[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.044970][ T27] audit: type=1800 audit(1577335256.746:25): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.073602][ T27] audit: type=1800 audit(1577335256.746:26): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.136398][ T27] audit: type=1800 audit(1577335256.756:27): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. 2019/12/26 04:41:06 fuzzer started 2019/12/26 04:41:08 dialing manager at 10.128.0.26:41703 2019/12/26 04:41:08 syscalls: 2707 2019/12/26 04:41:08 code coverage: enabled 2019/12/26 04:41:08 comparison tracing: enabled 2019/12/26 04:41:08 extra coverage: enabled 2019/12/26 04:41:08 setuid sandbox: enabled 2019/12/26 04:41:08 namespace sandbox: enabled 2019/12/26 04:41:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/26 04:41:08 fault injection: enabled 2019/12/26 04:41:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/26 04:41:08 net packet injection: enabled 2019/12/26 04:41:08 net device setup: enabled 2019/12/26 04:41:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/26 04:41:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:43:51 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x1, 0x8000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r1 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0x9d0000, 0x9, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a92, 0x8000, [], @p_u8=&(0x7f0000000100)=0x5}}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x7fff, 0x40, 0x20, 0x80, 0x1}}) r3 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x2, 0x101000) write$cgroup_int(r3, &(0x7f0000000240)=0x2, 0x12) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x0, 0x9, 0x4, 0x208e000, 0xffff, {}, {0x2, 0x0, 0x7, 0x8, 0x86, 0x1f, "e2132052"}, 0x1000, 0x1, @planes=&(0x7f0000000280)={0x7ff, 0x2, @userptr=0x3, 0x7}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000380)={0x80}, 0x4) epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0xa30, &(0x7f0000000400)={0x7}, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000440)={0x8, 0x9, 0xfffffffc, 0x400, 0xb, "2c1800209725a6d5b0f1af0d96c45afdbc20a4"}) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x10001, 0x4d002) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f00000004c0)=0x1) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='overlay\x00', 0x200000, &(0x7f0000000580)={[{@metacopy_off='metacopy=off'}, {@xino_on='xino=on'}, {@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@default_permissions='default_permissions'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}, {@workdir={'workdir', 0x3d, './file0'}}], [{@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x3f}}, {@fsname={'fsname', 0x3d, 'ppp1)/userwlan0]'}}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001680)={r4, &(0x7f0000000640)="e3272b3eb404", &(0x7f0000000680)="f82cec4d36102677309dc929697f7be71a4230aaccc708b8198a57b6343443b25b556a781e49c49ed25c522538ca2f7e60711335274b7541254d5c88376e89b5a86c0afbaa48e5a9b8804b3d08ea9a5c57203b65b65ad516e626635fdd61a80155be13ed5ff57e8c87fbd300b8899f074b122fb09af357a5486ef0fc0e476a4ec2251490080c7934580d5a9aeed382dbc3324d68f36b6122a8970b8390772018ec70bc0e2ee1ac3fb6750b8f3fce2f78da737ce5d65413d206db5f28ce88fef475d558fb89f3da230698c5ef5c312dfd300b18a61d35146bdbe82621cdf88cf4b741f1fd09cea25b4ad3f79a476890ea2dba2b341c240c16b5b293efffa6ad25c51309589ed70218b3da4f894590e99747f6994a25d11ea01854b274446c3b337b2a728d2b14e57a6a4cf981b405ee1429f7fb7c5a0a2bd8be2567bf8b4088fa91feb283e8d249bbd445d2b68fb61bbebe2aea599f6b3f78224efbd4a986f5d9bf9211dab8b5c9af16e13dfea52f976aef7b7b434ca2111f44a7a0e3220bf5a5279b1e73e529f0952fcc7e938367b89252e22403c80dd3ef8e17424cfdf3c666df3a385f7695034b180b97617ceef6f8c12e3a8ca07bd6a106d484caba521b49a435c6a8fdd675aaf8adb010197d9595b8cfd2151b2e2d45c41c24206c922050436988015c44581a548e45d6afa8193a54991a433db52fd6e4aaa2370c93e447f4edce43b1fd1cb6ad328dec95690c9166be8ee144874b73a5d49e8c618187117f4c4ecdbbdc9c12dbde1c679208315c453cc8bb8bb4f6ecea3f2a964a1e5faa62b5734a1f5e154fa6532b500935c177439f70ed80eeb671e712fad6935db114eaab772169c6e26f15eb786553256d0f1cef3ddea2c16ee2396d987233e9e2f2bf59f3998c1040e37c97cdd8ae528955163ad145bf5b6b16e28b54b6010d1d60ff5dddcf4caeb78b6fda544a36984f1d871aa0efb94cacea717b6a74c224ef4bb7d51b9a811e085e9ddad43c535a5a675cd4e5609b557cbe19e9a9be5784cb57bbcd60da22946286521fb712f4ee6de38391d27b6dbd6700b26012d54ecfc105ab10a84825e9f4e64cef3ae1053b0cbebb70d3a497c5d023920c5a5b74935e8267bfba17d41eab520c6bc4fbbd8e7eb81d98f36c03cf4777fb0200e9601ffce89d3639d28a2e1040c0e2d972ffdb088d648dea906e2c74cb023a422bf6b75a878a4df70ec48206694b369c40667cf4f80a84f69df38867fbc3c860bdd18e59e93a8f7d68f3873bd82f33ee4c7821fd0beabbd64ea4b8e8fe08e3565818364c1a54c9beba180917405bb442e36d1dccdb8be9b67c3b8b26d9da6baefed12c720eb098f458a482fbc2ccaf7a10a45a8fdec63218683c923e4d053dbdf64748ff81037a48cb8a8ceaac8a987c2d250f171e39dfd028e8f684f19d956cb506bb554d1ebbf0481071097f0c49c28ec344c88334e59d49c4fb8bfbbad1baf4342185b1f38119d07b0d70c8d0421c73d90929165239d4d5450264706e308c308ddddfc221a5994fb15cea9c0640d9b092795a5182b77a7687b905f5ea6219e505e322fc7a32d09c8d8be221fd9026d7950349c145182f3c9610f6ab3eeac2fec1ed8e74445952b1798f9a42dae030f3c502eb9e26024a091de974251759ca396bd8cc5fc05e05f6adba088f523433608ddaad90b9c4b63ea8ce7afe52568ad6411e31b686030b20431dfa3cc553d002233e3c8efeed77961a126535306422aefa864c4f38bacca5787c76bae4d3166b49d09e16bcd5bf0726f5a3cc38de4f7d3b4270167b17af1cd6a082f3ccf2dfa24d55d9dc67beabaa95bc5b7bfb77be85b3b390805850801e68cd5928d58f0d0d4e8e89e186d9e1b526f8cb89b17a0174f8a461e4e4b214f669a888b7902543801ffbc16253f320060d185c9cfd18162780537f05612b009f607c9f51e424431f2112a2dd6d4dd768615dae742e57eb9a6bf385b0800030035b4163021702e5808d3fa6ab0c38c55680c1079545dbc99012c2eb89d560d4d4382d2a3407f0cbca14736530edabee732221850ac994602a17e76137ddb1d37bc1af38c635ef96f15336173c3b7ca0fea8aa18be042510a2917d28761d7b566a1e56ea94681fb19acff791370a0f09705d617b7f9e3b2b2fa295ebf2e07a8fd8103d35fe817bc2bc9a071efb003293eaa8fc7a5c5f7af0b0cfbf6489755c174f2c907f282b768863df439257b371b8bcb1a61a5f66928655564e108c5bcea46b4210a455222da726830fc39bc3b5dafdedee9a264cfcda493c7448df1e433c3078169869e6bfa7d96c48d6b4eaff74c59beb775a239f197841a6c3965f861e5376d1257fb74bcbc4a4940ad7e954d57606c0b2d133a333735d6c01c750a68777b26b5d0dd61e8b5c0a6c136e414fd75c8e3d22159721d5d1ae3770e063be477bfe0543839aef6cf62d60a9a7500cee698cb85b76b0f8ee57dfe1aa5c958e2d198d42edf39e3519d6a57c1b4f7868857354937b02ee33581d729b5752951005b72a66f0cdb4d19bb90a4f25a4b797b938a68a3c88550c5104dbccbea4fe0b53d608a23840b0307c14ef0b4e6277ecf2326292c6af8d4d2482ea2c92cb127f1631392860ff327cfecf26f564cd611bd5cb61e5dddd3471abe369f3253fb273d1b19d6fe166182c9f289e1550b09ec9edd1edd49294e0a5445a8dfdc92f046a1edd92f5144ce930ad6806ca874a70403b454b425bd7f9b8bfc3690678ef8afe4b3f1f8f7742f77623526f1fce55bb71ad94900f085a26ec450baf8a71759941ef37d82d8f073ada41f7e45015dd2d3b27a8d8ad7972db868ad8e9b21029a7801049abefbb727996787b97858cb7945be4aedb95d832ce68c52b989005f1af4d3dbda17ec883f2bafd6c90d7cc44fe838328d8b070ba6214fcb2a16b8703568a127be7de507178ebfda53af208fa219f09fb8121603d65c1d20d9118816cdece5711884d272fce3ee7f3797b639dda1cf07492b4a7fe3a5eaba06411e84548f1f3e60997e45f58f72e46ea87ef2572465e7aae18cc41e109dc6ee8039ec60cb5181a626cfcbd0a6908239d20557ca0bd27d083ad547adf6f8603b71756e21814ac7d55f0977d05a1df43d22da13ca465fb382dbab5c33ed2bf60c7b7feec98f7a225ab2878ee1acec6b254863e5c740e078a234f88b2a65353829da8e774644c8e9d7afe2c31bda64b2f6df48afa7e7df716095dc1ee15ac09d6e8984ddd5d1bd2961938a3ae5059c4cf97abff464186aacbfac4935fa5c88caba301b82f0245ff822d1c330baacf0a29134a13d70f44f39f334354016a6643dd86e54e9e884fb9973e6f14ff727f98788aad67fad46341aca4034f1662275b5a8fd0cef8aee0d31bda82815bd0d617b5f08ab69fdc02299970451f396baafb0912a92cee31c51d661ce7587c715d1dcc79366516b2fee77bad291b890b2febf24f30eb68fbb7ee60f8e4ac87f7de3eadf91ce5b8feeedf0e6333cdccefb1854836f86d54b0761699a70f21ceefddfa5e7518679db586c98ff93dbd59935e2853af1db542c792eb9a80379b71e353bc5a4c25f258b49f91d9dfd6d626e97c6ab535e6e415f8cabc16a6819fb86539ff78f5b6ed084e0aaf62a52293ca9b9664745a0921988830be82f98acbce3ae6bf70fcb8dfe66b29eed82fa68e0e9134a7f4dc2373bb58208e9e8eefb5ce97e2e2da62139ce2f96cfd942d17a1e26738aa30098f9e16481120e32a6c8741d06093ec315b15cc7c3108accb4b3ce470cc89b921778d0c2aef7d1178c1b79824694f36fb1ba34d8d3bc19f877d25be3e436baee4fba244e40a0f6fc8d458eac7f323656eb3cec684eb2c8015a0e2e7e5a37fa2bee2612da9f1d4e8a5479326c41df76fd0261edf9b0ef0c5b1745002d7cc4be26214de7453cea02cfbf5fbc8c29c82c67405995600ee626f47d4b27ae06a577371a3080b6c611de7ca7753dcc8c8bf3de2d722887af302e9d15c44dd8b2599c730f4a38600f0305b8b1d10ad986149b9fa986595a78fbbe2d2813c72218d685d18e42d4332f9c769d65cd74bb5dd6315e9671ef238503797fc50ddca7ba1b9ca73aff0f9fecc0217ccd0c5f23b2b0842dc08d5df9df2dd1ba7becc2d0a5c0b37edea8b17127cb435c9ff57e6b37af69c03354f9c511d8eb154cdc221ff6746d51b4ab92b9d46d2ff0e9b7c973dd6bcf55b4bf677a826b6b47318ebbb11234db2363dac7ca65807070397fbb3bdfd596f2c75823d2fd38b452ec580ffd0c0260a19fd144fa4b8750cac09f0c160f498c519c72a91723a4a4e55177e06f7ad8fd2f75f6d950dee4f5b53f45caa581e17518f575b06f94c6f801b9744438d4d11f6354f2bd3fe918caaf9f22a34bb86830edf9891590cc98029984977a40bc1b5f9d6b0db2c28922a3b1a6df220c5dee7b5820b3ce2e3c4d3a73fad83c1c8209299fbcd7c16bcf567dd199b0943047b19ae8161b83f04ae2fa7395f9a6089a09f624bfea05e105c75d6a6728c0613c9cd08f0ccd0f6410154e4dc570ee81b5b6fd3c077f0a7bddfbc1da00a9b5a04e142a9e9b72cb3979ada0016b07ee4d0e706c585fa613e89c909e121fb5abb1ba4107f0d4b0a28aeaf04d252407b6c8046b67be7ba82ac2cade40307e55da5681ff62225bc4ba18a6557fc8ad1c72e05cba37dc1bc0c0f9b82aa1323ad0146f91a13fd85c625f181396e65fb36db424dd8c1d533f18405f8ce3514c7aebd086084bde11c532fc6e1ef563d1e49f401010669e522be0ce428adf57b1f941139418e8829fe7007db1b8b017110cce8d38a1d5259588b16a94300ac9d1e93894b89875e75701e55f60abfde38395d7994689d424aa325e7b8303409bbc54a0d33c2d2599afab19347edcc3e4758e2e5ae937c27e6ec1d1002f0096a2a40b4a3c4c67f70583ade6929f7f477b86d7ed516fbbdacb559dab12a7f9ab2a7d0dca3b90fd829e3cd5adaff3167e4b19fed28641826dcfe6999631ca463e5ced2a9272fe777e3bab03656d3c9bb5e39d0ca075c0daff5116cdee8e8e85d65669807690404c1c1fec8b734b43552371e2b0e68126a47cd493b3143cc4a884071fcf7e99840a647ee4bb52eb4d8841463d948ad8ec8878fd6df31a3d47f57fb03470f0a54f69acc82ad4d4f7f1f72fb4b929d9b09e7d06080896b0514c96be655656d7641f1a16ee2b0b4910ff5b381c73563d616989a7e93c59bf15487976ad82a6492341aecab22e2347ef481b15da2043cef18f477cb304bd5debcda170858b54a03aa8d7b32aaf128fff3c7c3b0a9d8c3756ce458196b26b6f5251e5fd2905376c1d991156c2e16111ab5d9af42ec076b3d2c5aaf3a75e16eb9eb5ba63d8a242cf43c2ee62fcccb398fa51df847c126e092428a564aa331a1de14b286d8fe446c250b3e4f59dec999917f83c35d7c1616eb39eb0b8746f92af5be7d3f33581a85c983b77ac6da95455af27c4f5b93b178636adff7212ea8cd615b62bd881b4937ed16adbea9b4932ad22d39d65486d40e3e102099178d3fba5ceb02ca851ef894e49524facee546ae5d864e38d0e28b41afc419b377a1d335b98ade2bc74976f26b369b557c9be7f462d343ddd588211f66933b83d2cee0ef19a6a1772c7c36157630a77da0c9a052b1fa48dc8919259e1d8dc8dfd48a3508d243f47361cf3d610ffef442cd89897cacffe4fd970ceecd0b2a76d4600f53fdc94ae9e26a0837149fffffb349352675b6a7b79aee956d09db88b855cc1beadb3c7f", 0x2}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snapshot\x00', 0xc245693eb89b6bd2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001700)=0x1000, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000001900)='\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000019c0)=0x0) syz_mount_image$reiserfs(&(0x7f0000001740)='reiserfs\x00', &(0x7f0000001780)='./file0\x00', 0x7, 0x1, &(0x7f00000018c0)=[{&(0x7f00000017c0)="e2aa93782f73f861fe55611d2d3dd8a74ae1c2b1d265ffa02b17c0f758e65093fbc6a3d016927b12ba8a9f3cec8d3e1242d2e298df44736e913e39e9b02c61a64fdcf14409178a7ba70f8faacdd975d9f06a61a2c25702ea910ef28ea191248134be2a2c5bcc8ac8e12a3fe11c982c735c2d0806801c306e39189dc3bf1ad11f5d0007fd2935a5667a652e31ef869be00f2e36c2853ec617c7f6763a96321377a79972d692257ad034964ed5c1708002251622f64244d2f24bfb47846e44262d9377cae3940b053291bec0f3a4e071b46803ea00be44e9cf03435f31fb4beb368ab1db66d53a77c0e9", 0xe9}], 0x20000, &(0x7f0000001a00)={[{@notail='notail'}, {@grpquota='grpquota'}, {@noacl='noacl'}, {@data_ordered='data=ordered'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/snapshot\x00'}}, {@uid_eq={'uid', 0x3d, r8}}, {@fowner_eq={'fowner', 0x3d, r9}}]}) accept4$llc(0xffffffffffffffff, &(0x7f0000001a80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001ac0)=0x10, 0x1000) r10 = syz_open_dev$vcsu(&(0x7f0000001b00)='/dev/vcsu#\x00', 0x7, 0x511000) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) r11 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, r11) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001bc0)='net/snmp\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r12, 0x8934, &(0x7f0000001c00)={'lapb0\x00', 0x1}) 04:43:51 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x8, 0xfffffff9, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9b0905, 0xf49}}) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000200)='reno\x00', &(0x7f0000000240)) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x8002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, [0x8, 0xfffffffffffffffb, 0x1, 0x6, 0x7fffffff, 0x9, 0x68b6, 0xfffffffffffffffb, 0x7, 0xccd, 0xdd2, 0x7fffffff, 0xffff, 0x7, 0x5]}, &(0x7f00000003c0)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r4, 0x4, 0xda, "2c17a31a96e490b3a93928c10dd48285c846c604c3f3c5543759bbf4b0d656a0fc582d7224e8fd6247b091583e19d1851d1a4d3f101a8e93477476f842a15550ad692831369640ddab43e99f027024d6cd503965206cadfc1db4014ee31b1a0c8d000810e19d77035939baebebb9f73396deebc163993f2d6177a272d2f58d058ce5eb7cdac172198229f8d8da490cf3b5bf81f55c4bf3790a7238336a00e9030d65fc8b5f30e3699115b6b048c6daf39ae4e3946b09d7e989889e261c7adbac202f4443b9b8720b47a18b062af71d66e44553acafce603a7770"}, 0xe2) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000500)={0x2, 0x8001}) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x5, 0xc241042f4335727f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000540)={r4, @in6={{0xa, 0x4e21, 0x6, @ipv4={[], [], @remote}, 0x800}}, [0x3, 0x1, 0x1, 0x4, 0xe14, 0x2, 0x9, 0xff, 0x0, 0x9, 0x8, 0x400, 0xeea4, 0xff, 0x6]}, &(0x7f0000000640)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000680)={r5, 0x8, 0x10}, &(0x7f00000006c0)=0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000800)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'irlan0\x00', r7}) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cachefiles\x00', 0x200000, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000b40), 0x4) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000b80)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x2, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x594b, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/userio\x00', 0x8000, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000c40)=0xfd) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000cc0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r10, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0xffffff01, 0x6, 0x1, 0x9]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) lookup_dcookie(0x8e47, &(0x7f0000000e00)=""/245, 0xf5) write$rfkill(r1, &(0x7f0000000f00)={0xb329, 0x7, 0x2, 0x1}, 0x8) r11 = openat(0xffffffffffffffff, &(0x7f0000000f40)='./file0\x00', 0x100, 0x10) ioctl$VIDIOC_G_PRIORITY(r11, 0x80045643, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) syzkaller login: [ 239.727437][ T9380] IPVS: ftp: loaded support on port[0] = 21 04:43:51 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x8001, 0x7, 0x80000001, 0x7ff, 0x7d7, 0x8000, 0x18, 0x6}}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)={0x3ff, 0x1}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x2a002, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x79}}, {@max_read={'max_read', 0x3d, 0x40}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@dont_hash='dont_hash'}, {@obj_role={'obj_role', 0x3d, '{md5sumvboxnet1{systemwlan1'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/radio#\x00'}}, {@dont_measure='dont_measure'}]}}) io_destroy(0x0) close(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40000, 0x8f81288dc90245ae) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xffffffffffff5c71) getegid() r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0xe, 0x80000) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000680)={0x0, @sco={0x1f, {0x3, 0x45, 0x2, 0x9f, 0x3, 0x8}}, @vsock={0x28, 0x0, 0x7b0463e2742364e0, @host}, @sco={0x1f, {0xaf, 0x3f, 0x0, 0x6, 0x80, 0x2}}, 0x7, 0x0, 0x0, 0x0, 0x48e, &(0x7f0000000640)='bridge0\x00', 0x200, 0xff, 0x6}) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000700)={0xffff, {{0x2, 0x4e23, @loopback}}}, 0x88) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/autofs\x00', 0x4004, 0x0) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f0000000800)={0x5, 0xffffffffffffffe1, 0x10001, 0x0, 0x401}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000840)='/proc/capi/capi20ncci\x00', 0x400, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000880)={0x2f, 0x4, 0x0, {0x5, 0x8, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.type\x00', 0x2, 0x0) write$binfmt_aout(r8, &(0x7f0000000900)={{0x10b, 0x3, 0x6, 0x32f, 0xea, 0x79b, 0x30e, 0x4}, "89752a2cfd11f78a3ec05bb11fba0c23c101f3d3de4e855bbda9b25ded617b78b2089935a798910b11f72e21b983b6c0c784b3288518d9afd09c59e9576a1e56ff58d4fbd5ecfa390318dc6381477475ab71de67e6bca5403c25b4ecc80359cf5eb530822ac5780ad08c6302bc5e09e2aad185613c4c3fdd8937ddc5634b3e67fd0b5c215699617c139538cba769a82576df2cf390cb74cef48b145996a7cb1923abc768dfeb9bac532ac1726d4e888e62bf8f0cb2743481d47894a909d2a6a2c2556f860a6cfdcb3ef8145061dafaaa4f40ef29ee2944d82624b0", [[], [], []]}, 0x3fb) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000d00)=0x7, 0x4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000d40)=0x80, 0x4) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x3) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x6) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000e00)={0x2, 0x0, @remote}, &(0x7f0000000e40)=0x10, 0x80400) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000e80)={'broute\x00'}, &(0x7f0000000f00)=0x78) r10 = openat$cgroup_ro(r7, &(0x7f0000000f40)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000f80)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @mcast2, 0x9b02}}}, &(0x7f0000001040)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r11, 0x3}, 0x8) [ 239.928039][ T9382] IPVS: ftp: loaded support on port[0] = 21 [ 239.938655][ T9380] chnl_net:caif_netlink_parms(): no params data found [ 240.064469][ T9380] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.071669][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.096947][ T9380] device bridge_slave_0 entered promiscuous mode [ 240.128044][ T9380] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.143658][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.164132][ T9380] device bridge_slave_1 entered promiscuous mode 04:43:51 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10240, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x80000000, &(0x7f0000000080)=0x4) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)) r2 = dup(r1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x202, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000180)={0x4000, 0x894d, 0x1, 0x6}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000001c0)=0xffffffffffffffee) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="47990f2628be8d6ff95ca9d5e43ec38739e141cd4c384140ffcc39f4e141eb5a89725826d8e1e2a2c2a4abe019934429e7580be42f2383d81fa6c85263b2933fc6f670f336f2ce863e3f3470909993c9be86e24ab5b7b53a69f0aa7ee6b07e3ada5233f2413b65b842c26771032d042e9dff8c546672b69575fe73d251690c946ba2d189752071c39467252a5414045e3d0148ffc8c1f6f2f19eb3c98506349c823121d61af75a", 0xa7}, {&(0x7f00000002c0)="fd2c3fc8b2a7d99ddd6c21c18ce5b3a6204d4a04142f087b3fcf016f66b4083e2fd357416732417bf8d352edbc175d", 0x2f}, {&(0x7f0000000300)="dd6b6172eb05d5690d209bc1b03b6a1935531c38a23e0c152177c48960ee353b8899102131e3a25a6e82caab2b8d28accfa584663e7d6369ddff219356721f7e6b68467401dd6fe95d44494785828269fd89c512bc8c9c0894", 0x59}], 0x3, &(0x7f00000003c0)=[{0x40, 0x84, 0x7fff, "2336754b34493e79c095c24213279de272b6c2483751e87425cc5ec06145b31bb46d80c48d9034118dcb13"}], 0x40}, 0x20008000) modify_ldt$read_default(0x2, &(0x7f0000000440)=""/195, 0xc3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00', r0}, 0x10) syz_open_dev$rtc(&(0x7f00000005c0)='/dev/rtc#\x00', 0x10000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x241000, 0x0) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/autofs\x00', 0x400, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x42008}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0001}, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000840)={0x0, 0x1, 0x6, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000880)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000008c0)=0x10) write$binfmt_aout(r2, &(0x7f0000000900)={{0x107, 0x73, 0x2, 0x35e, 0x39, 0x2, 0x188, 0x9}, "234ec5a0ff25bba4e026ccb2e85397a1a212ff54f5ae8090c684155378259c9f9cf1332100f90505f1cfe950082ee3b6c81f6960b22b0a1784905efc168acc4c80960a7e5a23afbf5b3f35faff06a4e3920fc028a26ee9dcf523be9ea83d7f716b9aab60493f51bd856af8cbf729de1446fd31bec3f9fe428a008cb564c9863cd7cf376d448455069aed8f9d0fa766628446eccf267d9325962e91e97b8b742ce89f36bc6cfdb2fb6863397dac0f4b43d1459ffade865ee0875bd007e6ac1278f32ec6bac8fd52356309d0025f561b563df60f933621dbf18f2d0b", [[], [], [], [], [], [], []]}, 0x7fb) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002280)='/proc/capi/capi20ncci\x00', 0x80820, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f00000022c0)={0x1, @local, 0x4e21, 0x3, 'lc\x00', 0x10, 0x8, 0x1f}, 0x2c) r10 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000002300)=""/88) r11 = openat(r3, &(0x7f0000002380)='./file0\x00', 0x2000, 0x49) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000023c0)={0x2, 0x0, 0x104005, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000002400)='/dev/full\x00', 0x400000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r12, 0x5411, &(0x7f0000002440)) [ 240.203821][ T9380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.239443][ T9385] IPVS: ftp: loaded support on port[0] = 21 [ 240.247945][ T9380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.376426][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 240.398815][ T9380] team0: Port device team_slave_0 added [ 240.414447][ T9380] team0: Port device team_slave_1 added [ 240.489977][ T9388] IPVS: ftp: loaded support on port[0] = 21 04:43:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x5a, @empty, 0x8}, @in6={0xa, 0x4e20, 0x3, @local, 0x2}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x9, @local, 0xee06}}, [0x5, 0x9, 0x5, 0xc40e, 0x9, 0x0, 0x10000, 0xfffffffffffffe69, 0x1, 0x3, 0xfffffffffffffffa, 0x94, 0x1, 0x102000000, 0x1]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r1, 0x8, 0x2, 0x6, 0x2c6a, 0x3, 0x5, 0x8, {r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="a916f112890dbd5a76b42308ac435867", 0x2}}, 0x800, 0x5, 0x8, 0x54d, 0x4237c0f4}}, &(0x7f0000000380)=0xb0) io_setup(0x2, &(0x7f00000003c0)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x5f, 0x44000) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000640)={0x0, 0x5, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0xa2090c, 0xfff, [], @ptr=0x6}}) r7 = eventfd2(0xb53a, 0x80001) io_submit(r3, 0x5, &(0x7f0000000a40)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000400)="495ac67eaac7aaf6ea6abe4730fd1863e379ab0126e261c8fc70eeedc3866cd1a818d777668afa3525543c62fb454442faab59be67edd6d3849ad589404cfa10eb4d765db31ecd7999cab409814d0475069a36a411c241c34a4b7cc6e53e117e5134a29d4d2b54cf995d483f9cd25b2a9eea9fee5985beac02ea48", 0x7b, 0x0, 0x0, 0x3, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f0000000500)="71ab71ebe0b33eb98621f472b4e65b93c5627beb02c53f7aad08f570d9e728f538501e4b200fc1d0b815a67612f6fd07d3c59f7d241ead409884cb1d8ffa39590dd5053d3d3e0af8b7b9bb7d8345af061b0ecdd1f216916ec9d61d326fcdd5d383c7f21a284029a8e35a5fd3f9ee98fe7d875fb4059460d5129265cf921d3087b3206885a431089c790bf713d7a7c9dec04c4615baae5907c49c9de37cf77960c6f30b0d77da552363b0e767f531f0f7ab63932e58f0c5c35e1b0e4d04a2fd1540e02bffc04291b9dbbfb7b05fcb7a01f78c", 0xd2, 0x9, 0x0, 0x2, r6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x1ff, r7, &(0x7f00000006c0)="aa4e8beb3328a65004b87d0b36adbd520bf1783b7c50adda204cf17814d106a6a6659374573813d8684386151e3db1213d828525a63d197187483bef3d9de30cc25d2f627f5039b7109328f9063b6805b1f98e3d4674104dbde4e20cf47120c6b0584e2f879328764ddc6b7de652c7771ed4449d7bbfe4f16f54683d5800eb0da6d1d1b47921f4c4c777a704f2eba5bfe30abef28fc09cacb1d31797b9f743d6f4dd049c", 0xa4, 0x10000}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)="0078c5f33485140a2e876e45f9aa7d1584ea9130a50d35d7dc7c1eb30a447d747ede76c7c23d6c126d96aa0849907bb400af4f604df04dbcd9e45252b2ee517b58302a29bd938381c5512c384686ff261294e00e88e98bf269728c1d7640a9020deefb1ec601002f319af3fb195b4bef071d9b8ec46b08c590cc45a6921769ad1bde8e37bca758fcc0f5b28983d5532d6a5215d83435b2d5399fc0342341f3c896534a158afb22ec04ac2bdc43339dfd35a3a1f54740f2fcebaf29e5a98da11970ff87d60b979492e63c", 0xca, 0x5, 0x0, 0x3, r0}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000900)="8e508a44e36285d810f927f26e6672efdc0d3bd8de29fb6be88e422975c1acdb59218d75dacd8ca27c93fe4d7a2bc4cbbd30654fc691b83cd6646910f876766b12a5c33f4198ac6d216279b2363a0563629cdc2b549e33b8af0cc8e548f346efa8a3911df92dca878c6adf44057a32bb9c0fbc29bae6c8ae373ea380eca779869aa039803e547a37808b85662ca1c59dc5441528103ee82ce7d1176dc6159fde967fee08cb5da7995dd80ec0875510a31a90b240e883f7f1cb259b7c7019442d6b62", 0xc2, 0xfffffffffffffffa, 0x0, 0x1}]) r8 = syz_open_dev$vcsa(&(0x7f0000000a80)='/dev/vcsa#\x00', 0x200, 0x20000) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r9 = semget(0x3, 0x3, 0x211) semctl$GETPID(r9, 0x1, 0xb, &(0x7f0000000b40)=""/180) socket$pptp(0x18, 0x1, 0x2) r10 = syz_open_dev$mice(&(0x7f0000000c00)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000c40)=[@mss, @sack_perm], 0x2) sched_getscheduler(0x0) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000cc0)={0x10001, 0x32315659, 0x3, @stepwise={0x6, 0x7, 0x401, 0x9, 0x5, 0x4}}) r12 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/watch_queue\x00', 0x80, 0x0) watch_devices(r12, 0x4d, 0x0) r13 = msgget$private(0x0, 0x22) msgctl$MSG_INFO(r13, 0xc, &(0x7f0000000d40)=""/213) pipe2(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85800) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r14, 0x84, 0x21, &(0x7f0000000e80)=0x1, 0x4) write$P9_RSTAT(r11, &(0x7f0000000ec0)={0x72, 0x7d, 0x1, {0x0, 0x6b, 0x7, 0x2, {0x2, 0x3, 0x4}, 0xc2000000, 0xa880, 0x0, 0x2, 0xb, '/dev/vcsa#\x00', 0xf, '/dev/sequencer\x00', 0x1, '#', 0x1d, '\\keyring*nodevvboxnet1\'ppp1!}'}}, 0x72) r15 = syz_open_dev$audion(&(0x7f0000000f40)='/dev/audio#\x00', 0x2, 0x4000) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r15, 0x0) r16 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/vcsa\x00', 0x25440, 0x0) ioctl$VHOST_SET_OWNER(r16, 0xaf01, 0x0) [ 240.545559][ T9380] device hsr_slave_0 entered promiscuous mode [ 240.593940][ T9380] device hsr_slave_1 entered promiscuous mode [ 240.676327][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.683402][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.704669][ T9382] device bridge_slave_0 entered promiscuous mode [ 240.789016][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.798963][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.807340][ T9382] device bridge_slave_1 entered promiscuous mode [ 240.865025][ T9382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.892484][ T9385] chnl_net:caif_netlink_parms(): no params data found 04:43:52 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x1, 0x9, 0x4, 0x40000000, 0x9, {}, {0x5, 0x2, 0x3, 0x1f, 0x4, 0x24, "a25c2086"}, 0xf5e, 0x3, @planes=&(0x7f0000000000)={0x5, 0x6, @fd, 0x9}, 0x401, 0x0, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/85, 0x55, 0x4, 0xffff, 0x2, 0x2, 0x40}}, 0x120) read$usbfs(r0, &(0x7f0000000280)=""/119, 0x77) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid\x00') write$binfmt_misc(r1, &(0x7f0000000340)={'syz1', "864d099f9f935a45f61b9cd020619c057e0e1021d4d3729b2289fafca540d24ef32e8493b9e186bf877d08bb3c6a51e022b96044489d00037801ae6b0e90b035cdd0004b9251d315d3f98735c47d757ce02359cd6fc97c390b332adfddb407e47b1d23acfd5eb2604af96297"}, 0x70) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000003c0)=0x9) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x800, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000480)=r4, 0x1) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f00000004c0)=0x5) r5 = gettid() r6 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x0, 0x20043) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x80000000, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000600)={0x1, 0x3, 0x1ff, 0x37}, &(0x7f0000000640)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=0x8}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r5, r6, 0x0, 0x2, &(0x7f0000000540)=',\x00', r7}, 0x30) add_key(&(0x7f0000000800)='id_legacy\x00', &(0x7f0000000840)={'syz', 0x0}, &(0x7f0000000880)="97cd14eadd328c97eeed50acefd0a001c0140d8ef5edae9bf8ee10dae6d2e3d6343f79aef7e6e9d2edea21080cd783c8cf7665fc014910f84f5350d566d04cc90b3f83344c2331b0843600a7a2391a3cac0c2b56d46e25bffd50f3606f85dbc74b5c11c6072bef957e52a7f366a65980a933f92c10aab5e4e983cf32eae2685ea00e5a2f2820380bea5f5ca9a0e8d8449c7afc5eb3d51b4b6aac914d1692a9248c586de8bb1f8267d03d0122fe96828f5547a219db0f6359f40b8c061aa63f2a96ba4b", 0xc3, 0xfffffffffffffffe) prctl$PR_GET_DUMPABLE(0x3) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000980)=@int=0xfc5, 0x4) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f00000009c0)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a00)='cgroup.subtree_control\x00', 0x2, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f0000000a80)=""/238) r9 = fanotify_init(0x62, 0x8000) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000000b80)) r10 = creat(&(0x7f0000000c80)='./file0\x00', 0x61) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000cc0)={0x81, 0x200, 0xbfb, 0x8001, 0x0}, &(0x7f0000000d00)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000d40)={r11, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x4, 0x7, 0x2, 0x2, 0x13, 0xb88, 0x1}, &(0x7f0000000e00)=0x9c) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000e40)=0x6, &(0x7f0000000e80)=0x2) r12 = syz_open_procfs(r5, &(0x7f0000000ec0)='net/icmp\x00') ioctl$KVM_GET_REGS(r12, 0x8090ae81, &(0x7f0000000f00)) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r13, 0x545c, 0x0) [ 240.909161][ T9382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.947833][ T9392] IPVS: ftp: loaded support on port[0] = 21 [ 240.960065][ T9380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.030596][ T9380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.106350][ T9380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.149230][ T9380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.212694][ T9382] team0: Port device team_slave_0 added [ 241.222538][ T9382] team0: Port device team_slave_1 added [ 241.251639][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.259072][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.267015][ T9385] device bridge_slave_0 entered promiscuous mode [ 241.289912][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.297197][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.305209][ T9385] device bridge_slave_1 entered promiscuous mode [ 241.331658][ T9394] IPVS: ftp: loaded support on port[0] = 21 [ 241.358531][ T9385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.371354][ T9385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.446860][ T9382] device hsr_slave_0 entered promiscuous mode [ 241.483933][ T9382] device hsr_slave_1 entered promiscuous mode [ 241.523734][ T9382] debugfs: Directory 'hsr0' with parent '/' already present! [ 241.551608][ T9385] team0: Port device team_slave_0 added [ 241.582980][ T9388] chnl_net:caif_netlink_parms(): no params data found [ 241.606375][ T9385] team0: Port device team_slave_1 added [ 241.726977][ T9385] device hsr_slave_0 entered promiscuous mode [ 241.765784][ T9385] device hsr_slave_1 entered promiscuous mode [ 241.803636][ T9385] debugfs: Directory 'hsr0' with parent '/' already present! [ 241.826742][ T9388] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.838171][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.846029][ T9388] device bridge_slave_0 entered promiscuous mode [ 241.856245][ T9388] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.863291][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.871482][ T9388] device bridge_slave_1 entered promiscuous mode [ 241.893609][ T9388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.905093][ T9388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.915014][ T9382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.990474][ T9382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.061556][ T9382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.131093][ T9382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.194301][ T9388] team0: Port device team_slave_0 added [ 242.256592][ T9388] team0: Port device team_slave_1 added [ 242.291544][ T9392] chnl_net:caif_netlink_parms(): no params data found [ 242.300462][ T9385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.345515][ T9385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.435297][ T9385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.476660][ T9385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.553470][ T9380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.626777][ T9388] device hsr_slave_0 entered promiscuous mode [ 242.665116][ T9388] device hsr_slave_1 entered promiscuous mode [ 242.703687][ T9388] debugfs: Directory 'hsr0' with parent '/' already present! [ 242.745961][ T9394] chnl_net:caif_netlink_parms(): no params data found [ 242.770593][ T9392] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.778221][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.786393][ T9392] device bridge_slave_0 entered promiscuous mode [ 242.800447][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.809197][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.820700][ T9380] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.843068][ T9392] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.850867][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.859263][ T9392] device bridge_slave_1 entered promiscuous mode [ 242.870242][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.879526][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.888187][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.895408][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.904952][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.913496][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.922002][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.929091][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.937169][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.973095][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.984261][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.992730][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.001414][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.022789][ T9392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.047725][ T9392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.057481][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.066043][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.074700][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.082944][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.091461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.145429][ T9388] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.176233][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.184895][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.203089][ T9380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.230763][ T9388] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.269859][ T9388] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.337364][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.344591][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.352238][ T9394] device bridge_slave_0 entered promiscuous mode [ 243.365313][ T9392] team0: Port device team_slave_0 added [ 243.371378][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.379598][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.387503][ T9394] device bridge_slave_1 entered promiscuous mode [ 243.398676][ T9382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.407876][ T9388] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.461941][ T9392] team0: Port device team_slave_1 added [ 243.502733][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.511840][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.522757][ T9382] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.549824][ T9394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.561440][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.574408][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.583030][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.596073][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.603121][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.676978][ T9392] device hsr_slave_0 entered promiscuous mode [ 243.724071][ T9392] device hsr_slave_1 entered promiscuous mode [ 243.774171][ T9392] debugfs: Directory 'hsr0' with parent '/' already present! [ 243.783163][ T9394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.816248][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.826527][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.834361][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.851560][ T9394] team0: Port device team_slave_0 added [ 243.860521][ T9394] team0: Port device team_slave_1 added [ 243.875947][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.884648][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.892919][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.900030][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.909064][ T9380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.929232][ T9385] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.952683][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.961273][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.969587][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.978404][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.987812][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.994911][ T9390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.002741][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.011561][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.020000][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.027104][ T9390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.034833][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.096947][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.107746][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.116650][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.159237][ T9394] device hsr_slave_0 entered promiscuous mode [ 244.224052][ T9394] device hsr_slave_1 entered promiscuous mode [ 244.263666][ T9394] debugfs: Directory 'hsr0' with parent '/' already present! [ 244.308975][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.319131][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.329614][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.338913][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.348223][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.357228][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.366361][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.389870][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.404993][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.420196][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.433013][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.470159][ T9382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.496919][ T9382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.522824][ T9385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.539529][ T9402] overlayfs: unrecognized mount option "seclabel" or missing value [ 244.547903][ T9385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 04:43:56 executing program 0: [ 244.571290][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.581514][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.592459][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.604406][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.612875][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.622684][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.632108][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.640978][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.653770][ T9392] netdevsim netdevsim4 netdevsim0: renamed from eth0 04:43:56 executing program 0: 04:43:56 executing program 0: [ 244.696831][ T9392] netdevsim netdevsim4 netdevsim1: renamed from eth1 04:43:56 executing program 0: [ 244.753845][ T9392] netdevsim netdevsim4 netdevsim2: renamed from eth2 04:43:56 executing program 0: [ 244.809747][ T9392] netdevsim netdevsim4 netdevsim3: renamed from eth3 04:43:56 executing program 0: [ 244.907745][ T9388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.917122][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:43:56 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setuid(r1) fanotify_init(0x16, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) [ 245.014087][ T9394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.075559][ T9394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.130080][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.138279][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.154123][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.161824][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.181307][ T9382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.192840][ T9388] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.201455][ T9394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 245.238796][ T9385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.253800][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.261301][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.282810][ T9394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 245.333454][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.343283][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.352023][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.359119][ T9399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.367741][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.398045][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.408657][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.417440][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.424508][ T9399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.434424][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.471590][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.519750][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.534853][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.543427][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.589130][ T9430] mmap: syz-executor.1 (9430) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 245.595232][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.616867][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.628961][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 04:43:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b0b, &(0x7f00000000c0)='wlan1\x00\xa2\xb8y\xe1\x04\xbe\x00\x00\t\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x02\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000000)=0xfff) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000380)) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(r5, 0x10, &(0x7f0000000580)) r6 = socket(0xa, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r8 = gettid() waitid(0x83b895581628fca4, r8, &(0x7f0000000040), 0x0, &(0x7f0000000480)) sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r7]], 0x8}}, 0x20004850) memfd_create(&(0x7f0000000280)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x9a0efa2b65aacb27) r9 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f0000000180)}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r9, 0x227d, &(0x7f0000000780)) kcmp(0x0, r8, 0x0, 0xffffffffffffffff, r9) r10 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r10, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r8, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r11}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r11}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r11}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r11}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r11}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r11}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r4, r3, 0x0, 0x0, 0x0, r11}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r2, 0x0, 0x5, &(0x7f0000000100)='vfat\x00', r11}, 0x30) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x1, r12}) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x11c6061, 0x0) [ 245.699873][ T9388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.720477][ T9388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:43:57 executing program 0: ptrace(0x11, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x5197) [ 245.748147][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.760037][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.782839][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.921737][ T9447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.946893][ T9447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.956256][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 245.957395][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 245.986139][ T9447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.020202][ C0] hrtimer: interrupt took 52262 ns [ 246.026122][ T9447] device bridge_slave_0 left promiscuous mode [ 246.046782][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.220209][ T9447] device bridge_slave_1 left promiscuous mode [ 246.228278][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.362782][ T9447] bond0: (slave bond_slave_0): Releasing backup interface [ 246.706131][ T9447] bond0: (slave bond_slave_1): Releasing backup interface [ 246.990214][ T9447] team0: Port device team_slave_0 removed [ 247.172557][ T9447] team0: Port device team_slave_1 removed [ 247.292881][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.301833][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.309731][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.329609][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.388056][ T9388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.427577][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.435852][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.443330][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.451794][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.464278][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.472841][ T9392] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.499769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.508981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.517087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.526283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.534999][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.542043][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.550254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.569427][ T9394] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.592647][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.609373][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.622948][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.630119][ T9390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.663860][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.673231][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.683275][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.695134][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.703470][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.711008][ T9459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.718938][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.728337][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.738534][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.746548][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.754870][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.764055][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.772511][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.779728][ T9459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.796273][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.805477][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.813623][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 247.814357][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.819595][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 247.846027][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.854713][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.863429][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.875001][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.883218][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.893784][ T9392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.918013][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.927321][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.936060][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.945736][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.954618][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.962922][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.972075][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.982718][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.992440][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 04:43:59 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x5, @empty, 0x5}, @in6={0xa, 0x4e20, 0x7fff, @ipv4={[], [], @broadcast}, 0x3}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}], 0x64) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0xffffff19) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000), 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x3d, 0x4, 0x7}, 0xc) r6 = creat(&(0x7f0000000080)='./file0\x00', 0xc0) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f0000000000), 0x4) [ 248.016070][ T9394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.058483][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.067593][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.083349][ T9392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.130528][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.157629][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.175796][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.464399][ T9486] ------------[ cut here ]------------ [ 248.470050][ T9486] refcount_t: underflow; use-after-free. [ 248.477896][ T9486] WARNING: CPU: 0 PID: 9486 at lib/refcount.c:28 refcount_warn_saturate+0x1dc/0x1f0 [ 248.487269][ T9486] Kernel panic - not syncing: panic_on_warn set ... [ 248.493855][ T9486] CPU: 0 PID: 9486 Comm: syz-executor.4 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 248.503634][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.513735][ T9486] Call Trace: [ 248.517052][ T9486] dump_stack+0x197/0x210 [ 248.521374][ T9486] ? refcount_warn_saturate+0x190/0x1f0 [ 248.526997][ T9486] panic+0x2e3/0x75c [ 248.530932][ T9486] ? add_taint.cold+0x16/0x16 [ 248.535702][ T9486] ? __kasan_check_write+0x14/0x20 [ 248.540809][ T9486] ? __warn.cold+0x14/0x3e [ 248.545205][ T9486] ? __warn+0xd9/0x1cf [ 248.549260][ T9486] ? refcount_warn_saturate+0x1dc/0x1f0 [ 248.554982][ T9486] __warn.cold+0x2f/0x3e [ 248.559208][ T9486] ? refcount_warn_saturate+0x1dc/0x1f0 [ 248.564734][ T9486] report_bug+0x289/0x300 [ 248.569132][ T9486] do_error_trap+0x11b/0x200 [ 248.573706][ T9486] do_invalid_op+0x37/0x50 [ 248.578107][ T9486] ? refcount_warn_saturate+0x1dc/0x1f0 [ 248.583665][ T9486] invalid_op+0x23/0x30 [ 248.587805][ T9486] RIP: 0010:refcount_warn_saturate+0x1dc/0x1f0 [ 248.593972][ T9486] Code: e9 d8 fe ff ff 48 89 df e8 81 7f 22 fe e9 85 fe ff ff e8 57 94 e4 fd 48 c7 c7 40 db 6f 88 c6 05 b6 1e ec 06 01 e8 73 1a b5 fd <0f> 0b e9 ac fe ff ff 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 [ 248.613558][ T9486] RSP: 0018:ffffc90001717d40 EFLAGS: 00010282 [ 248.619607][ T9486] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 248.627587][ T9486] RDX: 0000000000000000 RSI: ffffffff815e9f66 RDI: fffff520002e2f9a [ 248.635576][ T9486] RBP: ffffc90001717d50 R08: ffff888051fc0300 R09: ffffed1015d06659 [ 248.643561][ T9486] R10: ffffed1015d06658 R11: ffff8880ae8332c7 R12: 0000000000000003 [ 248.651515][ T9486] R13: ffff888098019c58 R14: ffff888098019c00 R15: ffffffff8a025680 [ 248.659576][ T9486] ? vprintk_func+0x86/0x189 [ 248.664192][ T9486] put_watch+0xa2/0xb0 [ 248.668257][ T9486] watch_queue_release+0x34b/0xc40 [ 248.673411][ T9486] __fput+0x2ff/0x890 [ 248.677383][ T9486] ? __post_watch_notification+0x840/0x840 [ 248.683262][ T9486] ____fput+0x16/0x20 [ 248.687290][ T9486] task_work_run+0x145/0x1c0 [ 248.691922][ T9486] exit_to_usermode_loop+0x316/0x380 [ 248.697209][ T9486] do_syscall_64+0x676/0x790 [ 248.701801][ T9486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.707684][ T9486] RIP: 0033:0x4144b1 [ 248.711559][ T9486] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 248.731263][ T9486] RSP: 002b:00007ffe20d13830 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 248.739935][ T9486] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00000000004144b1 [ 248.747896][ T9486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 248.755868][ T9486] RBP: 0000000000000001 R08: 00000000177afe4d R09: 00000000177afe51 [ 248.763834][ T9486] R10: 00007ffe20d13910 R11: 0000000000000293 R12: 000000000075bf20 [ 248.771816][ T9486] R13: 000000000003ca3b R14: 0000000000763708 R15: 000000000075bf2c [ 248.781394][ T9486] Kernel Offset: disabled [ 248.785793][ T9486] Rebooting in 86400 seconds..