[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   83.094867][   T27] audit: type=1800 audit(1578978013.354:25): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   83.114869][   T27] audit: type=1800 audit(1578978013.354:26): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   83.169250][   T27] audit: type=1800 audit(1578978013.354:27): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.1.16' (ECDSA) to the list of known hosts.
2020/01/14 05:00:24 fuzzer started
2020/01/14 05:00:25 dialing manager at 10.128.0.26:34807
2020/01/14 05:00:25 syscalls: 2860
2020/01/14 05:00:25 code coverage: enabled
2020/01/14 05:00:25 comparison tracing: enabled
2020/01/14 05:00:25 extra coverage: enabled
2020/01/14 05:00:25 setuid sandbox: enabled
2020/01/14 05:00:25 namespace sandbox: enabled
2020/01/14 05:00:25 Android sandbox: /sys/fs/selinux/policy does not exist
2020/01/14 05:00:25 fault injection: enabled
2020/01/14 05:00:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/01/14 05:00:25 net packet injection: enabled
2020/01/14 05:00:25 net device setup: enabled
2020/01/14 05:00:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/01/14 05:00:25 devlink PCI setup: PCI device 0000:00:10.0 is not available
05:00:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil)
socketpair(0x1e, 0x1, 0x3, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r0=>0x0, <r1=>0x0})
close(r0)
r2 = getpid()
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0xd5, 0x1ff, r2})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101)
r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0xff00)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26})
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000240))
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27)
r6 = socket(0xa, 0x3, 0x6)
connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x0, 0x6, 0x5}}, 0xa)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7ef"], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
setuid(0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
setuid(0x0)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0)
setuid(r9)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/436], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0))
setuid(0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
r11 = request_key(0x0, 0x0, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
keyctl$chown(0x4, r11, 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fstat(r12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32, @ANYBLOB="08000000cff613bb2c28de333bab462c8f84052ec1cbc6cf3f93925a584edf775f67d8125fdd88bc0fece364", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB, @ANYRES32=r13, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x17, 0x2)

05:00:26 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x24)

syzkaller login: [   96.758967][ T9849] IPVS: ftp: loaded support on port[0] = 21
05:00:27 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$amidi(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r3 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0)
write$P9_RREADLINK(r2, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r5 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000040)=@builtin='builtin_trusted\x00')
keyctl$KEYCTL_MOVE(0x1e, r5, r4, r5, 0x0)
r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r7 = add_key$keyring(&(0x7f0000001000)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, &(0x7f0000000040)=@builtin='builtin_trusted\x00')
keyctl$KEYCTL_MOVE(0x1e, r7, r6, r7, 0x0)
r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r9 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r8)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000040)=@builtin='builtin_trusted\x00')
keyctl$KEYCTL_MOVE(0x1e, r9, r8, r9, 0x0)
r10 = add_key$keyring(&(0x7f0000001000)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000040)=@builtin='builtin_trusted\x00')
r11 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r12 = add_key$keyring(&(0x7f0000001000)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000040)=@builtin='builtin_trusted\x00')
keyctl$KEYCTL_MOVE(0x1e, r12, r11, 0x0, 0x0)
r13 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r14 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r13)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r14, &(0x7f00000006c0)='asymmetric\x00', 0x0)
keyctl$KEYCTL_MOVE(0x1e, r14, r13, r14, 0x0)
r15 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r16 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r15)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r16, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000040)=@builtin='builtin_trusted\x00')
keyctl$KEYCTL_MOVE(0x1e, r16, r15, r16, 0x0)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0)
r17 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r18 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r18, &(0x7f00000006c0)='asymmetric\x00', 0x0)
keyctl$KEYCTL_MOVE(0x1e, r18, r17, 0x0, 0x0)
write$FUSE_DIRENT(r3, &(0x7f00000028c0)=ANY=[@ANYRES64=r5, @ANYRESHEX=r11, @ANYBLOB="9c97e4deb39d236be5a66344cfc2a1dbd5099f748fe63eb9c2e3c3f5f06d218b54e8fc143c72a8ce77fbe4d1b82c4a8c278c2b7ac374e0d32d0366a3638e67738c65fa3a3a350e8c67fa3556efcba4e2dc238c2e6167376c145d392a925d9a878b75e92e023558af", @ANYRESDEC=r9, @ANYPTR=&(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYPTR64], @ANYBLOB="c4a9ac6eef34e8e2b829162836d0258f114c007e979f455c9d784fd4ba847cbde08c84e2da64d13585280a8291ebe47eb14c43b3d14cda8ebf", @ANYRES16=0x0, @ANYRESHEX=r8, @ANYRESHEX], @ANYRESHEX=r10], 0xb0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r19 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0x80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r3, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100), 0x4)

[   96.953841][ T9849] chnl_net:caif_netlink_parms(): no params data found
[   96.975244][ T9852] IPVS: ftp: loaded support on port[0] = 21
[   97.081717][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.097860][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.116862][ T9849] device bridge_slave_0 entered promiscuous mode
[   97.138316][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.145493][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.148911][ T9854] IPVS: ftp: loaded support on port[0] = 21
[   97.155143][ T9849] device bridge_slave_1 entered promiscuous mode
[   97.211232][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.251934][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
05:00:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = dup(0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000dd0b0000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYBLOB], 0x5, 0x1)
gettid()
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xc0, &(0x7f00000003c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, r2}, 0x30)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = syz_open_procfs(0x0, 0x0)
ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000080))
io_setup(0x83, &(0x7f00000003c0)=<r5=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}])

[   97.299785][ T9852] chnl_net:caif_netlink_parms(): no params data found
[   97.313982][ T9849] team0: Port device team_slave_0 added
[   97.324279][ T9849] team0: Port device team_slave_1 added
[   97.460026][ T9849] device hsr_slave_0 entered promiscuous mode
[   97.517251][ T9849] device hsr_slave_1 entered promiscuous mode
[   97.584492][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.596963][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.605224][ T9852] device bridge_slave_0 entered promiscuous mode
[   97.623298][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state
05:00:27 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
semget(0x1, 0x0, 0x22a)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x7fff)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(r2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32, @ANYRES32], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)

[   97.630938][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.642227][ T9852] device bridge_slave_1 entered promiscuous mode
[   97.669571][ T9857] IPVS: ftp: loaded support on port[0] = 21
[   97.767297][ T9852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.796712][ T9854] chnl_net:caif_netlink_parms(): no params data found
[   97.831160][ T9852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.883678][ T9860] IPVS: ftp: loaded support on port[0] = 21
[   97.953063][ T9852] team0: Port device team_slave_0 added
[   97.991390][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.999687][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.012191][ T9854] device bridge_slave_0 entered promiscuous mode
[   98.021806][ T9852] team0: Port device team_slave_1 added
05:00:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x60, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x60}}, 0x0)

[   98.044560][ T9849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.102938][ T9849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.168280][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.175627][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.185916][ T9854] device bridge_slave_1 entered promiscuous mode
[   98.205766][ T9849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.250542][ T9849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.378859][ T9852] device hsr_slave_0 entered promiscuous mode
[   98.427257][ T9852] device hsr_slave_1 entered promiscuous mode
[   98.486842][ T9852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.494895][ T9852] Cannot create hsr debugfs directory
[   98.549338][ T9862] IPVS: ftp: loaded support on port[0] = 21
[   98.551066][ T9854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.568780][ T9854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.631940][ T9854] team0: Port device team_slave_0 added
[   98.655176][ T9854] team0: Port device team_slave_1 added
[   98.691985][ T9857] chnl_net:caif_netlink_parms(): no params data found
[   98.770162][ T9854] device hsr_slave_0 entered promiscuous mode
[   98.828414][ T9854] device hsr_slave_1 entered promiscuous mode
[   98.876901][ T9854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.884745][ T9854] Cannot create hsr debugfs directory
[   98.951220][ T9852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   99.029807][ T9852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   99.090281][ T9860] chnl_net:caif_netlink_parms(): no params data found
[   99.125302][ T9852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   99.193551][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.201719][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.210932][ T9857] device bridge_slave_0 entered promiscuous mode
[   99.220150][ T9852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   99.289752][ T9860] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.297387][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.305840][ T9860] device bridge_slave_0 entered promiscuous mode
[   99.318705][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.325830][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.335811][ T9857] device bridge_slave_1 entered promiscuous mode
[   99.360640][ T9860] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.368576][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.377972][ T9860] device bridge_slave_1 entered promiscuous mode
[   99.416228][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.451727][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.480225][ T9860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.518392][ T9862] chnl_net:caif_netlink_parms(): no params data found
[   99.536956][ T9860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.555635][ T9857] team0: Port device team_slave_0 added
[   99.574670][ T9857] team0: Port device team_slave_1 added
[   99.637674][ T9860] team0: Port device team_slave_0 added
[   99.651906][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.660326][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.669048][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.679599][ T9862] device bridge_slave_0 entered promiscuous mode
[   99.749562][ T9857] device hsr_slave_0 entered promiscuous mode
[   99.797213][ T9857] device hsr_slave_1 entered promiscuous mode
[   99.856793][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.864370][ T9857] Cannot create hsr debugfs directory
[   99.871894][ T9860] team0: Port device team_slave_1 added
[   99.878177][ T9854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.938552][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.945689][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.954402][ T9862] device bridge_slave_1 entered promiscuous mode
[   99.980718][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   99.989369][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   99.998455][ T9854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  100.064713][ T9849] 8021q: adding VLAN 0 to HW filter on device team0
[  100.089616][ T9862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.100646][ T9854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  100.163466][ T9854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  100.270669][ T9860] device hsr_slave_0 entered promiscuous mode
[  100.327061][ T9860] device hsr_slave_1 entered promiscuous mode
[  100.366855][ T9860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.374436][ T9860] Cannot create hsr debugfs directory
[  100.382006][ T9862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.425092][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.434073][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.443061][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.450334][ T2893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.483552][ T9862] team0: Port device team_slave_0 added
[  100.511141][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  100.519250][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.528012][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  100.536358][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.543467][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.559827][ T9862] team0: Port device team_slave_1 added
[  100.587868][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  100.668788][ T9862] device hsr_slave_0 entered promiscuous mode
[  100.707165][ T9862] device hsr_slave_1 entered promiscuous mode
[  100.756890][ T9862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.764541][ T9862] Cannot create hsr debugfs directory
[  100.783509][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  100.815922][ T9857] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.839780][ T9857] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.909968][ T9857] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  100.973831][ T9857] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  101.036578][ T9852] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.044661][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.053869][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.062763][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  101.074819][ T9860] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.145910][ T9860] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.178474][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  101.191913][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  101.200513][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.208958][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.226997][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  101.235392][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.261501][ T9860] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.309304][ T9860] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  101.354289][ T9852] 8021q: adding VLAN 0 to HW filter on device team0
[  101.374523][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  101.383583][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.394501][ T9849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  101.425650][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.438455][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.448225][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.455349][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.463659][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.472382][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.481016][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.488197][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.508861][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.566134][ T9862] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  101.620310][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.629185][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.638641][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  101.646178][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.683594][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.694573][ T9862] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  101.740414][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.749472][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.758714][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  101.767706][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  101.776094][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  101.784795][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.793873][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  101.807038][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  101.815430][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.832189][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.842790][ T9862] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  101.892860][ T9852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  101.921605][ T9862] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  101.974712][ T9854] 8021q: adding VLAN 0 to HW filter on device team0
[  101.995820][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.004597][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.017453][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  102.026064][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.089543][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.099073][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.108599][ T2888] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.115679][ T2888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.124389][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.133284][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.142485][ T2888] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.149621][ T2888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.157737][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.166424][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.174172][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.183549][ T9852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.213281][ T9849] device veth0_vlan entered promiscuous mode
[  102.220522][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.229706][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.240115][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  102.249035][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.258614][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.266368][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.285537][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.304845][ T9860] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.318818][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.330428][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.339304][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.348928][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.357802][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.377832][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.386294][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.395649][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.404110][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.414289][ T9849] device veth1_vlan entered promiscuous mode
[  102.431314][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.449039][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  102.460458][ T2890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  102.496433][ T9862] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.514768][ T9860] 8021q: adding VLAN 0 to HW filter on device team0
[  102.528220][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.536000][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.554651][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  102.565246][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.578018][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.585868][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.623020][ T9857] 8021q: adding VLAN 0 to HW filter on device team0
[  102.642593][ T9862] 8021q: adding VLAN 0 to HW filter on device team0
[  102.651859][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.661825][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.672467][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.679906][ T2893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.694152][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.703054][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.712773][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.719949][ T2893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.728385][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.736260][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.744581][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.752769][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.763428][    C0] hrtimer: interrupt took 26802 ns
[  102.799965][ T9852] device veth0_vlan entered promiscuous mode
[  102.821351][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.858775][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.887387][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.894501][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.902497][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  102.911334][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.920018][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.929526][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.938439][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.945537][ T2893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.954511][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.964933][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.979390][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.986511][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.001430][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  103.010696][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.020113][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.027305][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.036404][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.045959][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.083029][ T9854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.099912][ T9852] device veth1_vlan entered promiscuous mode
[  103.110028][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.118128][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.125801][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
05:00:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil)
socketpair(0x1e, 0x1, 0x3, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r0=>0x0, <r1=>0x0})
close(r0)
r2 = getpid()
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0xd5, 0x1ff, r2})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101)
r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0xff00)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26})
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000240))
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27)
r6 = socket(0xa, 0x3, 0x6)
connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x0, 0x6, 0x5}}, 0xa)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7ef"], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
setuid(0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
setuid(0x0)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0)
setuid(r9)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000c00)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8e300000084fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a1b410941e00000000b778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c473074de84403e8bc8279e9631f37d6317e6bde7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf8e1dc2cc67fb8ad9a24154aef4a87f5a1c33450d1141521e37cdb0bc3f65f83d60597defc888be5217838cf0200006a2f61b3ce843c1ed72d89bab3ad2694a30c9718d291fa2cb9baa999418b2f76b59cd7d64d864a4ac20b704aac98693293aa224a7c83ff19da94f0239fc14c32a5aed50820d1080a9412e9a05757334e6df9a7186f0769d222add7ce8add492682929e97e62e7f791c4e5c894f8614676824c8165e7b7d8a6536c270078923422fd6eadfef4c3005ebe797e1caece120dec760b02bd428e4821f751cd328bb46b476ca90f98fae40e34848a112f2ba5500"/436], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0))
setuid(0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
r11 = request_key(0x0, 0x0, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
keyctl$chown(0x4, r11, 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fstat(r12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32, @ANYBLOB="08000000cff613bb2c28de333bab462c8f84052ec1cbc6cf3f93925a584edf775f67d8125fdd88bc0fece364", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB, @ANYRES32=r13, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x17, 0x2)

[  103.134568][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  103.143163][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.151610][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.158145][ T9849] ------------[ cut here ]------------
[  103.164770][ T9849] kernel BUG at fs/namei.c:684!
[  103.165544][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.176219][ T9849] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  103.179460][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.184442][ T9849] CPU: 0 PID: 9849 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0
[  103.193423][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.202088][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  103.202108][ T9849] RIP: 0010:unlazy_walk+0x306/0x3b0
[  103.202121][ T9849] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89
[  103.202127][ T9849] RSP: 0018:ffffc90002537ba0 EFLAGS: 00010293
[  103.211276][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.220280][ T9849] RAX: ffff8880944c0540 RBX: ffffc90002537c60 RCX: ffffffff81c16a16
[  103.220288][ T9849] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005
[  103.220294][ T9849] RBP: ffffc90002537bd0 R08: ffff8880944c0540 R09: ffff8880944c0dd8
[  103.220301][ T9849] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009
[  103.220308][ T9849] R13: ffffc90002537c68 R14: ffff8880aa0699e0 R15: 0000000000000000
[  103.220317][ T9849] FS:  00000000021f5940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  103.220333][ T9849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.227204][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.245236][ T9849] CR2: 00000000017ac1c0 CR3: 000000007d936000 CR4: 00000000001406f0
[  103.245247][ T9849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  103.245253][ T9849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  103.245259][ T9849] Call Trace:
[  103.245287][ T9849]  path_mountpoint.isra.0+0x1d5/0x340
[  103.245307][ T9849]  filename_mountpoint+0x181/0x380
[  103.282301][ T9862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  103.283700][ T9849]  ? filename_parentat.isra.0+0x400/0x400
[  103.291707][ T9862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.299918][ T9849]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[  103.299938][ T9849]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  103.299959][ T9849]  ? strncpy_from_user+0x2b4/0x400
[  103.326360][ T9862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.331412][ T9849]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  103.331426][ T9849]  ? getname_flags+0x277/0x5b0
[  103.331447][ T9849]  user_path_mountpoint_at+0x3a/0x50
[  103.406896][ T9862] device veth0_vlan entered promiscuous mode
[  103.411754][ T9849]  ksys_umount+0x164/0xef0
[  103.424194][ T9862] device veth1_vlan entered promiscuous mode
[  103.428014][ T9849]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  103.428029][ T9849]  ? __detach_mounts+0x290/0x290
[  103.428051][ T9849]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  103.461472][ T9849]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  103.467011][ T9849]  ? do_syscall_64+0x26/0x790
[  103.471704][ T9849]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  103.477789][ T9849]  ? do_syscall_64+0x26/0x790
[  103.481022][ T9854] device veth0_vlan entered promiscuous mode
[  103.482477][ T9849]  ? lockdep_hardirqs_on+0x421/0x5e0
[  103.493725][ T9849]  __x64_sys_umount+0x54/0x80
[  103.494516][ T9854] device veth1_vlan entered promiscuous mode
[  103.498421][ T9849]  do_syscall_64+0xfa/0x790
[  103.498437][ T9849]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  103.498455][ T9849] RIP: 0033:0x45d977
[  103.518767][ T9849] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  103.538443][ T9849] RSP: 002b:00007ffe0403fc28 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[  103.546838][ T9849] RAX: ffffffffffffffda RBX: 000000000001921f RCX: 000000000045d977
[  103.555021][ T9849] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffe0403fcd0
[  103.562977][ T9849] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e
[  103.570937][ T9849] R10: 000000000000000a R11: 0000000000000206 R12: 00007ffe04040d60
[  103.579009][ T9849] R13: 00000000021f6940 R14: 0000000000000000 R15: 00007ffe04040d60
[  103.587053][ T9849] Modules linked in:
[  103.603626][ T9849] ---[ end trace d0c347a2085eca35 ]---
[  103.605889][ T9860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  103.609185][ T9849] RIP: 0010:unlazy_walk+0x306/0x3b0
[  103.624653][ T9860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.625124][ T9849] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89
[  103.642520][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  103.657824][ T9849] RSP: 0018:ffffc90002537ba0 EFLAGS: 00010293
[  103.664404][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.676758][ T9849] RAX: ffff8880944c0540 RBX: ffffc90002537c60 RCX: ffffffff81c16a16
[  103.681386][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.684863][ T9849] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005
[  103.695231][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.703690][ T9849] RBP: ffffc90002537bd0 R08: ffff8880944c0540 R09: ffff8880944c0dd8
[  103.713770][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.718610][ T9849] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009
[  103.727052][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.734428][ T9849] R13: ffffc90002537c68 R14: ffff8880aa0699e0 R15: 0000000000000000
[  103.745925][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.750655][ T9849] FS:  00000000021f5940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  103.750664][ T9849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.750671][ T9849] CR2: 00000000017ac1c0 CR3: 000000007d936000 CR4: 00000000001406f0
[  103.750682][ T9849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  103.750689][ T9849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  103.750698][ T9849] Kernel panic - not syncing: Fatal exception
[  103.751468][ T9849] Kernel Offset: disabled
[  103.810408][ T9849] Rebooting in 86400 seconds..