Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. 2019/12/14 01:17:20 fuzzer started 2019/12/14 01:17:23 dialing manager at 10.128.0.105:45083 2019/12/14 01:17:23 syscalls: 2686 2019/12/14 01:17:23 code coverage: enabled 2019/12/14 01:17:23 comparison tracing: enabled 2019/12/14 01:17:23 extra coverage: enabled 2019/12/14 01:17:23 setuid sandbox: enabled 2019/12/14 01:17:23 namespace sandbox: enabled 2019/12/14 01:17:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/14 01:17:23 fault injection: enabled 2019/12/14 01:17:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/14 01:17:23 net packet injection: enabled 2019/12/14 01:17:23 net device setup: enabled 2019/12/14 01:17:23 concurrency sanitizer: enabled 2019/12/14 01:17:23 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 67.509024][ T7849] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/14 01:17:31 adding functions to KCSAN blacklist: 'do_try_to_free_pages' 'mm_update_next_owner' 'mod_timer' 'ext4_has_free_clusters' 'wbt_done' 'tick_do_update_jiffies64' 'sit_tunnel_xmit' 'commit_echoes' '__hrtimer_run_queues' 'wbt_issue' 'pid_update_inode' 'run_timer_softirq' 'ext4_free_inode' 'futex_wait_queue_me' 'kauditd_thread' 'generic_permission' 'n_tty_receive_buf_common' 'blk_mq_sched_dispatch_requests' 'ktime_get_real_seconds' 'rcu_gp_fqs_check_wake' 'find_next_bit' 'blk_mq_dispatch_rq_list' 'tick_nohz_idle_stop_tick' 'ext4_nonda_switch' 'do_nanosleep' '__mark_inode_dirty' 'ext4_mark_iloc_dirty' 'page_counter_try_charge' 'do_signal_stop' 'clean_buffers' 'generic_write_end' 'tomoyo_supervisor' 'find_get_pages_range_tag' 'vm_area_dup' 'tick_sched_do_timer' 'lruvec_lru_size' 'timer_clear_idle' 'iomap_dio_bio_actor' 'xas_find_marked' 'ext4_free_inodes_count' 'ep_poll' '__ext4_new_inode' 'shmem_getattr' 'taskstats_exit' 'audit_log_start' 'blk_mq_run_hw_queue' 'queue_access_lock' '__snd_rawmidi_transmit_ack' 'poll_schedule_timeout' 'blk_mq_get_request' 'do_exit' 'do_syslog' 'exit_signals' 'add_timer' 'generic_fillattr' 'copy_process' 'pcpu_alloc' 'xas_clear_mark' 'blk_mq_free_request' 'echo_char' 01:19:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) 01:19:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 189.199345][ T7852] IPVS: ftp: loaded support on port[0] = 21 [ 189.300168][ T7852] chnl_net:caif_netlink_parms(): no params data found [ 189.365138][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.372223][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.380670][ T7852] device bridge_slave_0 entered promiscuous mode [ 189.388552][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.395816][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.403556][ T7852] device bridge_slave_1 entered promiscuous mode [ 189.415876][ T7855] IPVS: ftp: loaded support on port[0] = 21 [ 189.421447][ T7852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.433295][ T7852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.453280][ T7852] team0: Port device team_slave_0 added [ 189.461683][ T7852] team0: Port device team_slave_1 added 01:19:32 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) [ 189.566455][ T7852] device hsr_slave_0 entered promiscuous mode [ 189.604647][ T7852] device hsr_slave_1 entered promiscuous mode [ 189.694296][ T7852] netdevsim netdevsim0 netdevsim0: renamed from eth0 01:19:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0x223, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x4}}, @TCA_RATE={0x8}]}, 0x40}}, 0x0) [ 189.765741][ T7852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.855502][ T7852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.863112][ T7857] IPVS: ftp: loaded support on port[0] = 21 [ 189.934557][ T7852] netdevsim netdevsim0 netdevsim3: renamed from eth3 01:19:32 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 190.003429][ T7859] IPVS: ftp: loaded support on port[0] = 21 [ 190.037424][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.044626][ T7852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.051878][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.058940][ T7852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.068056][ T7855] chnl_net:caif_netlink_parms(): no params data found [ 190.143609][ T7852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.158169][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.174745][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.194752][ T7855] device bridge_slave_0 entered promiscuous mode [ 190.250820][ T7857] chnl_net:caif_netlink_parms(): no params data found [ 190.262334][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.274159][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.294402][ T7855] device bridge_slave_1 entered promiscuous mode [ 190.315396][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.333913][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.342230][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state 01:19:33 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0x8001}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) [ 190.365290][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 190.399224][ T7864] IPVS: ftp: loaded support on port[0] = 21 [ 190.417380][ T7855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.454991][ T7852] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.466843][ T7855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.495115][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.502180][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.510525][ T7857] device bridge_slave_0 entered promiscuous mode [ 190.520067][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.527470][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.536097][ T7857] device bridge_slave_1 entered promiscuous mode [ 190.552675][ T7855] team0: Port device team_slave_0 added [ 190.577406][ T7855] team0: Port device team_slave_1 added [ 190.588728][ T7868] IPVS: ftp: loaded support on port[0] = 21 [ 190.605820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.614580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.623101][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.630225][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.638136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.646714][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.659930][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.666981][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.675106][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.737149][ T7855] device hsr_slave_0 entered promiscuous mode [ 190.774050][ T7855] device hsr_slave_1 entered promiscuous mode [ 190.813989][ T7855] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.822763][ T7857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.833752][ T7857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.846690][ T7859] chnl_net:caif_netlink_parms(): no params data found [ 190.876651][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.914849][ T7857] team0: Port device team_slave_0 added [ 190.921421][ T7857] team0: Port device team_slave_1 added [ 190.928283][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.936747][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.945547][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.954306][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.963639][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.999892][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.008891][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.038778][ T7855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.128042][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.136563][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.145523][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.152845][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.160742][ T7859] device bridge_slave_0 entered promiscuous mode [ 191.167790][ T7855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.265800][ T7857] device hsr_slave_0 entered promiscuous mode [ 191.324025][ T7857] device hsr_slave_1 entered promiscuous mode [ 191.393769][ T7857] debugfs: Directory 'hsr0' with parent '/' already present! [ 191.417662][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 191.426928][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.434431][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.442307][ T7859] device bridge_slave_1 entered promiscuous mode [ 191.454035][ T7855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.514607][ T7868] chnl_net:caif_netlink_parms(): no params data found [ 191.523605][ T7855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.582603][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.595524][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.650408][ T7852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.658053][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.665523][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.674316][ T7864] device bridge_slave_0 entered promiscuous mode [ 191.686767][ T7857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.736965][ T7857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.789882][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.797688][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.813108][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.820538][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.828477][ T7864] device bridge_slave_1 entered promiscuous mode [ 191.844610][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.851660][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.859735][ T7868] device bridge_slave_0 entered promiscuous mode [ 191.884837][ T7857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.926378][ T7859] team0: Port device team_slave_0 added [ 191.932358][ T7857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.979515][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.988839][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.000616][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.008512][ T7868] device bridge_slave_1 entered promiscuous mode [ 192.022741][ T7859] team0: Port device team_slave_1 added 01:19:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 192.034024][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.073883][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.086530][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.115192][ T7864] team0: Port device team_slave_0 added [ 192.122084][ T7864] team0: Port device team_slave_1 added [ 192.149359][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0 01:19:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 192.226028][ T7859] device hsr_slave_0 entered promiscuous mode [ 192.266649][ T7859] device hsr_slave_1 entered promiscuous mode [ 192.304112][ T7859] debugfs: Directory 'hsr0' with parent '/' already present! [ 192.318903][ T7868] team0: Port device team_slave_0 added [ 192.326035][ T7868] team0: Port device team_slave_1 added 01:19:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x1, 0x1f}, 0x3c) [ 192.376075][ T7864] device hsr_slave_0 entered promiscuous mode [ 192.414446][ T7864] device hsr_slave_1 entered promiscuous mode [ 192.483779][ T7864] debugfs: Directory 'hsr0' with parent '/' already present! 01:19:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x3}) [ 192.529310][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.541852][ T7855] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.571258][ T7886] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 192.595763][ T7868] device hsr_slave_0 entered promiscuous mode 01:19:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x3}) [ 192.634055][ T7868] device hsr_slave_1 entered promiscuous mode [ 192.674139][ T7868] debugfs: Directory 'hsr0' with parent '/' already present! [ 192.688654][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.726598][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 01:19:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x3}) [ 192.750610][ T7857] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.763361][ T7859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.815745][ T7859] netdevsim netdevsim3 netdevsim1: renamed from eth1 01:19:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x3}) [ 192.877047][ T7864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.936745][ T7864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.996656][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.007190][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.015301][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.024043][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.032568][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.039643][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.047797][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.056594][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.065390][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.072420][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.080311][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.089888][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.097915][ T7859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.146130][ T7859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.203241][ T7864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.245899][ T7864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.291338][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.300288][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.308869][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.319912][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.352323][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.361315][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.369825][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.377008][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.385160][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.393917][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.402321][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.409505][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.417669][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.426629][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.435708][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.444558][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.453448][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.466160][ T7868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.517727][ T7868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.566350][ T7868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.605542][ T7868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.657161][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.665878][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.674712][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.683238][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.692202][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.701875][ T7855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.736107][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.745906][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.754694][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.763148][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.772237][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.780816][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.789078][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.797689][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.816081][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.852292][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.861767][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.869879][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.877828][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.885662][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.896064][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.912860][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.930073][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.940743][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.951845][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.966116][ T7855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.985074][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.996628][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.005394][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.012425][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.022929][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.030902][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.044734][ T7859] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.059286][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.070762][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.081670][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.102438][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.111436][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.118600][ T7862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.130098][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.143800][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.152556][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.164918][ T2414] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.172086][ T2414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.181719][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.190544][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.199192][ T2414] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.206257][ T2414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.226166][ T7906] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.257679][ T7864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 01:19:37 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) [ 194.271608][ T7864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.286609][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.297669][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.307945][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.356023][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.374786][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.383575][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.398324][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 194.398342][ T27] audit: type=1804 audit(1576286377.105:31): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir250453554/syzkaller.GFFAu9/1/bus" dev="sda1" ino=16526 res=1 [ 194.405055][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.456703][ T27] audit: type=1804 audit(1576286377.165:32): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir250453554/syzkaller.GFFAu9/1/bus" dev="sda1" ino=16526 res=1 [ 194.465005][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.503122][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.514378][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.522208][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.531228][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.540310][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.548811][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.558832][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.573853][ T7906] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.596899][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 01:19:37 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 194.615006][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.623163][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.644279][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.664344][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.678049][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.701025][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.716560][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.746067][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.764320][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.772444][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.784461][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.827530][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.845098][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.859295][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.866613][ T7865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.878477][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.887306][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.898804][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.905876][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.917344][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.926746][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.942429][ T7859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.963642][ T7868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.978660][ T7868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.997034][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.005557][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.018633][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.028200][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.039805][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.049005][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.059874][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.069441][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.080988][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.090354][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.101321][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.111701][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.122474][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.135645][ T27] audit: type=1804 audit(1576286377.845:33): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir250453554/syzkaller.GFFAu9/1/bus" dev="sda1" ino=16526 res=1 [ 195.152554][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.171288][ T27] audit: type=1804 audit(1576286377.845:34): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir250453554/syzkaller.GFFAu9/1/bus" dev="sda1" ino=16526 res=1 [ 195.175872][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.208643][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.226623][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.234714][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.248581][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0 01:19:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0x223, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x4}}, @TCA_RATE={0x8}]}, 0x40}}, 0x0) 01:19:38 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) [ 196.181431][ T27] audit: type=1804 audit(1576286378.885:35): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir045921457/syzkaller.AcEnZV/1/bus" dev="sda1" ino=16525 res=1 [ 196.259716][ T27] audit: type=1804 audit(1576286378.965:36): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045921457/syzkaller.AcEnZV/1/bus" dev="sda1" ino=16525 res=1 01:19:39 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0x8001}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 01:19:39 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:19:39 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 01:19:39 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 01:19:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0x223, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x4}}, @TCA_RATE={0x8}]}, 0x40}}, 0x0) [ 196.383573][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:19:39 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:19:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0x223, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x4}}, @TCA_RATE={0x8}]}, 0x40}}, 0x0) 01:19:39 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) [ 196.496918][ T27] audit: type=1804 audit(1576286379.205:37): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir250453554/syzkaller.GFFAu9/2/bus" dev="sda1" ino=16541 res=1 01:19:39 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 196.614932][ T27] audit: type=1804 audit(1576286379.305:38): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir250453554/syzkaller.GFFAu9/2/bus" dev="sda1" ino=16541 res=1 [ 196.631771][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:19:39 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="955a000210000000a4231e75e7421fbdd2001ed9"], 0x14) r3 = socket$inet(0x2, 0x3, 0x83) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x82, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 196.697627][ C0] hrtimer: interrupt took 35455 ns 01:19:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCSETA(r0, 0x5412, &(0x7f0000000040)) 01:19:39 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) [ 197.174237][ T27] audit: type=1804 audit(1576286379.885:39): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir045921457/syzkaller.AcEnZV/2/bus" dev="sda1" ino=16525 res=1 [ 197.230846][ T27] audit: type=1804 audit(1576286379.935:40): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045921457/syzkaller.AcEnZV/2/bus" dev="sda1" ino=16525 res=1 01:19:40 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0x8001}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 01:19:40 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="955a000210000000a4231e75e7421fbdd2001ed9"], 0x14) r3 = socket$inet(0x2, 0x3, 0x83) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x82, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 01:19:40 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 01:19:40 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 01:19:40 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="955a000210000000a4231e75e7421fbdd2001ed9"], 0x14) r3 = socket$inet(0x2, 0x3, 0x83) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x82, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 197.428550][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:19:40 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1418c2, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='A'], 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 01:19:40 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="955a000210000000a4231e75e7421fbdd2001ed9"], 0x14) r3 = socket$inet(0x2, 0x3, 0x83) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x82, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 01:19:40 executing program 3: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006020fff90040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:19:40 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1418c2, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='A'], 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 197.825950][ T8027] MINIX-fs: bad superblock or unable to read bitmaps [ 197.955872][ T8027] MINIX-fs: bad superblock or unable to read bitmaps 01:19:40 executing program 3: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006020fff90040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 198.180723][ T8040] MINIX-fs: bad superblock or unable to read bitmaps [ 199.023983][ T7869] Bluetooth: hci0: command 0x1003 tx timeout [ 199.030267][ T7995] Bluetooth: hci0: sending frame failed (-49) [ 201.103815][ T7869] Bluetooth: hci0: command 0x1001 tx timeout [ 201.109937][ T7995] Bluetooth: hci0: sending frame failed (-49) [ 203.183769][ T1066] Bluetooth: hci0: command 0x1009 tx timeout 01:19:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCSETA(r0, 0x5412, &(0x7f0000000040)) 01:19:50 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 01:19:50 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0x8001}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 01:19:50 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1418c2, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='A'], 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 01:19:50 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 01:19:50 executing program 3: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006020fff90040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 207.610947][ T8056] MINIX-fs: bad superblock or unable to read bitmaps [ 207.652634][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 207.652722][ T27] audit: type=1804 audit(1576286390.355:43): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir045921457/syzkaller.AcEnZV/3/bus" dev="sda1" ino=16571 res=1 [ 207.696605][ T27] audit: type=1804 audit(1576286390.405:44): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir250453554/syzkaller.GFFAu9/4/bus" dev="sda1" ino=16569 res=1 [ 207.770932][ T27] audit: type=1804 audit(1576286390.475:45): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir045921457/syzkaller.AcEnZV/3/bus" dev="sda1" ino=16571 res=1 01:19:50 executing program 3: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006020fff90040300001af5c97824", 0x12, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:19:50 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1418c2, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='A'], 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 207.811755][ T27] audit: type=1804 audit(1576286390.505:46): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir250453554/syzkaller.GFFAu9/4/bus" dev="sda1" ino=16569 res=1 01:19:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCSETA(r0, 0x5412, &(0x7f0000000040)) [ 208.016046][ T8078] MINIX-fs: bad superblock or unable to read bitmaps 01:19:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20010, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x15, 0x9000000}) ioctl$KDGKBMODE(r1, 0x4b44, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB="2c776e647f6fdb", @ANYBLOB]) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b) getpid() ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) 01:19:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 01:19:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 209.443698][ T21] tipc: TX() has been purged, node left! [ 209.663703][ T7869] Bluetooth: hci0: command 0x1003 tx timeout [ 209.670024][ T8084] Bluetooth: hci0: sending frame failed (-49) [ 210.143758][ T7869] Bluetooth: hci1: command 0x1003 tx timeout [ 210.149805][ T8084] Bluetooth: hci1: sending frame failed (-49) [ 210.574282][ T21] device bridge_slave_1 left promiscuous mode [ 210.580867][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.634459][ T21] device bridge_slave_0 left promiscuous mode [ 210.641022][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.313972][ T21] device hsr_slave_0 left promiscuous mode [ 211.363869][ T21] device hsr_slave_1 left promiscuous mode [ 211.420762][ T21] team0 (unregistering): Port device team_slave_1 removed [ 211.431390][ T21] team0 (unregistering): Port device team_slave_0 removed [ 211.441770][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.477670][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.553753][ T21] bond0 (unregistering): Released all slaves [ 211.743768][ T7869] Bluetooth: hci0: command 0x1001 tx timeout [ 211.749867][ T8084] Bluetooth: hci0: sending frame failed (-49) [ 212.223852][ T7869] Bluetooth: hci1: command 0x1001 tx timeout [ 212.229987][ T8084] Bluetooth: hci1: sending frame failed (-49) [ 213.823785][ T1066] Bluetooth: hci0: command 0x1009 tx timeout [ 214.303836][ T1066] Bluetooth: hci1: command 0x1009 tx timeout 01:20:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCSETA(r0, 0x5412, &(0x7f0000000040)) 01:20:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 01:20:00 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) 01:20:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:00 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20010, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x15, 0x9000000}) ioctl$KDGKBMODE(r1, 0x4b44, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB="2c776e647f6fdb", @ANYBLOB]) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b) getpid() ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) 01:20:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 01:20:00 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) 01:20:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 01:20:01 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20010, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x15, 0x9000000}) ioctl$KDGKBMODE(r1, 0x4b44, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB="2c776e647f6fdb", @ANYBLOB]) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b) getpid() ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) 01:20:01 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) 01:20:01 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) 01:20:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCSETA(r0, 0x5412, &(0x7f0000000040)) [ 219.597399][ T8171] IPVS: ftp: loaded support on port[0] = 21 [ 219.648198][ T8171] chnl_net:caif_netlink_parms(): no params data found [ 219.675214][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.682307][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.690132][ T8171] device bridge_slave_0 entered promiscuous mode [ 219.697690][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.704876][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.712406][ T8171] device bridge_slave_1 entered promiscuous mode [ 219.729304][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.739756][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.758379][ T8171] team0: Port device team_slave_0 added [ 219.765137][ T8171] team0: Port device team_slave_1 added [ 219.816400][ T8171] device hsr_slave_0 entered promiscuous mode [ 219.823732][ T1066] Bluetooth: hci0: command 0x1003 tx timeout [ 219.829838][ T8084] Bluetooth: hci0: sending frame failed (-49) [ 219.854090][ T8171] device hsr_slave_1 entered promiscuous mode [ 219.893828][ T8171] debugfs: Directory 'hsr0' with parent '/' already present! [ 219.908167][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.915255][ T8171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.922569][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.929634][ T8171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.958591][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.970627][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.979411][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.988001][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.997466][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 220.008930][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.019420][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.028061][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.035111][ T7862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.047203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.055750][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.062900][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.079308][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.095801][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.104441][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.113380][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.122372][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.132621][ T8171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.148490][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.156875][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.167562][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.623724][ T17] Bluetooth: hci1: command 0x1003 tx timeout [ 220.629802][ T8084] Bluetooth: hci1: sending frame failed (-49) [ 220.646727][ T7] tipc: TX() has been purged, node left! [ 221.284231][ T7] device bridge_slave_1 left promiscuous mode [ 221.290921][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.334310][ T7] device bridge_slave_0 left promiscuous mode [ 221.341333][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.903775][ T2414] Bluetooth: hci0: command 0x1001 tx timeout [ 221.909875][ T8084] Bluetooth: hci0: sending frame failed (-49) [ 222.034430][ T7] device hsr_slave_0 left promiscuous mode [ 222.083774][ T7] device hsr_slave_1 left promiscuous mode [ 222.160279][ T7] team0 (unregistering): Port device team_slave_1 removed [ 222.171451][ T7] team0 (unregistering): Port device team_slave_0 removed [ 222.182318][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.267748][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.345981][ T7] bond0 (unregistering): Released all slaves [ 222.703718][ T7869] Bluetooth: hci1: command 0x1001 tx timeout [ 222.709870][ T8084] Bluetooth: hci1: sending frame failed (-49) [ 223.983835][ T7862] Bluetooth: hci0: command 0x1009 tx timeout [ 224.784411][ T7862] Bluetooth: hci1: command 0x1009 tx timeout 01:20:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCSETA(r0, 0x5412, &(0x7f0000000040)) 01:20:10 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) 01:20:10 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) 01:20:10 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20010, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x15, 0x9000000}) ioctl$KDGKBMODE(r1, 0x4b44, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB="2c776e647f6fdb", @ANYBLOB]) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b) getpid() ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) 01:20:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:10 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) 01:20:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCSETA(r0, 0x5412, &(0x7f0000000040)) 01:20:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 229.504865][ T7] tipc: TX() has been purged, node left! [ 230.122482][ T8231] IPVS: ftp: loaded support on port[0] = 21 [ 230.143739][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 230.151153][ T8084] Bluetooth: hci0: sending frame failed (-49) [ 230.527438][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 230.633011][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.640353][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.648342][ T8231] device bridge_slave_0 entered promiscuous mode [ 230.679396][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.686797][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.695139][ T8231] device bridge_slave_1 entered promiscuous mode [ 230.711036][ T7] device bridge_slave_1 left promiscuous mode [ 230.717922][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.764228][ T7] device bridge_slave_0 left promiscuous mode [ 230.770454][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.863706][ T7869] Bluetooth: hci1: command 0x1003 tx timeout [ 230.869768][ T8084] Bluetooth: hci1: sending frame failed (-49) [ 231.473888][ T7] device hsr_slave_0 left promiscuous mode [ 231.513787][ T7] device hsr_slave_1 left promiscuous mode [ 231.560182][ T7] team0 (unregistering): Port device team_slave_1 removed [ 231.570980][ T7] team0 (unregistering): Port device team_slave_0 removed [ 231.581759][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.617913][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.693847][ T7] bond0 (unregistering): Released all slaves [ 231.787814][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.798605][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.816109][ T8231] team0: Port device team_slave_0 added [ 231.822680][ T8231] team0: Port device team_slave_1 added [ 231.875797][ T8231] device hsr_slave_0 entered promiscuous mode [ 231.904139][ T8231] device hsr_slave_1 entered promiscuous mode [ 231.964196][ T8231] debugfs: Directory 'hsr0' with parent '/' already present! [ 232.046770][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.061043][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.071746][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.081727][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.095468][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.107652][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.116620][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.123698][ T7865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.148241][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.158941][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.170146][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.179835][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.186973][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.198614][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.208027][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.218577][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.228007][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.233701][ T7869] Bluetooth: hci0: command 0x1001 tx timeout [ 232.242268][ T8084] Bluetooth: hci0: sending frame failed (-49) [ 232.242674][ T8231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.263394][ T8231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.279111][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.287723][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.298980][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.319196][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.327105][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.337510][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.347052][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.943770][ T17] Bluetooth: hci1: command 0x1001 tx timeout [ 232.949977][ T8084] Bluetooth: hci1: sending frame failed (-49) [ 234.086318][ T7] tipc: TX() has been purged, node left! [ 234.233729][ T7] tipc: TX() has been purged, node left! [ 234.303735][ T17] Bluetooth: hci0: command 0x1009 tx timeout [ 234.396410][ T7] tipc: TX() has been purged, node left! [ 235.023794][ T1066] Bluetooth: hci1: command 0x1009 tx timeout [ 236.414821][ T7] device bridge_slave_1 left promiscuous mode [ 236.421222][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.484389][ T7] device bridge_slave_0 left promiscuous mode [ 236.490563][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.534902][ T7] device bridge_slave_1 left promiscuous mode [ 236.541130][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.594268][ T7] device bridge_slave_0 left promiscuous mode [ 236.600463][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.644761][ T7] device bridge_slave_1 left promiscuous mode [ 236.651243][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.694471][ T7] device bridge_slave_0 left promiscuous mode [ 236.700642][ T7] bridge0: port 1(bridge_slave_0) entered disabled state 01:20:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) shutdown(0xffffffffffffffff, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r1}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}ppp1{'}}]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 01:20:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) [ 238.966110][ T7] device hsr_slave_0 left promiscuous mode 01:20:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) [ 239.013804][ T7] device hsr_slave_1 left promiscuous mode [ 239.086596][ T7] team0 (unregistering): Port device team_slave_1 removed [ 239.109750][ T7] team0 (unregistering): Port device team_slave_0 removed 01:20:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) [ 239.136022][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 01:20:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) [ 239.229480][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 01:20:22 executing program 2: unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001380)={0x0, ""/115}, 0x319abb17, 0x0, 0x4800) [ 239.309569][ T7] bond0 (unregistering): Released all slaves 01:20:22 executing program 2: unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000a2439b3bb10d9f7a46a2550657be7f2a12c05febc68693f0deccf23361ba7d1ee0f0687c05a5f1a97a3d6d1ab2b1e0dec64d98dcfe121fcc242071c603f53cadbae796d86def1e7a5a67b19dfbc3aa21a14c8ca8b6635216e60a0a994b77f48f5b821eed42ce0b33fd978fa3e599e7527075d5d3227b92f25fbf1b5dd7606e1302f46898805730ae1d6856d91f22bd63958d9cbcf7b39e284ef44eaf33f0e2b6a3172933f0188c3a709fec947c7fb93573a9d21e7752ecc929fccba44f011eaaa5274450a2098e07959b28f87c3180d824bc08310147038391e73107a424fb02fa95def4ac0d9466bdcb6887f1f53b4a16ffdc4a51ae3d24a0463c13a04106a175939151ee776f4460f3f7e8b6da21305bcef9b93bb4bea964a1ff2898905dc4f6e8379f1ebd477f689b06f8cf87dcd4219a8621e628bb7a5f7d7ab959e0c14cc990103134e3f55501c58c57fb011b15df475961bad4e6f9e2294a10babd37c7ae4f02233cf2c4d3ad47195424c05ee5e27332160c3acbd1f6cb28abe4c2a2499146b1a86659fe70f87978904cf46727072f02a4c6bd866dc9dd1acd2d18a19370de789ef3284361ff834e2a80fc5eb3e8ae4611ce88ee18c592e8baa5cd636a145a493dd4835eff97dc0f00b403aa806105013ece26669a6291b4e93cb7205f69a026ec56869155f7205c07630954f1a53c9b7417340d7f9a0ca3ce546e5c61aa194543634515543e6943767a003737600571adf966b99ce5b02432d2a9dddfdc2b7eafa89ce065c38e9a69b769c3b8a3b6942c322536f163d8584d5ec163935a05cd27f9b2a35258065a1a1dfb9740584cb759e93fcc6bcdce5f514b26f5be587b820b6f594f2c9b3730a1cf3ae749870d3ac8aad0e2a2a09f7b7b0ea1de3ed54aef38bcfde3450e64e5da5dc4a168962a22afba852522906a407b8688a1210f9d087093e437e0d47b7b1591d73a42e0fc872f01463e296b0a1d99a1758cb935069c89dfdabcecaf5436ce548c1fd3dfea2d6cb86775bebeb339e6612317ac74c99e8196ffd58402b96bd40bf91bb5ed065d1ea0f4aedf4946d090f745bff808cf708c8da46f7d1f87a01f4e0ea4cf0b7c37bd964f0f3f510a0d927799abdc5ea55514b7886e4e370ea9a1645281029ce45c80f7ac20714cf4963f8db26bbe4139c68cf3bdcc604a42990b7993364f1fd637d64498951afb5c239c0dd3ea9da6d058842c5fc4b7162c6c57518d5135bdbf2e03b3ce9b60c9322cfede32bead5986f24f4a3ea7984a02eb7600d95b6cd660777742c3891d3fbb1e106af9a75b5693b0db26e71cc13b7da29d816969ffc2447add1a0a1f8c35d3c99ee891e320c421c61aeb71855e4159ff5a6e2c671da8c3aaabb3b8d8001a91f6d6b019919293c5b7d76e38374385dac84b1edc776e643f1c6c9e621c8798edad8d8b9465a45146e355ad639770508d55f9a8a74fe03e157bbc3410084146edb178b92954ba0c40f44fa71c600bc29521190de260e3243a1e22d0e0ecf8e55884b2eba3c2d1b20788011792a9fcf949e2a411fae9f7c27646462600609ab4b99efab693d97ab364ec8c15addc0b94fc935bfd124598970d8af469dc83f68abf0a4c347c0c01dd5aa093c64268041732f6e5a295c7e2e07ebce3b32396f4f60c667ed006a783658904cad0491ea33b3a525f69b6b10044965f1ca8f4476e0c617260f6fceb746e1c93a679523ac15b70bb1226f6ccabca940368ba8bec006ce3373e30b91c9fd9a6a6f0ba179db25ede325f6ddb3c414d19ead967d878b3ca0e7bea5bbbe4e7014877fd411add32187027f06e881c94a697840cc1b7803111c5190f2eaf43d8c01996d30c8458a357c17273b6b30e5a55466ce5adce8ed780e17a230fa2258a4bc104df733a9ff100e071a6b5674b5d6239f33f09dbace16a758466e5c465ada180e9c25e6d0633cb961003742bdd20bb6e822da770baa268594f1f7cd92c7886245adc400de819d88cf8897b11e0bbd8a892ca9eb43224400824a60bb0a07f83e1369018df120756c65a9c604962656419ff5fd76033545458d19d1a8c7b6cac5d9b79b8c4ee4832a9339d1f477415b203f4886e9a44e4a42532bce44ea761243703575a38188c25f300501ee9b44335dd6e7def9c59143692d4fdf411c18499b3306dabfc53c4bba72c7b26910760a61305e10f108151a8e0b56db2707e4715c28a1120883c96ccec9c6bc58420448961688daabd9ee935eb87294a24ec459edb203531cbaa0545e4219690ae054111e4afb16dffcf0496512655fc62cbe3ceb3c64938b282fcc2a98a00221ad46eefe76d9a3a17975aedd7d605521c473d2b7d04a447b4521a868c946d424db918706c7ddf8f2bb0aaea8b93808b92a489b7d1f1756eb0af1b1b027f6bed31b0011a389ad48bce73eb82092b462975f73f71f81592bad57278ecec665b928469fe63361ca6c5ec40fa490f04d330e58add1aca36ea6d112f0bcf84a4eea097713d551b4369d62a3ebf108a7c041bee33d2e67118c0dc58530b157a2934199c0608f3a615a3cda1f93f382ac3c022a0e341210283c0f435074dfd7375b8d56cfc6a4882a5c25051415936a692435b7f9cbef6e73f9bed1798da2b83047203b2fd64f869e99c1f8c878fed462d9894d2c9e2742954d6a1db87eb983de9ab62bd1a4c14df79e0596761c6d482c25c688fa31b4586bb791f93baef1c5f4a8cb961769d839763b172d58bd3fc01b0a41067d704da744bf1192e1db18b5c3149e8d7f007c3ab10fb511b9119919f69642f52df528103faf84291013e81930da0710695b2adf326bd037477dad23b0ce234befdef23bd135cb3ae05198742987fe511a06286ad95d49fa0356f14f42baf9f4116f51f8cab5b49e83294866a27dc4d7e5497ebe6d0f0200faca864e61743c09408b2658f20ce67bbea2ce86cc7e20897b59645168af25a391aab732f305a077dcd20a24bda00fa68dd664c36f7b02d0fc3d29c64642f37472cce6dff80f983c537971829d694997250423719c254299b336ff5790b64e7232c2fcc4eaa9b1ce004300e9ff19a6895fd2eb271ed88e189d32d7cae13652c2adad08206b51e2c36be7cefdaa38994b1a5a61578a3cd947d1ddad1b81d97415315a9e8e88926b8f0e833b303b1b22dacb3babfbb8af549add31754c31ca08c7f04c1cf39ee9d350fdaecee1557985fbcb943c130b2976d72558efe6767a94e2feed76d5ba09da2886458f0a41ac324128a9a5734782203854ebb5172935f18e05042312db9613629bcd4b49db1b0505244bdc59001788ac593889994ca42aac729936ce88135e6bba8b6343bed40f8c89275cf617b00f8038a45e92f171ed0f179bb233ce6b5b12a3828eef1c83b129f60e1aa43b52541888b52414996349a9589cd2a3d2ecca43693b1896dfadae5f40ddd5571793a009aee7129a342068008184b4db3b46141ebaaee34d545b448087d48ca14bc49017ccf98a873df158d47ae0a9f7e6240ec2004acc817e5b52c131cf81d123d60c79377d4cbf1ed5d14ebc6ffcf9e346a4eb00f99ecd68578081b221f0755f467bdc8c9ca084e5fe452c13257c65893640a42fe298aff170cbab606f2b1e2a791b6d0a516e44dd564abfb03915e034473731f17674cf1dbf88f6bc0a2c33428b1a4c82bfa5547aa512257e8f76ab9b7be7cff3d6d5bd5a0ad7768c419b729fbdee9949a2be5aa8675b05c68f4fb7df6509f9839f959dd5ac6bd11086edaafe741ff9a5cccae5819a58990f4f8cd9013a546513433b62861daf42f9e3b33ba5efc346021bf9af634dde27caaa3226bfc6b9539b499e458d39c0efdd539ed988db45ca9c9113b6bccf6e158cb4fe42f79eb8148a99d06a7f3d899527e4523c854f7d95e7147e4e1da3adfc7468bed971ea247ebc0a7a1199b8879f4f0f70e6f90ced3e4ad3d4c5dc30e5a92ee4f9cb5695a9e7b45b9a4acd7f496f86748d06a2528e1271dcfe1a797595fcf60eedb3b0860829f03581996ff03105fb6c24ce8f88e2147366b2b69916777932c8fdcb1d25dc17eb41910ade00a0edc9aa9271d512531d28d3bd4c27eefdc6540327557c69d664dedb2655839f880b0a4c028749ffad5ed548b6bed3d73a60d54399c93101e6bbc6e116a60086af7ce4dba89ce099e6ad9d9cec713180ba21e000a23b5ef44b7dc1655fa88362ca574f27a049d6bf46e1f7e9dc9fb76a38e87b8f975d34e3fdf94d2b70203a6df95423a76939955bb730c9aeae69ddc8e6e2220a9835195f82e6c10fbb4dfbcbf2eeca59cfd67d16b8ae788e94be3201c9092403daac2d1d1ba7dd3e21391110c16d8dab96458ff6ad66d14ed2c84c2653b450306c632ab1249e6d4e5e7c75dc36c7bc77e01199bd0f4fa74cf4906f314efd65f86618153473e30e12342b1e19a839ab334e5d1198f268a48bd67709133cb41336102bb815b682ffb183becce38a5e358f1151ce97d6e0b64d1ff3bbce5f3844202c36de71319ec55a07c46e5ccde67af176ec445b4e796b6c35815b22ac1dfc5b873408d859da74734a3672ee27367377a341f93d9d9799d53cbcff55d360e69eef7fbed0b8ca718d87b24c134b597f592a95d154dd93b61800f1ca930708a3a0806a63ff5d5576bd06dd69b0ca83f51124877d0bd0c5e5363e14ec9584f2baaf1e9bc9e3cd890c707f9d26757f0cf40411e7f2e1966cb2dd637772d7b848f0e4ddf87f365e228bee8de4480b27f0b1b95205d5bb8ba8b26ce1a2a8471ba2eb8c7c1013d8bb307b5151fbbe2bcb4a215e9e58f6c09dfce6df5f150262bec6e2d8005bf3c2c71ea4fea4e2bb80b6b44ed693f64282b338903cc28e3638285fedcc0d2452d0806d2332c1e7c6b1d72647d67ff3ecc44aa478feabcfb085a505880090eae5d600bf78bc9402206339bb0c7703920c0075c89edd6c566be572ae31cf721560b47b499add1fbbdfa26c62b03ab05c7760ddace916296f5c2f8e13284c5b897684109d19226ba7c810a474dcce11886a0febd44c3d61044a975e67707d27d5319ef80178208532606a66ea42633271661122f53956473ee4086d58d993cb8c10db6d2604101247756c24d3b9112f4bf1d35a058bb583d9ab88d4d6af2b871aecb7ed8630e77631358f081b5e39783812f293050041ce73df718189dedf80a0120ff491c7830c6c30ba4fece81be9212d514072a4fa8e9b90226205970722ca4a06d2e3a4f36773a2c49566be5a31d96b2a9d084d34dc8ef70669142ae845a132ea3a330a9103d033a393c739a31eba931f7133fdc5ce2d048917c581737026cec013abe8ba85720ceed52431e09c65afceea0a5afc9bb792b058a982a3e67eabbfa50dc92fe0d9ea0af4e81afcaab8575cff1213f566b6e6318c00ba6e193434780c476b8046395e151bd1b1a6e015fc78127fa4ca19b2cff7f43c270f528844c6f7b1d4a90527e7be89fae09bdfdec77a4ab65099f1772509224cd4badbb242fa76fa85f6197d9a661cd9e7d3a2f426bd8dd2bc6f0c62d6ba71c2ca7cc5322be08baf857feef4e95e7e859df0b77391b87ca77f3b0a7f43e8f330d1c61468578b73cc6132ded6a6b82313bef91cf875c5bf855086a60000000000f32a7a55a2166b0869af208aaab2408a62b9413c71c0d7111269a61642e26a769f4a0f128d6a3e163292b889bdbb4d56ac2569cfcd17fe153f12516cbee98cd0b3353c8515093c6e36e936acf8aecdc717cc06a8662a5dc8b7afff480f26c3f12b20bfb85b787f24debf9468f49e857396362012f0ff8c2fe1f1d917ba701d82d1b38e808247aa3d6d724a2e64ad86dccf700569631d89c5ea6c5d537d0fed1887dea642d1a201792007b32991bf800f10ce7399e46cbb9aa3f757e2915542d552b51b976a739ba7dcd124fe27b586b642b026c3beb64ec7d30d006608a807ee0cd6de344a66cb98199e142331a7aa2021031ff6541676f8a4a1b7e737c40bab4cbddbf08672d6d7d45a35ebc4b2172d3e24227e4343667a73908a95da3c446443735a6220f339ce9ea96a8518220ec30c9615ab2722652a13eddf4d54c6d95105d8d7b2bda1b1956f1f4ec1a8b6fadc50986605cc9efb1058adc59d34e0e54184537cb6ca8359eb64546659ebe642a1d338c7e49314f6f61ce390000005e2cd29af1b74e6208fff1a111f6f31bf566ca732f60caf9c80c44dff4ea09dfaed7326fa24576d717a3b7f3cd7eeeed5dbff2fe4d4cb53ce2209945af5496610d8b370476456bea15e27cfb6298d70d53e272087c9e471c85a0e7870bbbfef00b395235dbf323099a258a07a29308dd1809daa2995bccc9e8d3d90ad1c9e5017bdc00b0d4b100a25276b802053e340d37e5ca3baddebc50e6cbcbb58b13199c4f501661ef4779c0aad70d5dab2c05f4232ae0a2620805cc6c2dc7343fff473b51853f6b7289d15dd57a7851dd7556fe66391b75695a6f5af9a7adc293513e71d622efba5592327fdd8aa2e010a18f819497b12ba777a197907cfad525db2d5b3bf8f33a61fc0f86c769388ef68ee1fd3cb5e2d79e674d41c622cce5fb09d8455a424e04c5ab7086d583c3cfd9ed4a247966efce6cf9a2e2c79f2af358e74f3182a2ca1af8eda755982c2bab6d3ecea136880111c11a516a55374f677f87a552ac0c5f9d4a38cc36a54e"], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001380)={0x0, ""/115}, 0x319abb17, 0x0, 0x4800) [ 239.434008][ T7] device hsr_slave_0 left promiscuous mode [ 239.473891][ T7] device hsr_slave_1 left promiscuous mode [ 239.551617][ T7] team0 (unregistering): Port device team_slave_1 removed [ 239.562710][ T7] team0 (unregistering): Port device team_slave_0 removed [ 239.573567][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.657086][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.732444][ T7] bond0 (unregistering): Released all slaves [ 239.893922][ T7] device hsr_slave_0 left promiscuous mode [ 239.943842][ T7] device hsr_slave_1 left promiscuous mode [ 240.040192][ T7] team0 (unregistering): Port device team_slave_1 removed [ 240.050335][ T7] team0 (unregistering): Port device team_slave_0 removed [ 240.061069][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.097152][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.192966][ T7] bond0 (unregistering): Released all slaves [ 240.392347][ T8334] IPVS: ftp: loaded support on port[0] = 21 [ 240.399174][ T8339] IPVS: ftp: loaded support on port[0] = 21 [ 240.407961][ T8338] IPVS: ftp: loaded support on port[0] = 21 [ 240.438850][ T8340] IPVS: ftp: loaded support on port[0] = 21 [ 240.476067][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 240.547839][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.555007][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.562886][ T8334] device bridge_slave_0 entered promiscuous mode [ 240.572884][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.580378][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.588143][ T8334] device bridge_slave_1 entered promiscuous mode [ 240.618352][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.631356][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.759234][ T8334] team0: Port device team_slave_0 added [ 240.766467][ T8334] team0: Port device team_slave_1 added [ 240.947432][ T8334] device hsr_slave_0 entered promiscuous mode [ 241.005223][ T8334] device hsr_slave_1 entered promiscuous mode [ 241.065209][ T8334] debugfs: Directory 'hsr0' with parent '/' already present! [ 241.091066][ T8338] chnl_net:caif_netlink_parms(): no params data found [ 241.102114][ T8339] chnl_net:caif_netlink_parms(): no params data found [ 241.118803][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.126064][ T8334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.133391][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.140481][ T8334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.199987][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.208789][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.217969][ T8339] device bridge_slave_0 entered promiscuous mode [ 241.226995][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.234996][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.242634][ T8339] device bridge_slave_1 entered promiscuous mode [ 241.249954][ T8340] chnl_net:caif_netlink_parms(): no params data found [ 241.277971][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.285193][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.293060][ T8338] device bridge_slave_0 entered promiscuous mode [ 241.311898][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.321589][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.329335][ T8340] device bridge_slave_0 entered promiscuous mode [ 241.337412][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.345115][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.353104][ T8340] device bridge_slave_1 entered promiscuous mode [ 241.366187][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.377941][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.385366][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.394988][ T8338] device bridge_slave_1 entered promiscuous mode [ 241.401929][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.411113][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.429926][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.451342][ T8339] team0: Port device team_slave_0 added [ 241.464257][ T8339] team0: Port device team_slave_1 added [ 241.481651][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.546242][ T8339] device hsr_slave_0 entered promiscuous mode [ 241.604090][ T8339] device hsr_slave_1 entered promiscuous mode [ 241.653782][ T8339] debugfs: Directory 'hsr0' with parent '/' already present! [ 241.663105][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.674490][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.690081][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.709215][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.727523][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.735728][ T8340] team0: Port device team_slave_0 added [ 241.747833][ T8340] team0: Port device team_slave_1 added [ 241.760619][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.768721][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.790677][ T8338] team0: Port device team_slave_0 added [ 241.797215][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.808324][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.817186][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.826024][ T7869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.895956][ T8340] device hsr_slave_0 entered promiscuous mode [ 241.934128][ T8340] device hsr_slave_1 entered promiscuous mode [ 241.983975][ T8340] debugfs: Directory 'hsr0' with parent '/' already present! [ 241.992422][ T8338] team0: Port device team_slave_1 added [ 242.000965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.009907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.018383][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.025595][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.105855][ T8338] device hsr_slave_0 entered promiscuous mode [ 242.174039][ T8338] device hsr_slave_1 entered promiscuous mode [ 242.223817][ T8338] debugfs: Directory 'hsr0' with parent '/' already present! [ 242.235241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.264886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.273892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.282647][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.291925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.309297][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.318682][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.368244][ T8334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.378986][ T8334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.403781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.412710][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.421624][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.430163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.439706][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.454573][ T8339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.501513][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.519125][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.527533][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.535878][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.543895][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.554786][ T8339] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.566711][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.574887][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.605362][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.612968][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.620523][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.629621][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.638110][ T2414] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.645209][ T2414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.652987][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.665753][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.681351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.692848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.701969][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.709030][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.717537][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.726752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.735845][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.743163][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.754751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.768775][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.776798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.791029][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.799421][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.809203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.817974][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.825044][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.877482][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.887565][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.897375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.906746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.915927][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.924717][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.933452][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.942111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.951351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.960437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.969607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.978412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.986905][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.994055][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.002108][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.011008][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.020036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.028489][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.036882][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.050491][ T8338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.061676][ T8338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.076253][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.085402][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.096437][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.105424][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.115548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.123430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.135632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.144465][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.151564][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.174687][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.182887][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.192350][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.201465][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.212588][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.232488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.240584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.259486][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.285428][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.347300][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.395103][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.427985][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.436968][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.452486][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.461950][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.472815][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.487779][ T8340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.502078][ T8340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.513071][ T21] tipc: TX() has been purged, node left! [ 243.525203][ T8339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.534336][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.542425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.611502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.635787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.656277][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.669592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.872552][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.931144][ T8338] ================================================================== [ 243.939289][ T8338] BUG: KCSAN: data-race in alloc_empty_file / percpu_counter_add_batch [ 243.947536][ T8338] [ 243.949891][ T8338] read to 0xffffffff85c08548 of 8 bytes by task 8381 on cpu 1: [ 243.957784][ T8338] alloc_empty_file+0x2d/0x180 [ 243.962558][ T8338] path_openat+0x74/0x3580 [ 243.967154][ T8338] do_filp_open+0x11e/0x1b0 [ 243.971740][ T8338] do_sys_open+0x3b3/0x4f0 [ 243.976158][ T8338] __x64_sys_open+0x55/0x70 [ 243.980666][ T8338] do_syscall_64+0xcc/0x3a0 [ 243.985179][ T8338] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 243.991254][ T8338] [ 243.993589][ T8338] write to 0xffffffff85c08548 of 8 bytes by task 8338 on cpu 0: [ 244.001228][ T8338] percpu_counter_add_batch+0xca/0x150 [ 244.006694][ T8338] alloc_empty_file+0xd2/0x180 [ 244.011586][ T8338] path_openat+0x74/0x3580 [ 244.016010][ T8338] do_filp_open+0x11e/0x1b0 [ 244.020520][ T8338] do_sys_open+0x3b3/0x4f0 [ 244.024937][ T8338] __x64_sys_open+0x55/0x70 [ 244.029611][ T8338] do_syscall_64+0xcc/0x3a0 [ 244.034119][ T8338] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 244.039993][ T8338] [ 244.042312][ T8338] Reported by Kernel Concurrency Sanitizer on: [ 244.048478][ T8338] CPU: 0 PID: 8338 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 244.057058][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.067108][ T8338] ================================================================== [ 244.075207][ T8338] Kernel panic - not syncing: panic_on_warn set ... [ 244.081796][ T8338] CPU: 0 PID: 8338 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 244.090370][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.100422][ T8338] Call Trace: [ 244.103758][ T8338] dump_stack+0x11d/0x181 [ 244.108357][ T8338] panic+0x210/0x640 [ 244.112254][ T8338] ? vprintk_func+0x8d/0x140 [ 244.116872][ T8338] kcsan_report.cold+0xc/0xd [ 244.121468][ T8338] kcsan_setup_watchpoint+0x3fe/0x460 [ 244.126870][ T8338] __tsan_unaligned_write8+0xc7/0x110 [ 244.132241][ T8338] percpu_counter_add_batch+0xca/0x150 [ 244.137702][ T8338] alloc_empty_file+0xd2/0x180 [ 244.142484][ T8338] path_openat+0x74/0x3580 [ 244.146901][ T8338] ? ___cache_free+0x2e/0x320 [ 244.151587][ T8338] ? path_mountpoint+0x316/0xdb0 [ 244.156789][ T8338] ? putname+0xb1/0xe0 [ 244.160858][ T8338] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 244.166751][ T8338] ? __read_once_size+0x41/0xe0 [ 244.171623][ T8338] do_filp_open+0x11e/0x1b0 [ 244.176132][ T8338] ? __check_object_size+0x5f/0x346 [ 244.181352][ T8338] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 244.187510][ T8338] ? __alloc_fd+0x2ef/0x3b0 [ 244.192021][ T8338] do_sys_open+0x3b3/0x4f0 [ 244.196470][ T8338] __x64_sys_open+0x55/0x70 [ 244.201149][ T8338] do_syscall_64+0xcc/0x3a0 [ 244.205660][ T8338] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 244.211556][ T8338] RIP: 0033:0x458880 [ 244.215459][ T8338] Code: 31 c0 e9 45 ff ff ff 0f 1f 00 80 3f 00 0f 84 f7 00 00 00 55 53 b9 02 00 00 00 be 00 08 09 00 89 c8 48 81 ec 98 00 00 00 0f 05 <48> 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 [ 244.235068][ T8338] RSP: 002b:00007ffe4f471220 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 244.243485][ T8338] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458880 [ 244.251477][ T8338] RDX: 00007ffe4f4723d0 RSI: 0000000000090800 RDI: 00007ffe4f472460 [ 244.259452][ T8338] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000009 [ 244.267571][ T8338] R10: 0000000000000005 R11: 0000000000000202 R12: 00007ffe4f472460 [ 244.275633][ T8338] R13: 0000000000a86940 R14: 0000000000000000 R15: 00007ffe4f4734f0 [ 244.285215][ T8338] Kernel Offset: disabled [ 244.289658][ T8338] Rebooting in 86400 seconds..