_blk_trace_setup+0x8d8/0x1330
[  320.421911][    C0]  blk_trace_setup+0x1fd/0x350
[  320.421911][    C0]  sg_ioctl+0xe12/0x5370
[  320.421911][    C0]  ? kmsan_set_origin+0x26d/0x340
[  320.421911][    C0]  ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[  320.421911][    C0]  ? sg_poll+0x780/0x780
[  320.421911][    C0]  do_vfs_ioctl+0xea8/0x2c50
[  320.421911][    C0]  ? security_file_ioctl+0x1bd/0x200
[  320.421911][    C0]  __se_sys_ioctl+0x1da/0x270
[  320.421911][    C0]  __x64_sys_ioctl+0x4a/0x70
[  320.421911][    C0]  do_syscall_64+0xbc/0xf0
[  320.421911][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  320.421911][    C0] RIP: 0033:0x459829
[  320.421911][    C0] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  320.421911][    C0] RSP: 002b:00007faa296a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  320.421911][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829
[  320.421911][    C0] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000004
[  320.421911][    C0] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  320.421911][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa296a86d4
[  320.421911][    C0] R13: 00000000004c0ed9 R14: 00000000004d3ff0 R15: 00000000ffffffff
[  320.421911][    C0] Kernel Offset: disabled
[  320.421911][    C0] Rebooting in 86400 seconds..