[info] Using makefile-style concurrent boot in runlevel 2. [ 47.016507][ T27] audit: type=1800 audit(1578678684.582:21): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 47.066807][ T27] audit: type=1800 audit(1578678684.592:22): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.213' (ECDSA) to the list of known hosts. 2020/01/10 17:51:38 fuzzer started 2020/01/10 17:51:39 dialing manager at 10.128.0.105:36255 2020/01/10 17:51:51 syscalls: 2812 2020/01/10 17:51:51 code coverage: enabled 2020/01/10 17:51:51 comparison tracing: enabled 2020/01/10 17:51:51 extra coverage: enabled 2020/01/10 17:51:51 setuid sandbox: enabled 2020/01/10 17:51:51 namespace sandbox: enabled 2020/01/10 17:51:51 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/10 17:51:51 fault injection: enabled 2020/01/10 17:51:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/10 17:51:51 net packet injection: enabled 2020/01/10 17:51:51 net device setup: enabled 2020/01/10 17:51:51 concurrency sanitizer: enabled 2020/01/10 17:51:51 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 77.438863][ T7912] KCSAN: could not find function: 'calc_wb_limits' [ 78.547531][ T7912] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/10 17:52:00 adding functions to KCSAN blacklist: 'find_next_bit' 'run_timer_softirq' '__ext4_new_inode' 'queue_access_lock' 'ext4_has_free_clusters' 'ext4_nonda_switch' 'audit_log_start' 'sit_tunnel_xmit' 'snd_timer_pause' 'iput' 'do_nanosleep' 'tick_nohz_idle_stop_tick' 'vm_area_dup' 'process_srcu' 'snd_seq_prioq_cell_out' 'sbitmap_queue_clear' 'generic_write_end' 'calc_wb_limits' 'blk_mq_run_hw_queue' '__mark_inode_dirty' 'delete_from_page_cache_batch' 'ep_poll' 'taskstats_exit' 'poll_schedule_timeout' 'kauditd_thread' 'ext4_free_inodes_count' 'tomoyo_supervisor' 'iomap_dio_bio_actor' 'add_timer' '__hrtimer_run_queues' 'find_get_pages_range_tag' 'dd_has_work' 'blk_mq_dispatch_rq_list' 'mod_timer' 'filemap_map_pages' 'rcu_gp_fqs_check_wake' 'xas_clear_mark' '__snd_rawmidi_transmit_ack' 'pid_update_inode' 'n_tty_receive_buf_common' 'blk_stat_add' 'blk_mq_get_request' 'wbt_issue' 'rcu_gp_fqs_loop' 'copy_process' 'blk_mq_sched_dispatch_requests' 'ext4_mark_iloc_dirty' 'tick_do_update_jiffies64' 'tick_sched_do_timer' 'futex_wait_queue_me' '__lru_cache_add' 'ext4_free_inode' 'kcm_rfree' 'ext4_mb_good_group' 17:54:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev, 'vlan0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 17:54:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924ed", 0x7a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 259.044793][ T7916] IPVS: ftp: loaded support on port[0] = 21 17:54:56 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x5, 0x0, 0x7d) [ 259.166552][ T7916] chnl_net:caif_netlink_parms(): no params data found [ 259.187907][ T7919] IPVS: ftp: loaded support on port[0] = 21 [ 259.244550][ T7916] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.259353][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.279986][ T7916] device bridge_slave_0 entered promiscuous mode [ 259.309393][ T7916] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.316594][ T7916] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.325418][ T7916] device bridge_slave_1 entered promiscuous mode [ 259.358275][ T7916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.406408][ T7916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 17:54:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 259.456713][ T7916] team0: Port device team_slave_0 added [ 259.480575][ T7916] team0: Port device team_slave_1 added [ 259.489677][ T7919] chnl_net:caif_netlink_parms(): no params data found [ 259.525234][ T7923] IPVS: ftp: loaded support on port[0] = 21 [ 259.591170][ T7916] device hsr_slave_0 entered promiscuous mode 17:54:57 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_init_net_socket$llc(0x1a, 0x4, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000b00)={0x2c, 0x0, 0x98cb23bb91504659, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0x0]}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) accept4$x25(r1, 0x0, &(0x7f0000000300), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5437, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x4, 0x0, 0x1, 0x1, 0x10001, 0x7ff, 0x7, 0x0, 0x1, 0x80000000, 0x5, 0x4, 0x80, 0x100, 0x1, 0x1c, {0x6, 0x2}, 0x1, 0x1}}) flistxattr(r2, &(0x7f0000000180)=""/83, 0x53) [ 259.669432][ T7916] device hsr_slave_1 entered promiscuous mode [ 259.761359][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.765655][ T7925] IPVS: ftp: loaded support on port[0] = 21 [ 259.768460][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.819856][ T7919] device bridge_slave_0 entered promiscuous mode [ 259.873711][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.889168][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.896752][ T7919] device bridge_slave_1 entered promiscuous mode [ 259.952060][ T7919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.978882][ T7927] IPVS: ftp: loaded support on port[0] = 21 [ 259.987903][ T7919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 17:54:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000080)={0x1, 0x1}) [ 260.034641][ T7916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.095330][ T7916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.170839][ T7916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.248465][ T7916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.318747][ T7919] team0: Port device team_slave_0 added [ 260.325523][ T7919] team0: Port device team_slave_1 added [ 260.341536][ T7923] chnl_net:caif_netlink_parms(): no params data found [ 260.362520][ T7930] IPVS: ftp: loaded support on port[0] = 21 [ 260.394212][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.401321][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.409584][ T7923] device bridge_slave_0 entered promiscuous mode [ 260.418594][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.425898][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.433931][ T7923] device bridge_slave_1 entered promiscuous mode [ 260.511338][ T7919] device hsr_slave_0 entered promiscuous mode [ 260.549482][ T7919] device hsr_slave_1 entered promiscuous mode [ 260.599172][ T7919] debugfs: Directory 'hsr0' with parent '/' already present! [ 260.626738][ T7925] chnl_net:caif_netlink_parms(): no params data found [ 260.647573][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.670640][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.729604][ T7923] team0: Port device team_slave_0 added [ 260.736761][ T7923] team0: Port device team_slave_1 added [ 260.753445][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.760588][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.768330][ T7925] device bridge_slave_0 entered promiscuous mode [ 260.818105][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.825314][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.833078][ T7925] device bridge_slave_1 entered promiscuous mode [ 260.860666][ T7927] chnl_net:caif_netlink_parms(): no params data found [ 260.882424][ T7919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.928600][ T7919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.983578][ T7930] chnl_net:caif_netlink_parms(): no params data found [ 260.999510][ T7925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.071346][ T7923] device hsr_slave_0 entered promiscuous mode [ 261.109563][ T7923] device hsr_slave_1 entered promiscuous mode [ 261.149189][ T7923] debugfs: Directory 'hsr0' with parent '/' already present! [ 261.158874][ T7919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.211518][ T7919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.273302][ T7925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.316532][ T7916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.350642][ T7925] team0: Port device team_slave_0 added [ 261.357081][ T7925] team0: Port device team_slave_1 added [ 261.370202][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.377242][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.387089][ T7927] device bridge_slave_0 entered promiscuous mode [ 261.408265][ T7916] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.432122][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.439715][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.447351][ T7930] device bridge_slave_0 entered promiscuous mode [ 261.454810][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.461891][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.469847][ T7927] device bridge_slave_1 entered promiscuous mode [ 261.476696][ T7923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.531364][ T7923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.571092][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.578794][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.651894][ T7925] device hsr_slave_0 entered promiscuous mode [ 261.689478][ T7925] device hsr_slave_1 entered promiscuous mode [ 261.749212][ T7925] debugfs: Directory 'hsr0' with parent '/' already present! [ 261.756731][ T7930] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.763965][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.774252][ T7930] device bridge_slave_1 entered promiscuous mode [ 261.789240][ T7923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.833013][ T7923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.891167][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.900268][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.908707][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.915826][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.923865][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.932597][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.941059][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.948070][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.955878][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.997769][ T7927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.008280][ T7930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.018787][ T7930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.031388][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.040417][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.049039][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.058106][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.067005][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.087377][ T7916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.098046][ T7916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.112211][ T7927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.129011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.138616][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.147182][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.156257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.164912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.173148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.203609][ T7930] team0: Port device team_slave_0 added [ 262.212233][ T7930] team0: Port device team_slave_1 added [ 262.222412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.242888][ T7919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.273505][ T7927] team0: Port device team_slave_0 added [ 262.286709][ T7919] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.300033][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.307498][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.314976][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.322663][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.332207][ T7916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.340147][ T7925] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 262.391786][ T7925] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.432117][ T7927] team0: Port device team_slave_1 added [ 262.481482][ T7930] device hsr_slave_0 entered promiscuous mode [ 262.519525][ T7930] device hsr_slave_1 entered promiscuous mode [ 262.579245][ T7930] debugfs: Directory 'hsr0' with parent '/' already present! [ 262.597209][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.606011][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.614839][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.621920][ T7935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.630237][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.638943][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.647378][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.654449][ T7935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.662232][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.671242][ T7925] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.711729][ T7925] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.769764][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.777726][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.787343][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.795976][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.831371][ T7927] device hsr_slave_0 entered promiscuous mode [ 262.859520][ T7927] device hsr_slave_1 entered promiscuous mode [ 262.899430][ T7927] debugfs: Directory 'hsr0' with parent '/' already present! [ 262.929670][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.938250][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.948883][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.957738][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.966972][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.975818][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.984042][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.027883][ T7919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.039714][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.061888][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.070789][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.094766][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.105558][ T7930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.146993][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.157827][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.166463][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.174001][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.193265][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.201117][ T7930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.251661][ T7930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.312712][ T7930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.371296][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.380135][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.394975][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.408510][ T7916] device veth0_vlan entered promiscuous mode [ 263.422116][ T7927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.441169][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.449310][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.457075][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.465891][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.474469][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.481541][ T7935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.489809][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.498542][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.507060][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.514110][ T7935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.523765][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.531935][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.547319][ T7925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.560212][ T7927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.592284][ T7916] device veth1_vlan entered promiscuous mode [ 263.608757][ T7927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.661294][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.672284][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.680491][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.688203][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.698472][ T7925] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.714294][ T7927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.751152][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.761248][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.769846][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.778643][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.787476][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.796385][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.805278][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.814043][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.822546][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.831248][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.862768][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.871813][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.880384][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.887405][ T7935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.896270][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.907756][ T7923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.922210][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.934899][ T7919] device veth0_vlan entered promiscuous mode [ 263.950983][ T7919] device veth1_vlan entered promiscuous mode [ 263.960286][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.970153][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.978515][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.985574][ T7935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.993738][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.004413][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.013196][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.022505][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.031392][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.040378][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.048616][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.057647][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.066700][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.076422][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.084438][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.092439][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.137157][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.148305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.156308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 264.156334][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 264.168826][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.178099][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 17:55:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev, 'vlan0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 264.186618][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.194939][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.203877][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.235516][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.258918][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.269827][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.282283][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.320023][ T7927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.354993][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 17:55:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev, 'vlan0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 264.366236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.387796][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.397779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:55:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev, 'vlan0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 264.444472][ T7925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.453302][ T7927] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.463625][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.479720][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.500981][ T7930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.525151][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.542695][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 17:55:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x238, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x3c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x200, 0x2, [@tunl6_policy=[@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={[], [], @multicast1}}, @IFLA_IPTUN_FLOWINFO, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TTL={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x238}}, 0x0) [ 264.566067][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.575868][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.584476][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.591565][ T7935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.616459][ T7923] device veth0_vlan entered promiscuous mode [ 264.630108][ T7930] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.657775][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.665714][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.674187][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.682190][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.690197][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.698286][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.706946][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.715934][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.722986][ T7935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.731333][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.740949][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.750389][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.759307][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.767808][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.776576][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.785268][ T7959] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.795851][ T7959] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000001e40)={0x14}, 0x20001e54}}, 0x0) [ 264.808581][ T7923] device veth1_vlan entered promiscuous mode [ 264.848854][ T7927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.875414][ T7927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.891508][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.899705][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.907564][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.916327][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.925043][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.932336][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.940515][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.952325][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.960796][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.967863][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.969085][ C0] hrtimer: interrupt took 23058 ns [ 264.979280][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.992672][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.002057][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.013788][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.023017][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.035427][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 17:55:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000001e40)={0x14}, 0x20001e54}}, 0x0) [ 265.045530][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.056677][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.066757][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.077894][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.087234][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.098209][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.107768][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.120081][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.141292][ T7930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.170294][ T7930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.182644][ T7925] device veth0_vlan entered promiscuous mode [ 265.200720][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.208779][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.231372][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.239371][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.247919][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.259688][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.267999][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.280745][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.288658][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.311762][ T7927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.356000][ T7925] device veth1_vlan entered promiscuous mode [ 265.375382][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.383654][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 17:55:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000001e40)={0x14}, 0x20001e54}}, 0x0) [ 265.399837][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.416293][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.423990][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.443154][ T7930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.625928][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.635447][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.663284][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.704005][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.713502][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.726124][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.737599][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.764970][ T7930] device veth0_vlan entered promiscuous mode [ 265.782462][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.790585][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.798501][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.811266][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.824890][ T7927] device veth0_vlan entered promiscuous mode [ 265.836018][ T7930] device veth1_vlan entered promiscuous mode [ 265.845819][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.854415][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.870649][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.893632][ T7927] device veth1_vlan entered promiscuous mode [ 265.902996][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.916185][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.009746][ T7995] usb usb2: usbfs: process 7995 (syz-executor.5) did not claim interface 0 before use 17:55:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 17:55:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0x0, 0x80000001, 0xfff, 0x4, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x728da5aa63db1f00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) socketpair(0x0, 0x800, 0x4a, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r4 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) close(r0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x401, 0x0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0xb, &(0x7f0000000000)=r7, 0xb) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000adc0)={0x3, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000050000000000000045fa0020180000002000000027592fa30700000000010300ffffff7f08635000fcffffff9500000000000000a190f8f7727b7b47a80475aa881e510e2fd0d105d9242ae9be9b5211bdf0a6c8399e92ec58451fa2b49dea0a94d9b2f8f720340662a06e4c43743f33892335d85c05fdb8a31e06f4fcfb17b8fac896d80d7bbff2104d3bc6dba32f0f18fbd6d8dad43df0bb6403385c88af7321a80590c1d99bec61f72cecf162cd3d7c7b7b05409907b5808cbdb7f83bf91df3683ebfd94e"], &(0x7f00000011c0)='syzkaller\x00', 0x4, 0x26, &(0x7f0000000f00)=""/38, 0x41000, 0xf, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f000000ab00)={0x4, 0x3}, 0x8, 0x10, &(0x7f000000ab40)={0x0, 0xd, 0x7, 0x3}, 0x10}, 0x78) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0x10036) write$cgroup_pid(r8, &(0x7f0000000000), 0x10000000c) ioctl$TUNSETFILTEREBPF(r8, 0x6609, 0x0) 17:55:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='auxv\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, 0x0, 0x0) gettid() gettid() r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) setresgid(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x0, 0x101000) timerfd_create(0x0, 0x100800) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000a80)='/dev/snd/pcmC#D#p\x00', 0x5, 0x400000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r17, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@empty, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x5a, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000c40)='/dev/sg#\x00', 0x1ff, 0x220000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/184, 0xb8}], 0x4, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='g', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x0, 0x0) 17:55:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_init_net_socket$llc(0x1a, 0x4, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000b00)={0x2c, 0x0, 0x98cb23bb91504659, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0x0]}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) accept4$x25(r1, 0x0, &(0x7f0000000300), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5437, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x4, 0x0, 0x1, 0x1, 0x10001, 0x7ff, 0x7, 0x0, 0x1, 0x80000000, 0x5, 0x4, 0x80, 0x100, 0x1, 0x1c, {0x6, 0x2}, 0x1, 0x1}}) flistxattr(r2, &(0x7f0000000180)=""/83, 0x53) 17:55:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 17:55:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000001e40)={0x14}, 0x20001e54}}, 0x0) 17:55:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_init_net_socket$llc(0x1a, 0x4, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000b00)={0x2c, 0x0, 0x98cb23bb91504659, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0x0]}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) accept4$x25(r1, 0x0, &(0x7f0000000300), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5437, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x4, 0x0, 0x1, 0x1, 0x10001, 0x7ff, 0x7, 0x0, 0x1, 0x80000000, 0x5, 0x4, 0x80, 0x100, 0x1, 0x1c, {0x6, 0x2}, 0x1, 0x1}}) flistxattr(r2, &(0x7f0000000180)=""/83, 0x53) [ 267.717433][ T8012] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:55:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_init_net_socket$llc(0x1a, 0x4, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000b00)={0x2c, 0x0, 0x98cb23bb91504659, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0x0]}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) accept4$x25(r1, 0x0, &(0x7f0000000300), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5437, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x4, 0x0, 0x1, 0x1, 0x10001, 0x7ff, 0x7, 0x0, 0x1, 0x80000000, 0x5, 0x4, 0x80, 0x100, 0x1, 0x1c, {0x6, 0x2}, 0x1, 0x1}}) flistxattr(r2, &(0x7f0000000180)=""/83, 0x53) 17:55:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 17:55:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 17:55:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 17:55:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 268.393963][ T8034] ================================================================== [ 268.402108][ T8034] BUG: KCSAN: data-race in atime_needs_update / shmem_unlink [ 268.409471][ T8034] [ 268.411810][ T8034] read to 0xffff888123db2168 of 8 bytes by task 3989 on cpu 1: [ 268.419371][ T8034] atime_needs_update+0x264/0x360 [ 268.424401][ T8034] touch_atime+0x63/0x190 [ 268.428743][ T8034] do_readlinkat+0x1d8/0x220 [ 268.433352][ T8034] __x64_sys_readlink+0x51/0x70 [ 268.438223][ T8034] do_syscall_64+0xcc/0x3a0 [ 268.442743][ T8034] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 268.448626][ T8034] [ 268.450962][ T8034] write to 0xffff888123db2168 of 16 bytes by task 8034 on cpu 0: [ 268.458683][ T8034] shmem_unlink+0xe8/0x150 [ 268.463544][ T8034] vfs_unlink+0x225/0x3e0 [ 268.467880][ T8034] do_unlinkat+0x32b/0x530 [ 268.472331][ T8034] __x64_sys_unlink+0x3b/0x50 [ 268.477022][ T8034] do_syscall_64+0xcc/0x3a0 [ 268.481535][ T8034] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 268.487418][ T8034] [ 268.489749][ T8034] Reported by Kernel Concurrency Sanitizer on: [ 268.495913][ T8034] CPU: 0 PID: 8034 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 268.503710][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.513771][ T8034] ================================================================== [ 268.521836][ T8034] Kernel panic - not syncing: panic_on_warn set ... [ 268.528435][ T8034] CPU: 0 PID: 8034 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 268.536266][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.546319][ T8034] Call Trace: [ 268.549623][ T8034] dump_stack+0x11d/0x181 [ 268.553973][ T8034] panic+0x210/0x640 [ 268.557875][ T8034] ? vprintk_func+0x8d/0x140 [ 268.562480][ T8034] kcsan_report.cold+0xc/0xd [ 268.567093][ T8034] kcsan_setup_watchpoint+0x3fe/0x460 [ 268.579280][ T8034] __tsan_unaligned_write16+0xc7/0x110 [ 268.584840][ T8034] shmem_unlink+0xe8/0x150 [ 268.589272][ T8034] vfs_unlink+0x225/0x3e0 [ 268.593629][ T8034] ? apparmor_path_unlink+0x36/0x40 [ 268.598841][ T8034] do_unlinkat+0x32b/0x530 [ 268.603269][ T8034] __x64_sys_unlink+0x3b/0x50 [ 268.607949][ T8034] do_syscall_64+0xcc/0x3a0 [ 268.612476][ T8034] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 268.618374][ T8034] RIP: 0033:0x7f20cb9085d7 [ 268.622793][ T8034] Code: 48 3d 00 f0 ff ff 77 03 48 98 c3 48 8b 15 59 38 2b 00 f7 d8 64 89 02 48 83 c8 ff c3 90 90 90 90 90 90 90 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 38 2b 00 31 d2 48 29 c2 64 [ 268.642389][ T8034] RSP: 002b:00007ffee12e7048 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 268.650798][ T8034] RAX: ffffffffffffffda RBX: 00000000020fc680 RCX: 00007f20cb9085d7 [ 268.658782][ T8034] RDX: 00007ffee12e7072 RSI: 000000000041cce6 RDI: 00007ffee12e7060 [ 268.666899][ T8034] RBP: 00000000020e3250 R08: 0000000000000000 R09: 0000000000000001 [ 268.674885][ T8034] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 268.683208][ T8034] R13: 0000000000625500 R14: 00000000020e3250 R15: 000000000000000b [ 268.692446][ T8034] Kernel Offset: disabled [ 268.696773][ T8034] Rebooting in 86400 seconds..