Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. 2019/10/16 14:43:10 fuzzer started 2019/10/16 14:43:11 dialing manager at 10.128.0.105:37551 2019/10/16 14:43:11 syscalls: 2524 2019/10/16 14:43:11 code coverage: enabled 2019/10/16 14:43:11 comparison tracing: enabled 2019/10/16 14:43:11 extra coverage: extra coverage is not supported by the kernel 2019/10/16 14:43:11 setuid sandbox: enabled 2019/10/16 14:43:11 namespace sandbox: enabled 2019/10/16 14:43:11 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/16 14:43:11 fault injection: enabled 2019/10/16 14:43:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/16 14:43:11 net packet injection: enabled 2019/10/16 14:43:11 net device setup: enabled 2019/10/16 14:43:11 concurrency sanitizer: enabled 14:43:15 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000200)={0x1b}, 0x0) gin: [ 58.937082][ T7269] IPVS: ftp: loaded support on port[0] = 21 14:43:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000474fec)={0x1, 0x800000000000003b, 0x7, 0x4}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 59.040962][ T7269] chnl_net:caif_netlink_parms(): no params data found [ 59.124861][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.145760][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.154320][ T7269] device bridge_slave_0 entered promiscuous mode [ 59.188005][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.196848][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.215762][ T7269] device bridge_slave_1 entered promiscuous mode [ 59.247008][ T7269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.258547][ T7269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.284781][ T7269] team0: Port device team_slave_0 added 14:43:15 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40042, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000300)=0xffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="aba102ca93ffdc933f46a76d96fc8d1648f50a92162d4da2539a45c2fe3918a423ac59b0a4a546103005daed3788e907a6475f6aff4483fd00022bf629d8e49fe87a3820e8d587e4117109d0de3f1db44432f28f16ab63cefb62e1d135246e2f16fc0094c94ba540791b7ffb2e7de4217bd893fb3e5b475e579f3b97d867fb4501ea48a6ca99b3ff59f3958ef406a471d05937cb3f6cb4e7b9c3413e379c852b344adad7ab53", @ANYRES16=r6], 0x2}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84730067", @ANYRES16=r6, @ANYBLOB="00042bbd7000fcdbdf25040000001c00020008000600ee08000008000b0002000000080102000008000600020000004c00010028000b007369700008000100020000000c414e54b8d4723ae900000008000500010000000800060010000000080009001a00000008000500020000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 59.292710][ T7269] team0: Port device team_slave_1 added [ 59.315947][ T7272] IPVS: ftp: loaded support on port[0] = 21 [ 59.390258][ T7269] device hsr_slave_0 entered promiscuous mode [ 59.506145][ T7269] device hsr_slave_1 entered promiscuous mode 14:43:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xe7ffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x10000, &(0x7f0000000340)=""/4096) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) syz_genetlink_get_family_id$ipvs(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000007c0), 0xc, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1}, 0x20) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x0, [@null, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', 0x0}) [ 59.588904][ T7274] IPVS: ftp: loaded support on port[0] = 21 [ 59.616797][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.623921][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.631349][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.638553][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.843318][ T7278] IPVS: ftp: loaded support on port[0] = 21 [ 59.858668][ T7272] chnl_net:caif_netlink_parms(): no params data found [ 59.912215][ T7269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.958875][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.979841][ T2838] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.000075][ T2838] bridge0: port 2(bridge_slave_1) entered disabled state 14:43:16 executing program 4: socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 60.012668][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.043486][ T7269] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.071966][ T7274] chnl_net:caif_netlink_parms(): no params data found [ 60.090139][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.104820][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.126402][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.133660][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.156592][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.163676][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.188052][ T7272] device bridge_slave_0 entered promiscuous mode [ 60.209681][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.225791][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.233964][ T7272] device bridge_slave_1 entered promiscuous mode [ 60.258582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.276809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.296440][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.303532][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.334930][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.374125][ T7285] IPVS: ftp: loaded support on port[0] = 21 [ 60.382505][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.403330][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.415344][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 14:43:16 executing program 5: io_setup(0x14, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000005, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") io_submit(r0, 0x0, 0x0) io_submit(r0, 0x8, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0xa}]) [ 60.428245][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.437784][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.450558][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.460031][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.475880][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.485086][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.512707][ T7269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.524678][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.549843][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.559552][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.568265][ T7274] device bridge_slave_0 entered promiscuous mode [ 60.576271][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.585063][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.596959][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.628965][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.636248][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.644147][ T7274] device bridge_slave_1 entered promiscuous mode [ 60.676371][ T7287] IPVS: ftp: loaded support on port[0] = 21 [ 60.682180][ T7278] chnl_net:caif_netlink_parms(): no params data found [ 60.694673][ T7272] team0: Port device team_slave_0 added [ 60.707147][ T7274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.725255][ T7274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.751721][ T7272] team0: Port device team_slave_1 added [ 60.771594][ T7274] team0: Port device team_slave_0 added [ 60.779175][ T7274] team0: Port device team_slave_1 added [ 60.807985][ T7269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.843814][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.851272][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.859902][ T7278] device bridge_slave_0 entered promiscuous mode [ 60.870444][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.878591][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.886554][ T7278] device bridge_slave_1 entered promiscuous mode [ 60.938207][ T7272] device hsr_slave_0 entered promiscuous mode [ 61.006214][ T7272] device hsr_slave_1 entered promiscuous mode [ 61.055890][ T7272] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.118357][ T7274] device hsr_slave_0 entered promiscuous mode [ 61.186221][ T7274] device hsr_slave_1 entered promiscuous mode [ 61.235872][ T7274] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.261391][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.268608][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.281258][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.330150][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.359118][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.401927][ T7278] team0: Port device team_slave_0 added [ 61.444823][ T7278] team0: Port device team_slave_1 added 14:43:18 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000200)={0x1b}, 0x0) [ 61.499479][ T7274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.541727][ T7274] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.571462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.584846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:43:18 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000200)={0x1b}, 0x0) 14:43:18 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000200)={0x1b}, 0x0) [ 61.678934][ T7278] device hsr_slave_0 entered promiscuous mode [ 61.709238][ T7278] device hsr_slave_1 entered promiscuous mode 14:43:18 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000200)={0x1b}, 0x0) [ 61.755858][ T7278] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.771683][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.782901][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.798674][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.805810][ T7276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.833437][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.844031][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 14:43:18 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000200)={0x1b}, 0x0) [ 61.854614][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.862013][ T7276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.874597][ T7285] chnl_net:caif_netlink_parms(): no params data found [ 61.911692][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.939780][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.951474][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 14:43:18 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000200)={0x1b}, 0x0) [ 61.961113][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.975060][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.984578][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.997688][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.023947][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 14:43:18 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x202}}, 0x80, 0x0}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x111080, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000300)=0xffffffc1, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/330], 0x119) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) open_tree(r4, &(0x7f0000000340)='./file0\x00', 0x80000) [ 62.069922][ T7274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.091496][ T7274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.130571][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.153619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.170605][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.190538][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.199634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.207267][ C0] hrtimer: interrupt took 43716 ns [ 62.208584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.221939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.230505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.244297][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 62.250814][ T7318] overlayfs: missing 'lowerdir' [ 62.270474][ T7274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.303963][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.312316][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.326991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.335918][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.343111][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.376914][ T45] hid-generic 0000:0000:0000.0001: unexpected long global item [ 62.388351][ T45] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 [ 62.408249][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.432200][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.440551][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.458682][ T7321] overlayfs: missing 'lowerdir' [ 62.465138][ T7287] device bridge_slave_0 entered promiscuous mode [ 62.476541][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.485310][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.499297][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.506489][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.519808][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.530842][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.544257][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.553764][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.565119][ T7285] device bridge_slave_0 entered promiscuous mode [ 62.582435][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.591027][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.599374][ T7287] device bridge_slave_1 entered promiscuous mode [ 62.620696][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.631602][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.640591][ T7285] device bridge_slave_1 entered promiscuous mode [ 62.648195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.657783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.667992][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.677835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.687740][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.697439][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.706224][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.715090][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.723898][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.749869][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.761106][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.820676][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.832332][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.863196][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.878220][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.887619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.896575][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.906037][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.913120][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.928950][ T7330] IPVS: ftp: loaded support on port[0] = 21 [ 62.929051][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.962990][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.972700][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.980237][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.988719][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.000693][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.014807][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.026383][ T7287] team0: Port device team_slave_0 added [ 63.034094][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.047038][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.066177][ T7287] team0: Port device team_slave_1 added [ 63.111207][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.121660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.131552][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.170705][ T7272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.181371][ T7285] team0: Port device team_slave_0 added [ 63.190298][ T7285] team0: Port device team_slave_1 added [ 63.220134][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.238319][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.264072][ T7278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.283767][ T7278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.352740][ T7330] IPVS: ftp: loaded support on port[0] = 21 [ 63.363044][ T7287] device hsr_slave_0 entered promiscuous mode [ 63.396514][ T7287] device hsr_slave_1 entered promiscuous mode [ 63.435815][ T7287] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.453359][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.462261][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.471242][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.480037][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.489945][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.506471][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.587264][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.600092][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.623435][ T7287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.634519][ T7287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.068859][ T7285] device hsr_slave_0 entered promiscuous mode [ 64.086290][ T7285] device hsr_slave_1 entered promiscuous mode [ 64.125733][ T7285] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.133447][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.143769][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.155348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.169825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.179395][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.186646][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.199611][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.210044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.222253][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.229389][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.237888][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.247210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.256566][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.265196][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.274058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.282896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.291951][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.300450][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.309183][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.317604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.331939][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.402604][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.420297][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.444263][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 14:43:21 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000474fec)={0x1, 0x800000000000003b, 0x7, 0x4}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 64.585153][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.631053][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.644203][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.674056][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.768546][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.783089][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.805275][ T2838] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.812595][ T2838] bridge0: port 1(bridge_slave_0) entered forwarding state 14:43:21 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40042, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000300)=0xffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="aba102ca93ffdc933f46a76d96fc8d1648f50a92162d4da2539a45c2fe3918a423ac59b0a4a546103005daed3788e907a6475f6aff4483fd00022bf629d8e49fe87a3820e8d587e4117109d0de3f1db44432f28f16ab63cefb62e1d135246e2f16fc0094c94ba540791b7ffb2e7de4217bd893fb3e5b475e579f3b97d867fb4501ea48a6ca99b3ff59f3958ef406a471d05937cb3f6cb4e7b9c3413e379c852b344adad7ab53", @ANYRES16=r6], 0x2}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84730067", @ANYRES16=r6, @ANYBLOB="00042bbd7000fcdbdf25040000001c00020008000600ee08000008000b0002000000080102000008000600020000004c00010028000b007369700008000100020000000c414e54b8d4723ae900000008000500010000000800060010000000080009001a00000008000500020000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 64.901200][ T7285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.949572][ T7285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.964707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.974150][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.988961][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.998028][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.005183][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.019513][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.031283][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.043752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.060205][ T7372] IPVS: ftp: loaded support on port[0] = 21 [ 65.077637][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.091426][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.101799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.114520][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.124858][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.139537][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.151151][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.212743][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.240243][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 14:43:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xe7ffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x10000, &(0x7f0000000340)=""/4096) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) syz_genetlink_get_family_id$ipvs(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000007c0), 0xc, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1}, 0x20) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x0, [@null, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', 0x0}) [ 65.267509][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.622725][ T7389] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.752557][ T7387] ================================================================== [ 65.760702][ T7387] BUG: KCSAN: data-race in poll_schedule_timeout.constprop.0 / pollwake [ 65.769042][ T7387] [ 65.771395][ T7387] write to 0xffffc9000188fa20 of 4 bytes by task 7392 on cpu 1: [ 65.779391][ T7387] pollwake+0xe3/0x140 [ 65.783462][ T7387] __wake_up_common+0x7b/0x180 [ 65.788394][ T7387] __wake_up_common_lock+0x77/0xb0 [ 65.793696][ T7387] __wake_up+0xe/0x10 [ 65.797675][ T7387] wakeup_pipe_writers+0x74/0xb0 [ 65.802609][ T7387] splice_from_pipe_next.part.0+0x17a/0x1d0 [ 65.808501][ T7387] __splice_from_pipe+0xa4/0x480 [ 65.813434][ T7387] do_vmsplice.part.0+0x1c5/0x210 [ 65.818456][ T7387] __do_sys_vmsplice+0x15f/0x1c0 [ 65.823401][ T7387] __x64_sys_vmsplice+0x5e/0x80 [ 65.828336][ T7387] do_syscall_64+0xcc/0x370 [ 65.832924][ T7387] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.838798][ T7387] [ 65.841121][ T7387] read to 0xffffc9000188fa20 of 4 bytes by task 7387 on cpu 0: [ 65.848667][ T7387] poll_schedule_timeout.constprop.0+0x50/0xc0 [ 65.854832][ T7387] do_select+0xd7f/0x1020 [ 65.859166][ T7387] core_sys_select+0x381/0x550 [ 65.863944][ T7387] do_pselect.constprop.0+0x11d/0x160 [ 65.869324][ T7387] __x64_sys_pselect6+0x12e/0x170 [ 65.874453][ T7387] do_syscall_64+0xcc/0x370 [ 65.878953][ T7387] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.885017][ T7387] [ 65.887345][ T7387] Reported by Kernel Concurrency Sanitizer on: [ 65.893494][ T7387] CPU: 0 PID: 7387 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 65.901287][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.911544][ T7387] ================================================================== [ 65.919640][ T7387] Kernel panic - not syncing: panic_on_warn set ... [ 65.926238][ T7387] CPU: 0 PID: 7387 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 65.934146][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.944211][ T7387] Call Trace: [ 65.947516][ T7387] dump_stack+0xf5/0x159 [ 65.951773][ T7387] panic+0x210/0x640 [ 65.955687][ T7387] ? vprintk_func+0x8d/0x140 [ 65.960282][ T7387] kcsan_report.cold+0xc/0x1b [ 65.964959][ T7387] __kcsan_setup_watchpoint+0x3ee/0x510 [ 65.970510][ T7387] __tsan_read4+0x2c/0x30 [ 65.974854][ T7387] poll_schedule_timeout.constprop.0+0x50/0xc0 [ 65.981008][ T7387] do_select+0xd7f/0x1020 [ 65.985361][ T7387] ? poll_select_finish+0x440/0x440 [ 65.990646][ T7387] ? poll_select_finish+0x440/0x440 [ 65.995862][ T7387] ? poll_select_finish+0x440/0x440 [ 66.001068][ T7387] ? poll_select_finish+0x440/0x440 [ 66.006264][ T7387] ? poll_select_finish+0x440/0x440 [ 66.011459][ T7387] ? poll_select_finish+0x440/0x440 [ 66.016674][ T7387] ? __kcsan_setup_watchpoint+0x96/0x510 [ 66.022304][ T7387] ? __tsan_read8+0x2c/0x30 [ 66.026822][ T7387] ? __kcsan_setup_watchpoint+0x96/0x510 [ 66.032816][ T7387] ? check_stack_object+0xda/0x110 [ 66.038015][ T7387] ? __kcsan_setup_watchpoint+0x96/0x510 [ 66.043641][ T7387] ? __tsan_read8+0x2c/0x30 [ 66.048865][ T7387] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 66.055200][ T7387] core_sys_select+0x381/0x550 [ 66.059974][ T7387] ? __kcsan_setup_watchpoint+0x96/0x510 [ 66.065605][ T7387] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 66.071615][ T7387] ? __tsan_write8+0x32/0x40 [ 66.076213][ T7387] ? ktime_get_ts64+0x286/0x2c0 [ 66.081065][ T7387] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 66.086825][ T7387] ? timespec64_add_safe+0xae/0xd0 [ 66.092137][ T7387] do_pselect.constprop.0+0x11d/0x160 [ 66.097532][ T7387] __x64_sys_pselect6+0x12e/0x170 [ 66.103017][ T7387] do_syscall_64+0xcc/0x370 [ 66.107557][ T7387] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.113445][ T7387] RIP: 0033:0x459a59 [ 66.117340][ T7387] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.137295][ T7387] RSP: 002b:00007f6b0adeac78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 66.145841][ T7387] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a59 [ 66.153818][ T7387] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 66.161788][ T7387] RBP: 000000000075bf20 R08: 0000000020000200 R09: 0000000000000000 [ 66.169793][ T7387] R10: 0000000020000140 R11: 0000000000000246 R12: 00007f6b0adeb6d4 [ 66.177964][ T7387] R13: 00000000004c6fff R14: 00000000004dc878 R15: 00000000ffffffff [ 66.187619][ T7387] Kernel Offset: disabled [ 66.192004][ T7387] Rebooting in 86400 seconds..