Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts. 2019/10/10 10:00:35 fuzzer started 2019/10/10 10:00:36 dialing manager at 10.128.0.105:34287 2019/10/10 10:00:36 syscalls: 2523 2019/10/10 10:00:36 code coverage: enabled 2019/10/10 10:00:36 comparison tracing: enabled 2019/10/10 10:00:36 extra coverage: extra coverage is not supported by the kernel 2019/10/10 10:00:36 setuid sandbox: enabled 2019/10/10 10:00:36 namespace sandbox: enabled 2019/10/10 10:00:36 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/10 10:00:36 fault injection: enabled 2019/10/10 10:00:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/10 10:00:36 net packet injection: enabled 2019/10/10 10:00:36 net device setup: enabled 2019/10/10 10:00:36 concurrency sanitizer: enabled 10:00:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) syzkaller login: [ 59.533264][ T7341] IPVS: ftp: loaded support on port[0] = 21 10:00:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0xfdd91) clone(0x2000000002840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xd489, 0x4) rt_sigqueueinfo(r1, 0x1f, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 59.622342][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 59.699069][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.720839][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.739591][ T7341] device bridge_slave_0 entered promiscuous mode [ 59.751375][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.758586][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.781273][ T7341] device bridge_slave_1 entered promiscuous mode [ 59.824184][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.852816][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:00:40 executing program 2: syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@integrity='integrity'}], [{@subj_type={'subj_type', 0x3d, '/dev/video37\x00'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 59.896556][ T7341] team0: Port device team_slave_0 added [ 59.910882][ T7341] team0: Port device team_slave_1 added [ 60.002804][ T7341] device hsr_slave_0 entered promiscuous mode [ 60.049883][ T7341] device hsr_slave_1 entered promiscuous mode [ 60.097837][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.104980][ T7341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.112431][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.119514][ T7341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.178521][ T7345] IPVS: ftp: loaded support on port[0] = 21 10:00:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 60.261840][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.288509][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.298054][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.317793][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.340304][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.367678][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.372987][ T7347] IPVS: ftp: loaded support on port[0] = 21 [ 60.412713][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.422254][ T2420] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.429308][ T2420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.438402][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.447452][ T2420] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.454630][ T2420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.520492][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.568390][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.581041][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.590177][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.599060][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.611676][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.653096][ T7345] chnl_net:caif_netlink_parms(): no params data found [ 60.685458][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 10:00:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) [ 60.801957][ T7351] IPVS: ftp: loaded support on port[0] = 21 [ 60.817053][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 60.834077][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.851072][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.864149][ T7345] device bridge_slave_0 entered promiscuous mode [ 60.905908][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.915100][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.924187][ T7345] device bridge_slave_1 entered promiscuous mode [ 61.036238][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.082275][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.090067][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.102571][ T7347] device bridge_slave_0 entered promiscuous mode [ 61.118444][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.138715][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.147116][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.157607][ T7347] device bridge_slave_1 entered promiscuous mode 10:00:41 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) [ 61.236746][ T7345] team0: Port device team_slave_0 added [ 61.251145][ T7345] team0: Port device team_slave_1 added [ 61.258982][ T7364] IPVS: ftp: loaded support on port[0] = 21 10:00:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) [ 61.293349][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 10:00:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) 10:00:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) [ 61.393875][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.478085][ T7345] device hsr_slave_0 entered promiscuous mode 10:00:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) [ 61.519986][ T7345] device hsr_slave_1 entered promiscuous mode [ 61.552019][ T7345] debugfs: Directory 'hsr0' with parent '/' already present! 10:00:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) [ 61.632659][ T7347] team0: Port device team_slave_0 added [ 61.641485][ T7351] chnl_net:caif_netlink_parms(): no params data found [ 61.684515][ T7347] team0: Port device team_slave_1 added 10:00:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) [ 61.864293][ T7345] 8021q: adding VLAN 0 to HW filter on device bond0 10:00:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) [ 61.935896][ T7347] device hsr_slave_0 entered promiscuous mode [ 61.972611][ T7347] device hsr_slave_1 entered promiscuous mode [ 62.029650][ T7347] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.037682][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.045287][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.053531][ T7351] device bridge_slave_0 entered promiscuous mode [ 62.067414][ T7345] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.090706][ T7388] IPVS: ftp: loaded support on port[0] = 21 [ 62.098172][ T7364] chnl_net:caif_netlink_parms(): no params data found [ 62.109366][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.117278][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.125244][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.133451][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.141592][ T7351] device bridge_slave_1 entered promiscuous mode [ 62.170058][ T7351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.180843][ T7351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.205401][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.214235][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.223260][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.230360][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.238239][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.246911][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.255372][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.262413][ T7395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.270523][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.280036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.305526][ T7351] team0: Port device team_slave_0 added [ 62.317001][ T7351] team0: Port device team_slave_1 added [ 62.339907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.382181][ T7351] device hsr_slave_0 entered promiscuous mode [ 62.429888][ T7351] device hsr_slave_1 entered promiscuous mode [ 62.489826][ T7351] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.512778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.521614][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.530821][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.562089][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.569230][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.580212][ T7364] device bridge_slave_0 entered promiscuous mode [ 62.587436][ T1788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.596735][ T1788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.627407][ T7345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.638423][ T7345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.650555][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.657694][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.666029][ T7364] device bridge_slave_1 entered promiscuous mode [ 62.683830][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.692337][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.701834][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.710319][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.718742][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.746961][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.758091][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.782888][ T7345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.818650][ T7347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.838796][ T7364] team0: Port device team_slave_0 added [ 62.850062][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.885750][ T7364] team0: Port device team_slave_1 added [ 62.898167][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.913295][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.921473][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.929278][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.937536][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.946569][ T7347] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.022998][ T7364] device hsr_slave_0 entered promiscuous mode [ 63.069891][ T7364] device hsr_slave_1 entered promiscuous mode [ 63.159656][ T7364] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.172136][ T7388] chnl_net:caif_netlink_parms(): no params data found [ 63.211278][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.220372][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.242086][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.249194][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 10:00:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0xfdd91) clone(0x2000000002840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xd489, 0x4) rt_sigqueueinfo(r1, 0x1f, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 63.262470][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.273554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.284838][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.291944][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.304889][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.314205][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.327323][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.334404][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.394613][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.419328][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.427910][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.440435][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.449231][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.456442][ T7348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.465349][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.505928][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.519602][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.527657][ T7388] device bridge_slave_0 entered promiscuous mode [ 63.550268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.559439][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.568808][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.577461][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.586639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.595720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.604549][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.613615][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.622107][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.630553][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.638842][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.647428][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.661413][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.672483][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.681677][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.688797][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.697238][ T7388] device bridge_slave_1 entered promiscuous mode [ 63.705368][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.717620][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.747662][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.756567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.772346][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.784130][ T7364] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.793595][ T7388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.805426][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.814104][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.822715][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.831467][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.841686][ T7347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.852700][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.867394][ T7388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.877245][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.885690][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.894162][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.902753][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.911277][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.918304][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.926671][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.936337][ T7351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.959372][ T7347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.977705][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.990528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.998988][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.006072][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.024202][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.042602][ T7388] team0: Port device team_slave_0 added [ 64.056015][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.067418][ T7388] team0: Port device team_slave_1 added [ 64.096816][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.111024][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.131078][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.142056][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.159083][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.170998][ T7422] jfs: Unrecognized mount option "subj_type=/dev/video37" or missing value [ 64.184696][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.193441][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.205098][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.215910][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.227945][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.257075][ T7422] jfs: Unrecognized mount option "subj_type=/dev/video37" or missing value [ 64.313847][ T7388] device hsr_slave_0 entered promiscuous mode 10:00:45 executing program 2: syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@integrity='integrity'}], [{@subj_type={'subj_type', 0x3d, '/dev/video37\x00'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 64.370425][ T7388] device hsr_slave_1 entered promiscuous mode [ 64.409862][ T7388] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.435073][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0 10:00:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 64.478367][ T7438] jfs: Unrecognized mount option "subj_type=/dev/video37" or missing value [ 64.504385][ T7388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.529122][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 64.548760][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.557598][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.574596][ T7388] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.640833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.656665][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.678861][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.685996][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.746694][ T1788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.755419][ T1788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.769897][ T1788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.778568][ T1788] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.785663][ T1788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.811111][ T1788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.825741][ T1788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.835199][ T1788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.846298][ T7388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.857577][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.881964][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.919281][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.935426][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.957438][ T7388] 8021q: adding VLAN 0 to HW filter on device batadv0 10:00:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) 10:00:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0xfdd91) clone(0x2000000002840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xd489, 0x4) rt_sigqueueinfo(r1, 0x1f, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 10:00:45 executing program 2: syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@integrity='integrity'}], [{@subj_type={'subj_type', 0x3d, '/dev/video37\x00'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 65.159915][ T7469] jfs: Unrecognized mount option "subj_type=/dev/video37" or missing value 10:00:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) 10:00:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 10:00:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) 10:00:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 10:00:46 executing program 2: syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@integrity='integrity'}], [{@subj_type={'subj_type', 0x3d, '/dev/video37\x00'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:00:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) 10:00:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) [ 65.705552][ T7496] jfs: Unrecognized mount option "subj_type=/dev/video37" or missing value 10:00:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0xfdd91) clone(0x2000000002840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xd489, 0x4) rt_sigqueueinfo(r1, 0x1f, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 10:00:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 10:00:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 10:00:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 10:00:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 10:00:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0xfdd91) clone(0x2000000002840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xd489, 0x4) rt_sigqueueinfo(r1, 0x1f, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 10:00:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 10:00:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 10:00:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0xfdd91) clone(0x2000000002840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xd489, 0x4) rt_sigqueueinfo(r1, 0x1f, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 10:00:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="cc", &(0x7f00000000c0)=""/111}, 0x18) 10:00:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x101) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/148, 0x94}], 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x400000000080803, 0x0) write(r4, &(0x7f0000000080)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24) r5 = socket(0x10, 0x400000000080803, 0x0) write(r5, &(0x7f0000000080)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24) r6 = socket(0x10, 0x400000000080803, 0x0) write(r6, &(0x7f0000000080)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r6, @ANYRES16=r0, @ANYRES64, @ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYBLOB="0f04d3e6656dfd38135a4e260c19e27bdec0a660fd2aa9d040b79dbb941b673eb83088ce6e71f011d765b3e349cae98e3d54887682482b0f0ba0a8b4ebabbda6ddf2ae2d1ecf852e9fcf35086b3d05f06ef7ecb3c86ae7d97c5d623b8c06005f909114b930175d2658a40e1b1c56f8bdd5ae1697a38b82c4c6c2065999b812de4c732215ce"], @ANYRES32, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x4080}, 0x800) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f00000003c0), r7, 0x8}}, 0x18) socket(0x10, 0x0, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r8 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) read(r8, &(0x7f0000000040)=""/87, 0x57) ioctl$int_in(r8, 0x800000c0045005, &(0x7f00000000c0)=0x2) ioctl$int_in(r8, 0x800060c004500a, &(0x7f0000000100)) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f00000004c0)={0x2, 0x5, [{0x1, 0x0, 0x8}, {0x3, 0x0, 0x8}]}) 10:00:52 executing program 0: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x8004, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x805, 0x0, 0x0, {{0x1, 0x40030000000000}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x10000) 10:00:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0x5191, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040), 0x4) flock(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x400000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x7}, 0x28, 0x0) syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x1, 0x2) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$getflags(r6, 0x401) accept4$tipc(r6, 0x0, &(0x7f0000000740), 0x800) geteuid() fcntl$getownex(r5, 0x10, 0x0) getresgid(0x0, &(0x7f00000008c0), &(0x7f0000000900)) lstat(0x0, &(0x7f0000000c00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) getresuid(&(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) getgid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r9 = getpid() sched_setattr(r9, 0x0, 0x0) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r11 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r11, 0x400, 0x0) fcntl$getflags(r11, 0x401) geteuid() fcntl$getownex(r10, 0x10, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000d00)) getresuid(&(0x7f0000001700), 0x0, &(0x7f0000001780)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) getgid() r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r12, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 10:00:52 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4(r0, 0x0, 0x0, 0x0) 10:00:52 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4(r0, 0x0, 0x0, 0x0) [ 71.719846][ C0] hrtimer: interrupt took 33772 ns 10:00:52 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4(r0, 0x0, 0x0, 0x0) [ 71.970241][ T7585] 9pnet: bogus RWRITE count (2 > 1) [ 72.389669][ T7576] ================================================================== [ 72.397801][ T7576] BUG: KCSAN: data-race in do_nanosleep / mm_update_next_owner [ 72.405320][ T7576] [ 72.407646][ T7576] write to 0xffff888129c19124 of 4 bytes by task 7351 on cpu 0: [ 72.415445][ T7576] do_nanosleep+0x126/0x330 [ 72.420021][ T7576] hrtimer_nanosleep+0x1c1/0x3e0 [ 72.424946][ T7576] __x64_sys_nanosleep+0x106/0x150 [ 72.430044][ T7576] do_syscall_64+0xcf/0x2f0 [ 72.434533][ T7576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.440403][ T7576] [ 72.442718][ T7576] read to 0xffff888129c19124 of 4 bytes by task 7576 on cpu 1: [ 72.450244][ T7576] mm_update_next_owner+0x29f/0x460 [ 72.455433][ T7576] do_exit+0x4e5/0x18e0 [ 72.459568][ T7576] do_group_exit+0xb4/0x1c0 [ 72.464055][ T7576] __x64_sys_exit_group+0x2e/0x30 [ 72.469066][ T7576] do_syscall_64+0xcf/0x2f0 [ 72.473563][ T7576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.479439][ T7576] [ 72.481744][ T7576] Reported by Kernel Concurrency Sanitizer on: [ 72.487879][ T7576] CPU: 1 PID: 7576 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 72.495311][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.507172][ T7576] ================================================================== [ 72.515218][ T7576] Kernel panic - not syncing: panic_on_warn set ... [ 72.521792][ T7576] CPU: 1 PID: 7576 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 72.529223][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.539345][ T7576] Call Trace: [ 72.542625][ T7576] dump_stack+0xf5/0x159 [ 72.546946][ T7576] panic+0x209/0x639 [ 72.550847][ T7576] ? vprintk_func+0x8d/0x140 [ 72.555425][ T7576] kcsan_report.cold+0xc/0x1b [ 72.560094][ T7576] __kcsan_setup_watchpoint+0x3ee/0x510 [ 72.565634][ T7576] __tsan_read4+0x2c/0x30 [ 72.569950][ T7576] mm_update_next_owner+0x29f/0x460 [ 72.575223][ T7576] do_exit+0x4e5/0x18e0 [ 72.579722][ T7576] ? __kcsan_setup_watchpoint+0x96/0x510 [ 72.585355][ T7576] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 72.591231][ T7576] ? __tsan_write4+0x40/0x40 [ 72.595808][ T7576] do_group_exit+0xb4/0x1c0 [ 72.600297][ T7576] __x64_sys_exit_group+0x2e/0x30 [ 72.605411][ T7576] do_syscall_64+0xcf/0x2f0 [ 72.609904][ T7576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.615776][ T7576] RIP: 0033:0x459a59 [ 72.619661][ T7576] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 72.639248][ T7576] RSP: 002b:00007ffd606969a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 72.647737][ T7576] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000459a59 [ 72.655695][ T7576] RDX: 0000000000413741 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 72.663650][ T7576] RBP: 0000000000000000 R08: ffffffffffffffff R09: 00007ffd60696a00 [ 72.671771][ T7576] R10: 0000000000762930 R11: 0000000000000246 R12: 0000000000000001 [ 72.679826][ T7576] R13: 00007ffd60696a00 R14: 0000000000000000 R15: 00007ffd60696a10 [ 73.819552][ T7576] Shutting down cpus with NMI [ 73.825945][ T7576] Kernel Offset: disabled [ 73.830351][ T7576] Rebooting in 86400 seconds..