[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.618349][ T25] audit: type=1800 audit(1572717271.479:25): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 35.669842][ T25] audit: type=1800 audit(1572717271.479:26): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 35.702469][ T25] audit: type=1800 audit(1572717271.479:27): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. 2019/11/02 17:54:43 fuzzer started 2019/11/02 17:54:45 dialing manager at 10.128.0.105:41349 2019/11/02 17:54:46 syscalls: 2540 2019/11/02 17:54:46 code coverage: enabled 2019/11/02 17:54:46 comparison tracing: enabled 2019/11/02 17:54:46 extra coverage: extra coverage is not supported by the kernel 2019/11/02 17:54:46 setuid sandbox: enabled 2019/11/02 17:54:46 namespace sandbox: enabled 2019/11/02 17:54:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/02 17:54:46 fault injection: enabled 2019/11/02 17:54:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/02 17:54:46 net packet injection: enabled 2019/11/02 17:54:46 net device setup: enabled 2019/11/02 17:54:46 concurrency sanitizer: enabled syzkaller login: [ 58.694225][ T7143] KCSAN: could not find function: 'poll_schedule_timeout' [ 62.772819][ T7143] KCSAN: could not find function: 'calc_wb_limits' 2019/11/02 17:55:09 adding functions to KCSAN blacklist: 'atime_needs_update' 'process_srcu' 'mm_update_next_owner' 'balance_dirty_pages' 'ip_finish_output2' 'wq_watchdog_reset_touched' 'blk_mq_sched_dispatch_requests' 'shmem_file_read_iter' 'sit_tunnel_xmit' 'ext4_has_free_clusters' 'xas_clear_mark' 'tomoyo_supervisor' 'copy_process' 'snd_seq_check_queue' '__dev_queue_xmit' 'ktime_get_real_seconds' 'find_get_pages_range_tag' 'kvm_write_tsc' 'add_timer_on' 'ext4_mark_iloc_dirty' 'ktime_get_with_offset' '__hrtimer_run_queues' '__delete_from_page_cache' '__filemap_fdatawrite_range' 'kvm_arch_vcpu_load' 'common_perm_cond' 'tcp_poll' 'dd_has_work' 'mem_cgroup_select_victim_node' 'blk_mq_get_request' '__skb_wait_for_more_packets' '__rb_erase_color' 'blk_mq_run_hw_queue' '__do_page_fault' 'rcu_gp_fqs_check_wake' 'virtqueue_get_buf_ctx' 'page_counter_try_charge' 'find_next_bit' 'poll_schedule_timeout' '__alloc_file' '__snd_rawmidi_transmit_ack' '__add_to_page_cache_locked' 'integrity_iint_find' 'sk_stream_wait_memory' 'ep_poll' 'generic_fillattr' 'generic_write_end' 'install_new_memslots' 'shmem_add_to_page_cache' 'commit_echoes' 'mem_cgroup_protected' 'tcp_add_backlog' 'vm_area_dup' '__find_get_block' 'generic_permission' 'iput' 'audit_log_start' 'mod_timer' 'taskstats_exit' 'pid_update_inode' 'tick_sched_do_timer' 'calc_wb_limits' 'pcpu_alloc' 'update_defense_level' '__acct_update_integrals' 'ksys_read' 'blk_stat_add' '__dentry_kill' '__nf_conntrack_find_get' 'n_tty_receive_buf_common' 'wbt_issue' 'p9_poll_workfn' 'run_timer_softirq' 'add_timer' 'xas_find_marked' 'ext4_nonda_switch' 'ext4_setattr' 'tcp_v4_rcv' 'list_lru_count_one' 'shmem_getpage_gfp' 'exit_signals' '__mark_inode_dirty' 'do_syslog' 'ext4_free_inodes_count' 'rcu_gp_fqs_loop' 'snapshot_refaults' 'handle_mm_fault' 'pipe_poll' '__ext4_new_inode' 'timer_clear_idle' 'ktime_get_seconds' 'icmp_global_allow' 'kernfs_refresh_inode' 'inet_putpeer' 'tick_do_update_jiffies64' '__nf_ct_refresh_acct' 'do_nanosleep' 'task_dump_owner' 'kauditd_thread' '__skb_try_recv_from_queue' 'do_wait' 'snd_seq_prioq_cell_out' 'tick_nohz_idle_stop_tick' 'fasync_remove_entry' 'osq_lock' 'ext4_free_inode' 'datagram_poll' 'ext4_da_write_end' 'copy_creds' 'echo_char' 'blk_mq_dispatch_rq_list' 'pipe_wait' 17:59:24 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000c0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x6, {0xced, 0xff000000, 0x4, 0xff, 0x9, 0xea10}}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080), 0x4) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[0x1, 0xfd6, 0x2, 0xf5, 0x9]}) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000140)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x101000, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000001c0)={0x2}) r3 = fcntl$getown(r2, 0x9) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x4, 0x1f, 0x20, 0x31, 0x0, 0x4, 0x20000, 0x14, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xce6, 0x8}, 0x40, 0x1, 0x20, 0x7, 0x5, 0x8, 0x2}, r3, 0x9, r4, 0x9) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video1\x00', 0x2, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000380)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000003c0)={0x5, 0x63, 0x9, 0x4, 0x15, 0x8, 0x6, 0x1f, 0x80000001, 0x1}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000780)={&(0x7f0000000440)={0xa, 0x4e24, 0xe21, @local, 0x8}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000480)="47a40cc39ff27fac75e9348cc0ae963cdf8e5295a91177c85d0e00b0cd5086342817a2dde2107b49a026dbc539a53095f81a372d5623b75b178e7b12a7023d591a083d84979377e4876ac917cb9b08e1226acf429e8ce1f40bdadc5958b21905d9d74231ebe2e9e955680516fe7df105ae17512105b47bcf5f11bbf1cbb60328ffab38d6c0230d0794faa2af2535d6506588ee86f80157a731bad2", 0x9b}, {&(0x7f0000000540)="8b1219bffa4552bb16c544977b601eec5382c9061d8ef30bffd1711b824c46f448e8c0412d6545c9f139c2bb0a75efb0667eb61d1aa6daca40d50a32b2f6ed75076fcafaf340b23641287ebe90aa55119992ad6af9c43372aee59a8b60c72eb2a917ee0802effeddf23115742f7b63206119686a64da3c300a973ae990a699e90193057961eaeca18f3147f51d5a75ed4fa1302ccccc2c9cb0e17add824eafd2a8d4298f08996ef1e55402fb82e9327a5552af6c29e03f5c73f7841142ac0a889c4e84a59e8dbc1a9e7930d5c51b12d1c30089ef39925b030f819f8809", 0xdd}, {&(0x7f0000000640)="fe7d49f4e2885bb91c634841c606ab4b6da41e5c726ee520ac4e0f45674aa023588f73be23e6e232159ec0510108b562a2485663dfca853859d4b48cb72a267635395dc392d8ae62ade4f88fe1bae5f777eb89104d48a6bf6466a516d8e995e822281b6550bb", 0x66}], 0x3, &(0x7f0000000700)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x87, 0x6, 0x1, 0x8, 0x0, [@loopback, @ipv4={[], [], @multicast2}, @mcast2]}}}], 0x48}, 0x1) r8 = io_uring_setup(0x141, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x18f}) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000840)) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vcs\x00', 0x6a1884, 0x0) ioctl$CAPI_GET_PROFILE(r9, 0xc0404309, &(0x7f00000008c0)=0x80000000) readlink(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=""/215, 0xd7) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000000a40)=""/128, &(0x7f0000000ac0)=0x80) sendfile(r1, r1, &(0x7f0000000b00)=0x401, 0x3f) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000b40)) io_setup(0x9793, &(0x7f0000000c00)=0x0) r11 = syz_open_dev$sndseq(&(0x7f0000000d40)='/dev/snd/seq\x00', 0x0, 0x141400) r12 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/capi/capi20\x00', 0x0, 0x0) r13 = syz_open_dev$adsp(&(0x7f0000000ec0)='/dev/adsp#\x00', 0xdf26, 0x4000) r14 = syz_open_dev$dspn(&(0x7f0000001040)='/dev/dsp#\x00', 0x9, 0x8805) r15 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001140)=0x60) r16 = accept4$x25(0xffffffffffffffff, &(0x7f00000012c0)={0x9, @remote}, &(0x7f0000001300)=0x12, 0x80000) r17 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vsock\x00', 0x4000, 0x0) r18 = syz_open_dev$vcsa(&(0x7f00000014c0)='/dev/vcsa#\x00', 0x29, 0x0) r19 = socket$nl_xfrm(0x10, 0x3, 0x6) r20 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002600)='/proc/capi/capi20\x00', 0x88000, 0x0) r21 = socket$nl_netfilter(0x10, 0x3, 0xc) r22 = syz_open_dev$cec(&(0x7f0000002780)='/dev/cec#\x00', 0x1, 0x2) io_submit(r10, 0x9, &(0x7f0000002800)=[&(0x7f0000000d00)={0x0, 0x0, 0x0, 0x7, 0x7865, r5, &(0x7f0000000c40)="ac71e91f7696c1e60e6cb3c7f86148c6fd1f6b3888b00aec48bd7bd79c9f947cff1baf90fa7473f18c09a6300731fc73994100020e479b76de0c2cba1d73cc093e2bbef8eb4c4400b3eb667c1fe5d34193dac8db6201e81f64c81a89738e1c60fd8d091f60ee4f36c9e9b11f6bbcf4313c0dd27d02b98efaafc1e0ab5305ddad64", 0x81, 0xffffffff00000000, 0x0, 0x2}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0xf, 0x40, r11, &(0x7f0000000d80)="2f73ac86e75e3b55f4d73d206675548844fb8668bb83f8", 0x17, 0x9, 0x0, 0x1, r12}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000e40)="a88d7a4ebbbb2df8de8e3ed30930cb2e1801d63ec992672177fbac46d4f0cf7bd21997eea19d3262bef7e65d533e77c5637ae494e827990f763a5fd1da732541b910b3ad5586ef36a3aa82fb9a8da67350", 0x51, 0x5, 0x0, 0x0, r13}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000f40)="15237442f2a9c9750d1aa2eb537b59789a7d96cf830df7915a711e6239bfade28961e6835090c00ef2311fd62cc9b0d7a1c5e6d509d06c94332bbe73ce36adc38f077954e07ddae7515111a2f1a9b70577ebacfdfb321123a010df6f5e3540e2fee00881ffd5605be170f1c00dc5897cd12256326ae81f3876cec71a6e983c868988f1179d2e46fa6de35465dc7e3da229c4159d673b9ab4133128334cbaaf9bfb791026f2f5f047966493a1f3913399fb5801ca3a187ff21debe6e812b79e379ecfb18b5a8b0eb772ff4f74c506672f02f7d855194144e2a8f95a3a492f6afbbbdc41b586a101b59a61bd6bd09fe08ce076330b68330bfdb4a66c66b4", 0xfd, 0x8, 0x0, 0x0, r14}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x6, r15, &(0x7f0000001180)="d7dce23f41e8bee114ae9763d8c35e6644f50b69c6d4145a28a6ee0c82e7687f48e07bc42fc418d23f9a8aeb7c038ea88e99ed35b232a6a019eb3d3d4cf6152283cb9f56eafe6a157851dd916983cc1832302280e2fcc205849e6a853c23ce608b9775bd7d0cf2ea29102351f25b12d7d579a67cbb91b63503b7fc08af128ec1047475d0f9eacfeb5727d7d2bda572aae3eba9d7aa4afded69ba76485032bf46f8c3a8dcee14c2225cfad66794ec4a74aed7125c1187f8fd63dc543d62cc76f2841534d703be407dbf42352bf2c6874a747a09e64b4965c38ade02191f31350987c55463063800470972e48cef2ad87a719c4a4e4140", 0xf6, 0xffffffff, 0x0, 0x5}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x400, r16, &(0x7f0000001340)="e1b54c5d7699eacccf3f883db34fd6690ef97395e91aadfc27f460153001ff6e8ecd0c040753a2a1cb209bd60bda5f27e761d6180043f0a3f1b78fc0520cfdf34b03170b20b29d3a6666341269d5d60e1e84047fb2e8b4e905b1fc73b5160c38fcde106e7032f53483958266a10ead5a42badcdee879aa06176fe6d087765bd21376962c2c294d29855b2cb7ebe772973da32fa15da6d60a5e17c023f4767302463252130d5618b7276836573cd6c10d6f4372b9a5355a621c9eea8004933c695ca42ee8a709d63919696e68033fe1c8fecd330c8174cbd7937dab3cb2e8b23ff8d86caf71fc17f526", 0xe9, 0x0, 0x0, 0x7, r17}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x2, 0x1, r18, &(0x7f0000001500)="c03d5cf54f5a6ac5cbeae8f8fb0976336c9653012d616a2b7f06510460c28a2212ac0e4bd6e99c37589c8da0544a84f2f332f13bd14c1f81ff98dff3eb3fc4c587f510189c2ae91432ec5525e0e10f3645f7b7c49f0ba6914e16e0fc0ac38a99b50776d74d52c6f0cdf626ab737cb258c1141881cce8b0113821ae64ad93ca15b51d9c91df310c669bd7e9be0a85ba8e6474e16bb1b3272e2b91c4fd16495ceb17a8ba588627e81a75a89f", 0xab, 0x3, 0x0, 0x1, r4}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x6, 0x101, r19, &(0x7f0000001600)="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", 0x1000, 0x100000000, 0x0, 0x3, r20}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x3, 0x8, r21, &(0x7f0000002680)="acfc704807e57ed1dae5cda9fa4afdb77ce1ff76fe4ec88c8d975731eb85b97d4cb733261fe26a16991356f84b1404272539c410e84f1a022745baff97cc09702555adac9cdfeae7d5b533f257fc1c8d12d0af347f979492c0f9f1c323d4673bf347e4bd304ec571c8c9455c8c6b7fa0bd74da6fab2a4ec612884a5c3164622025406aae07e83b29d00d337e85dc679f20081c13183154e92481e28822ef209c6ba87674fe6282232adb9ba5c3774912f0000712401176b50e5dcc23c8819cb72602c082190256537ed6e8dc9c757bfe313b27caf7360fcf9e3d99637d6061", 0xdf, 0xfffffffffffffffd, 0x0, 0x2, r22}]) 17:59:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xa4, 0x20e001) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x7f) r1 = socket(0x11, 0x1fe164373435b38c, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x9, 0x200) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0x13, 0x5, 0x4, "52c81b2000cb5f5c69e48e73be23adb6127b4a28b59b27cd4a27e332d10bb491fba46575696b34b19a3e782d6160b42242b69b3fb472fdef43cb008db82ffb0e", "644d7ec49207f0c55b0aa231cec0789c6f31def17ffa4baf573535b90c39c827", [0x5, 0x8]}) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000200)='/dev/loop#\x00', 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/209, 0xd1}], 0x7, &(0x7f0000001600)=""/95, 0x5f}, 0x101}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/78, 0x4e}], 0x1, &(0x7f00000017c0)=""/97, 0x61}, 0xd9d}, {{&(0x7f0000001840)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000001900)=[{&(0x7f00000018c0)}], 0x1, &(0x7f0000001940)=""/100, 0x64}, 0x727}, {{&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001a40)=""/42, 0x2a}, {&(0x7f0000001a80)=""/30, 0x1e}, {&(0x7f0000001ac0)=""/15, 0xf}, {&(0x7f0000001b00)=""/69, 0x45}, {&(0x7f0000001b80)=""/102, 0x66}], 0x5, &(0x7f0000001c80)=""/4096, 0x1000}, 0x7fffffff}, {{&(0x7f0000002c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d00)=""/70, 0x46}, {&(0x7f0000002d80)=""/185, 0xb9}, {&(0x7f0000002e40)=""/214, 0xd6}, {&(0x7f0000002f40)=""/246, 0xf6}], 0x4, &(0x7f0000003080)=""/97, 0x61}, 0x80000000}, {{&(0x7f0000003100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000003180)=""/246, 0xf6}], 0x1, &(0x7f00000032c0)=""/141, 0x8d}, 0xffffffff}, {{&(0x7f0000003380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000003400)=""/50, 0x32}, {&(0x7f0000003440)=""/96, 0x60}, {&(0x7f00000034c0)=""/4096, 0x1000}], 0x3}, 0x8001}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000004500)=""/62, 0x3e}, {&(0x7f0000004540)=""/104, 0x68}, {&(0x7f00000045c0)=""/206, 0xce}, {&(0x7f00000046c0)=""/138, 0x8a}, {&(0x7f0000004780)=""/94, 0x5e}, {&(0x7f0000004800)=""/147, 0x93}, {&(0x7f00000048c0)=""/133, 0x85}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/145, 0x91}], 0x9, &(0x7f0000005b00)=""/58, 0x3a}, 0x8}, {{&(0x7f0000005b40)=@caif, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005bc0)=""/159, 0x9f}, {&(0x7f0000005c80)=""/171, 0xab}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/245, 0xf5}], 0x4, &(0x7f0000006e80)=""/56, 0x38}, 0x7fffffff}, {{&(0x7f0000006ec0)=@in6, 0x80, &(0x7f00000070c0)=[{&(0x7f0000006f40)=""/2, 0x2}, {&(0x7f0000006f80)=""/54, 0x36}, {&(0x7f0000006fc0)=""/192, 0xc0}, {&(0x7f0000007080)=""/60, 0x3c}], 0x4, &(0x7f0000007100)=""/81, 0x51}}], 0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000007400)={0x0, 0xffffffff, 0x8001, 0x3}, &(0x7f0000007440)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000007480)={r6, 0x400, 0x9}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) r7 = pidfd_open(0x0, 0x0) fchmod(r7, 0x10) keyctl$session_to_parent(0x12) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000074c0)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007540)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000007680)={&(0x7f0000007500)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000007640)={&(0x7f0000007580)={0x90, r8, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x83}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = socket(0x14, 0x0, 0x30) fcntl$F_GET_FILE_RW_HINT(r9, 0x40d, &(0x7f00000076c0)) syz_open_dev$dmmidi(&(0x7f0000007700)='/dev/dmmidi#\x00', 0x9, 0x40000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000007740)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000007780)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r10) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000077c0)=0x7d050b00) r11 = syz_open_dev$admmidi(&(0x7f0000007800)='/dev/admmidi#\x00', 0x6, 0x400000) ioctl$TUNSETLINK(r11, 0x400454cd, 0x335) dup2(r5, r9) [ 328.755743][ T7145] IPVS: ftp: loaded support on port[0] = 21 [ 328.897474][ T7145] chnl_net:caif_netlink_parms(): no params data found [ 328.953806][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.961168][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.970065][ T7145] device bridge_slave_0 entered promiscuous mode [ 328.978420][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.986442][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.994663][ T7145] device bridge_slave_1 entered promiscuous mode 17:59:24 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x130) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x81, 0x70}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x1}, 0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x100, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f00000001c0)="0c98566d3c27c691b3c6b942c1d3b07ead0b3088950282007c6f94e022377e41af6548aa6965a1afec7702c120303e74b6da6f67c78b6618124eaf09ea712bcd327c3defbd85942f4b85bba4d6aac0f8cd23f846b3d3e0ee0fb20657f55d47aaec71970e755203aafad2b3bb9d11bfff462cd60ecaf85be1c3935cfe60e7ac5ddfddecf8e57c0a9d244e011b9735cbd9a660785a32d47f8f3db4d4faa2dcb57f6974c0f74140f696", 0xa8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)={0x3, r3}) r4 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x521082) r5 = dup3(r4, r0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) r6 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, r6, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000400)) clone3(&(0x7f0000000640)={0x84080800, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0), 0x1d, 0x0, &(0x7f0000000500)=""/1, 0x1, &(0x7f0000000540)=""/245}, 0x40) process_vm_readv(r8, &(0x7f0000001a00)=[{&(0x7f0000000680)=""/247, 0xf7}, {&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000000880)=""/113, 0x71}, {&(0x7f0000000900)=""/132, 0x84}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000001a80)=""/183, 0xb7}, {&(0x7f0000001b40)=""/73, 0x49}, {&(0x7f0000001bc0)=""/157, 0x9d}, {&(0x7f0000001c80)=""/128, 0x80}], 0x4, 0x0) r9 = syz_open_dev$mouse(&(0x7f0000001d40)='/dev/input/mouse#\x00', 0x100000001, 0x604180) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000001d80)=0x14000) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001dc0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r10, 0x40044900, 0x10000) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$VIDIOC_G_SELECTION(r11, 0xc040565e, &(0x7f0000001e40)={0xb, 0x2, 0x2, {0x1, 0x0, 0x4}}) r12 = socket$inet6(0xa, 0xafb163905eb37de4, 0x45) r13 = accept4$llc(0xffffffffffffffff, &(0x7f0000001ec0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001f00)=0x10, 0x80000) splice(r12, &(0x7f0000001e80)=0x8, r13, &(0x7f0000001f40)=0x9, 0x1, 0x4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000002040)=@usbdevfs_driver={0x4, 0x8, &(0x7f0000001f80)="435c79a413172f3eca14684212b3651d41ef0ae38d40f168ddd788a4ff8383e9445af232e41dc57eff366436bd3497cf0cc831ea0244bcea3b0b26e2ab551f662a80da3d61fc93b83243cfd9eafb34db1fb35267d0bc23fb48b5bdfb800ae40b30f15f40a44f3f73ee88930e68d92bfb16495367e537e3053efd0a67d167605dff8ffa253c6fd44855e5f7b5bc42f4edd0e9c354312f3651a40d6c96a7e5c39b1bfb174d5c"}) r14 = syz_open_dev$cec(&(0x7f0000002080)='/dev/cec#\x00', 0x2, 0x2) accept4$packet(r14, 0x0, &(0x7f00000020c0), 0x800) [ 329.016653][ T7148] IPVS: ftp: loaded support on port[0] = 21 [ 329.018554][ T7145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.034715][ T7145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.067068][ T7145] team0: Port device team_slave_0 added [ 329.086004][ T7145] team0: Port device team_slave_1 added [ 329.175771][ T7145] device hsr_slave_0 entered promiscuous mode [ 329.233724][ T7145] device hsr_slave_1 entered promiscuous mode [ 329.300989][ T7151] IPVS: ftp: loaded support on port[0] = 21 [ 329.428051][ T7148] chnl_net:caif_netlink_parms(): no params data found [ 329.465165][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.472301][ T7145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.479723][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.486828][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state 17:59:25 executing program 3: ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz0\x00', @null, 0xc6, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ptrace(0x4208, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setparam(r0, &(0x7f00000000c0)=0x5) r1 = getpgid(0xffffffffffffffff) ptrace$getregset(0x4204, r1, 0x300, &(0x7f0000000180)={&(0x7f0000000100)=""/115, 0x73}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @broadcast}, &(0x7f00000003c0)=0xc) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="4c0e8573f0c62c0d4e5663ca5b0f769106c2d2f27784aa7dd765be092d6269bca67be44cda7bf1fb532cf5931a483f2f72be821f3f3ca530be86537f62a04c575bc47a50cd0d6f8d2a632d47769db4bbe1ffe8a6e6d4c4c25e9064f0ee9ae8e8d9fe215530cc0d7d27058a6e922523f10310c83b2a2bd326357cbaf15ca05d33ab66ecfa44eae6eb2823282573b87ee82fc75c7f7bd1b64397896c995a65173d12c80dad1c08e356dad34fbc2f61b05bce6281c586e26b03c22d5c6d778404d3a0453a6bbf0be080eb34e4e0f812ffe837068360a5f4e5db1c8d", 0xda, 0x4000000, &(0x7f0000000400)={0x11, 0x6, r2, 0x1, 0x4d, 0x6, @random="6a860e5073d9"}, 0x14) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x30d845, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ptrace$cont(0x2f, r0, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r3) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002d80)='nbd\x00') r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/vsock\x00', 0xc0780, 0x0) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x12050000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x60, r6, 0xb01, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd6c}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x68}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000}, 0x80) r8 = syz_open_dev$admmidi(&(0x7f0000002f00)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$KDGETMODE(r8, 0x4b3b, &(0x7f0000002f40)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002f80)='/proc/self/attr/current\x00', 0x2, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002fc0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000003000)={0x0, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_SG_FREE(r9, 0x40106439, &(0x7f0000003040)={0x80, r10}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000030c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x14, r11, 0x218, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r12 = syz_open_dev$cec(&(0x7f00000031c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r12, 0xc008240a, &(0x7f0000003200)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r13 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$lock(r13, 0x24, &(0x7f0000003240)={0x2, 0x2, 0x7ff, 0x4, r1}) r14 = syz_open_dev$dmmidi(&(0x7f0000003280)='/dev/dmmidi#\x00', 0x26, 0x973d3a5b2da79fc1) ioctl$KVM_SET_DEBUGREGS(r14, 0x4080aea2, &(0x7f00000032c0)={[0x0, 0x10000, 0x1000], 0x7, 0x80, 0x9}) [ 329.725565][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.743561][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.759944][ T7148] device bridge_slave_0 entered promiscuous mode [ 329.821686][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.863961][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.871107][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.914449][ T7148] device bridge_slave_1 entered promiscuous mode [ 329.937365][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.973408][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.994608][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 330.074014][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.088510][ T7180] IPVS: ftp: loaded support on port[0] = 21 [ 330.114190][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.154077][ T7151] chnl_net:caif_netlink_parms(): no params data found [ 330.166938][ T7145] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.217016][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.264366][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.294054][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.324665][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.331768][ T7152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.364906][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.405160][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.445158][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.452295][ T7152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.529614][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 17:59:26 executing program 4: io_setup(0x3, &(0x7f0000000000)) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000100)=0x100) prctl$PR_GET_SECCOMP(0x15) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140)=0x75b, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000001c0)=0x7f, &(0x7f0000000200)=0x1) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000380)={@rand_addr="a679bd1760ce617fbebdd68fd705c1b5", r3}, 0x14) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000003c0)=0x5, 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) openat$vhci(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhci\x00', 0x101000) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) accept$ax25(r4, &(0x7f0000000500)={{}, [@netrom, @rose, @default, @bcast, @bcast, @default, @remote, @default]}, &(0x7f0000000580)=0x48) r5 = syz_open_dev$vbi(&(0x7f00000005c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f0000000600)={0x2, 0x8, 0xa9e1, 0x0, 0x2, 0xffff}) syz_open_dev$video4linux(&(0x7f0000000640)='/dev/v4l-subdev#\x00', 0x1f, 0x200000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000000680)="0fdb464a043fa61cba710aa838b3e8a21d5853100809cc8d29f8c1c6ac6714b897a049c5541575f70e4fed1d413dd3aee3e528614a59e2e87f78bd6ebe1326baa1bea241dcbf2a5dafe9b1ade6f6901a22", 0x51, r6}, 0x68) r7 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f0000000800)={0x0, 0x7f, 0x3, [], &(0x7f00000007c0)=0x5e}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x418300, 0xd0) ioctl$UI_GET_SYSNAME(r8, 0x8040552c, &(0x7f0000000880)) prctl$PR_MCE_KILL_GET(0x22) lsetxattr$security_smack_entry(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='security.SMACK64EXEC\x00', &(0x7f0000000940)='#\x00', 0x2, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x4, 0x800) [ 330.644659][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.667516][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.700424][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.734682][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.778719][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.834562][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.890737][ T7145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.924210][ T7145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.976019][ T7148] team0: Port device team_slave_0 added [ 330.986575][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.996687][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.044851][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.085836][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.114407][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.144927][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.152011][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.183606][ T7151] device bridge_slave_0 entered promiscuous mode [ 331.203329][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.210397][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.233611][ T7151] device bridge_slave_1 entered promiscuous mode [ 331.253716][ T7148] team0: Port device team_slave_1 added [ 331.265256][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.299707][ T7145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.385928][ T7186] IPVS: ftp: loaded support on port[0] = 21 17:59:27 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x18f000, 0x28) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000080)={0x2, 0x2, 0x6, 0x5, 0x1, 0x10001}) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000100)={{}, [@default, @default, @netrom, @bcast, @rose, @rose, @rose, @null]}, &(0x7f0000000180)=0x48, 0x80000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) getgroups(0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0xffffffffffffffff, r2, r4}, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x27, 0x1, 0x0, 0x4, 0x5, 0xff, "7e35d2c8f0d0f7c524a168bd274aaf44dce785e574e24999e9e7d18b45f83ba800a0fcadf7d385152d28bdbec02933c97439c8aa234ca61667f5c01849404c"}, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000300)="f8601863fb33a2aaeb19dd5dad964a2cb98915103bb2516398068243bd8f353f9a58a8b7471836e9b7f4e9786a015cc2ee7674572d334c4ecb81f1b52f96169a144c48202934df5997f9bfb965d9995b2dc0af233490943d6e09cb1610588a7aff161464e72b540d91180e4dfe2a7e093b87d4595b838f389bfa06f0197134cf5619cea290a336a8a01dfed7a71b38a507684348606f90eb0179ec2667c40caec5695047d8dafd0c44", 0xa9}, {&(0x7f00000003c0)="9998042e24ffb09f2149d58817ea5375133a0a3c6b5042a04f19ab0c35bcffa1dcfdd0395fde089eaa7825e556403c60bf94ff0a08b3acc86b3efead56ddc639b27f7cd0d78e02f5e795ffe5be5492806efc924304f270857de309a0eb0833e96f3058a82f0026c460e83958a2b1babb67c2507d0b279fc09a18e18b04fe", 0x7e}, {&(0x7f0000000440)="4886b81dc8bb7da3adf4d34835ed75d51f85344239f2119ab5997d98cffbdc5b9c26bd9f704aabd56b4a7ab50f70c64b8e7946794be2b6342f9ee21d9b046a2adadb62102da2e7764635ef", 0x4b}], 0x3, &(0x7f0000000500)={0x88, 0xff, 0x8000, "9b3b9637466bccdbab8430edb23d917e772fb2ead92b5eb688377786084e11672973fe23b6f98d76a9e249bedab711bf5bbb87e7114a39e11698d07a4bb08445a6e2c5b4fd966fd1c828a28fba1df9479fff89b5127d030cde403781c0d89173c8eecd5172e747d6a4cff0194735fe1c4e7c42991ebd38"}, 0x88}, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000600)={{0x4, 0xf7}, 0x1cd0248b45cf068d, 0x4, 0x3ff, {0x20, 0x3f}, 0x9, 0xfffffff8}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer\x00', 0x20000, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = geteuid() ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000700)={0x0, 0x1f, {0x53, 0x3ff, 0x8001, {0x1, 0x7}, {0x31c, 0x6}, @period={0x58, 0x5, 0x70, 0xa472, 0x6141, {0x7, 0x100, 0x20, 0x9}, 0xa, &(0x7f00000006c0)=[0x1e0, 0x0, 0x8, 0x4, 0xa2, 0x1, 0x7, 0x7ff, 0x3, 0x4]}}, {0x57, 0xd5e1, 0xef6d, {0x4, 0x7}, {0x54db, 0xfff8}, @const={0x1, {0x54, 0x5, 0x81}}}}) r7 = syz_open_dev$vbi(&(0x7f0000000780)='/dev/vbi#\x00', 0x2, 0x2) bind$rds(r7, &(0x7f00000007c0)={0x2, 0x4e24, @local}, 0x10) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000800)=0x800, 0x4) r8 = syz_open_dev$mice(&(0x7f0000000840)='/dev/input/mice\x00', 0x0, 0x440142) write$P9_RLERRORu(r8, &(0x7f0000000880)={0x15, 0x7, 0x1, {{0x8, 'selinux\''}, 0x6}}, 0x15) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000900)={0x1, 0x20, 0x5, 0x2}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000940)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000b40)=0xe8) r12 = getuid() stat(&(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() r15 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) r17 = getegid() setxattr$system_posix_acl(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='system.posix_acl_access\x00', &(0x7f0000000cc0)={{}, {0x1, 0x1}, [{0x2, 0x3, r6}, {0x2, 0x5, 0xee00}, {0x2, 0x0, r10}, {0x2, 0x4, r2}, {0x2, 0x0, r11}, {0x2, 0x1, r6}, {0x2, 0x1, r12}, {0x2, 0x3, r13}], {0x4, 0x38b4c90534f4bc7e}, [{0x8, 0x2, r3}, {0x8, 0x4, r14}, {0x8, 0x7, r15}, {0x8, 0x3, r4}, {0x8, 0x4, r16}, {0x8, 0x2, r17}], {0x10, 0x4}, {0x20, 0x4}}, 0x94, 0x1) [ 331.445716][ T7148] device hsr_slave_0 entered promiscuous mode [ 331.495511][ T7148] device hsr_slave_1 entered promiscuous mode [ 331.532705][ T7148] debugfs: Directory 'hsr0' with parent '/' already present! [ 331.542116][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.630263][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.765928][ T7151] team0: Port device team_slave_0 added [ 331.775891][ T7180] chnl_net:caif_netlink_parms(): no params data found [ 331.826813][ T7151] team0: Port device team_slave_1 added [ 332.019140][ T7213] IPVS: ftp: loaded support on port[0] = 21 [ 332.047024][ T7151] device hsr_slave_0 entered promiscuous mode [ 332.073069][ T7151] device hsr_slave_1 entered promiscuous mode [ 332.102672][ T7151] debugfs: Directory 'hsr0' with parent '/' already present! [ 332.219098][ T7186] chnl_net:caif_netlink_parms(): no params data found 17:59:28 executing program 0: mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040)) times(&(0x7f0000001080)) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) clone(0x30028100, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x64, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48) r2 = socket(0x10, 0x0, 0x0) r3 = add_key$user(&(0x7f0000001000)='user\x00', &(0x7f0000001240)={'syz', 0x2}, &(0x7f0000001280)="77e0f1f5ada3cf33033959976218a934786a8e481b73d3fb296693696cdf7a67edbdf239d92a252f22655181778d0143ded9652dac04d321c7b4105f807d24cdf0453c4bffaf4a5b49eafe8c4913bb8bc8c916372d62d6af656258b20dda95bb3f6adb16ed49cfb97a760874b7a2b1e5c636", 0x72, 0xfffffffffffffffd) keyctl$update(0x2, r3, &(0x7f0000001400)="efb09a0e4ed8bf8e49e10068388c5be2f2f68c07d18a5952a3016a37594210bf5a5117d1f47b4962f664b45e6adb42cf7dd07857b7d20603d3867c1e6479b673ad0f4be950168c5cecbe9300384019f432d74fd340591ddb1edc1971", 0x5c) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="4800000000000010cdb70edea9da657f9025591ff63244a4d724b8fe309488182124d5706962cfafb7e9f814393d40467d9d6ba52652985352c7f3d975bae4807363583b4f2094551baa26be0921006453c4cc8d4abc3efdeb91d40f6cf5b2f9ec100546dd4a2247864197c6a335698b57bf6a866ddb6240e39803e1aa1fe3af7c6c0ee3d79d99c6f034c73bb88a89b20096d4ae421abc44563d57e07b9cfc271a50a6f99b74dd0164411906b9ef9e9c5cf9aadd1b95d976756f7da1e21b2025e362a42479de1f12239169149d47e6", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0xb7000, 0x0, 0x12, r4, 0xbfffd000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0xb7000, 0x0, 0x12, r5, 0xbfffd000) ioctl$KVM_NMI(r5, 0xae9a) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 332.314839][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.322014][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.392830][ T7180] device bridge_slave_0 entered promiscuous mode [ 332.410947][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.473053][ C1] hrtimer: interrupt took 28366 ns [ 332.577962][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.601438][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state 17:59:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7ff}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) socket$key(0xf, 0x3, 0x2) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) r2 = socket(0x11, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x1}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0xe, 0x0, 0x1}}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) [ 332.645256][ T7180] device bridge_slave_1 entered promiscuous mode [ 332.748110][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.837178][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.851800][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.984403][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.053206][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.060925][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.073267][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.081862][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.089006][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state 17:59:29 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3ff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x81, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = socket$kcm(0x10, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4c4000, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa79684f431d0093d}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 333.210620][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.237834][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.339207][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.346336][ T7149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.444167][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.451406][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.495485][ T7186] device bridge_slave_0 entered promiscuous mode [ 333.535282][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.569575][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.614540][ T7186] device bridge_slave_1 entered promiscuous mode [ 333.660992][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.750522][ T7148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.803002][ T7148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.878374][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.898405][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.946804][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.006176][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.056497][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.113628][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.156415][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.195088][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.226996][ T7258] block nbd0: shutting down sockets [ 334.256949][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.294040][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.348214][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.392360][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.433533][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.490919][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.569982][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.602472][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.671595][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.765348][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.789921][ T7180] team0: Port device team_slave_0 added [ 334.822317][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.873321][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.882043][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.889167][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state 17:59:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', r2}) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) r4 = socket(0x11, 0x2, 0x0) r5 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) getsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockname$packet(r4, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d80)=0x14) sendmsg$nl_route(r0, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x31004000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)=@newneigh={0x64, 0x1c, 0x2, 0x70bd2d, 0x200, {0xa, 0x0, 0x0, r2, 0xb, 0x0, 0x5}, [@NDA_PORT={0x8, 0x6, 0x4e24}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_LLADDR={0xc, 0x2, @remote}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_DST_MAC={0xc, 0x1, @local}, @NDA_IFINDEX={0x8, 0x8, r6}, @NDA_PORT={0x8, 0x6, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x772b08418b7caa53) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000085ce5842c21db000a00", @ANYRES32=0x6, @ANYBLOB="180012000c000100697036746e6c00000800020004001300"], 0x5}}, 0x4000000) [ 335.003406][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.012170][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.037335][ T7270] block nbd0: shutting down sockets [ 335.103314][ T7270] block nbd0: shutting down sockets [ 335.113247][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.120309][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.163501][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.214519][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 17:59:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000ffffffff", 0x58}], 0x1) uselib(&(0x7f0000000000)='./file0\x00') [ 335.265839][ T7213] chnl_net:caif_netlink_parms(): no params data found [ 335.344883][ T7180] team0: Port device team_slave_1 added [ 335.354483][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.366086][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.405552][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.459142][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.589444][ T7151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.643864][ T7151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.679447][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.706707][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.743684][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.763668][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.783546][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.813611][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.847630][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.966075][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.025060][ T7186] team0: Port device team_slave_0 added [ 336.031989][ T7186] team0: Port device team_slave_1 added [ 336.070164][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.078598][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.091081][ T7213] device bridge_slave_0 entered promiscuous mode [ 336.107984][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0 17:59:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x6, 0x3ff, 0x80000000, 0x7eb5, 0x3ff, 0x8f, 0x7fffffff, 0xffffffffffff9798}, &(0x7f0000000080)={0x6, 0x0, 0x4, 0x4, 0x4, 0x3, 0x800, 0x1}, &(0x7f00000000c0)={0x2, 0xffffffff, 0x4, 0x9, 0x0, 0x9, 0x8, 0x3}, &(0x7f0000000100), &(0x7f0000000280)={&(0x7f0000000140)={0x6}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007700000bfa30000000000000402000000feffff7a0af0fff8ffffff79a40654ed4f0000b7060000ffff04002e640500000000006502faff9c0200000404000001077d60b7030000001000006a0a00fe150000008500000026000000b7000000e0ffffff95003b0000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 17:59:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xffc00}], 0x1, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0xdd}}, 0x24) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900090000000047b4c7bc206e49ab8ccf5127c1086fce088b71e765101bc2e781028b5c2583f3a2dca80aa2f6"], 0x10}}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0xb7000, 0x0, 0x12, r8, 0xbfffd000) ioctl$VIDIOC_SUBDEV_G_EDID(r8, 0xc0285628, &(0x7f0000000380)={0x0, 0x1, 0x1, [], &(0x7f0000000000)=0x6}) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe60, 0x0, 0x0, 0xffffffffffffffd9) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) keyctl$setperm(0x5, 0x0, 0x202002) sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x8000}, 0x20004001) recvfrom$packet(r8, &(0x7f00000003c0)=""/21, 0x15, 0x40, &(0x7f0000001400)={0x11, 0x2, r9, 0x1, 0x2}, 0x14) [ 336.159874][ T7180] device hsr_slave_0 entered promiscuous mode [ 336.223053][ T7180] device hsr_slave_1 entered promiscuous mode [ 336.262751][ T7180] debugfs: Directory 'hsr0' with parent '/' already present! [ 336.316259][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.332900][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.353767][ T7213] device bridge_slave_1 entered promiscuous mode 17:59:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r0, 0x8924, &(0x7f0000000100)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x2, 0x1, &(0x7f0000000240)=""/247, &(0x7f0000000140)=""/151, &(0x7f0000000080)=""/61, 0x100000}) [ 336.359231][ T7304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 336.377808][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.418332][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.630302][ T7186] device hsr_slave_0 entered promiscuous mode [ 336.702994][ T7186] device hsr_slave_1 entered promiscuous mode [ 336.734137][ T7186] debugfs: Directory 'hsr0' with parent '/' already present! [ 336.885004][ T7213] team0: Port device team_slave_0 added [ 336.978479][ T7213] team0: Port device team_slave_1 added [ 337.206289][ T7213] device hsr_slave_0 entered promiscuous mode [ 337.263029][ T7213] device hsr_slave_1 entered promiscuous mode [ 337.297179][ T7213] debugfs: Directory 'hsr0' with parent '/' already present! [ 337.349824][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.486214][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.572307][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.608579][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.680912][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.790230][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.843384][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.922880][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.929980][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.068182][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.138252][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.207656][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.214765][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.373185][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.381349][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.468700][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.549894][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.613857][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.672977][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.737968][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.813924][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.822479][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.933382][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.941389][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.046415][ T7180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.133420][ T7180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.195494][ T7186] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.263399][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.272396][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.357844][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.432139][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.550014][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.613118][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.622077][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.714591][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.721675][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.833592][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.893007][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.901754][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.908838][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.993524][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.038953][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.090243][ T7213] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.121207][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 17:59:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xffffffffffff0001, 0x43ac02) mq_timedsend(r1, &(0x7f00000002c0)="8d52e6200629f293893d2048eb4ee47e017ebaf89e04808ea424915441cd8ecb619102d07699f221ba8146cabca23c4f5320a6b034aea189757b639045e16d9eb02ca0614a2ae313e92f21fe60690411659d6844af18970b353df7a83ceafb7133f33aee873ca87b8f7fb5ca4c7e8d4df3d6a8d633c515ae75ec50e64f79660e4c7c33315dc51761a2c3861788512d16b1ff1c8143e0adf07c73043d42886ef256df5407bad5db6af4028e7c6d461c2781337785871c50a5d533a4967c47374e472717a4709096525c5b3fd4", 0xcc, 0x3, &(0x7f0000000240)={0x0, 0x989680}) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) fadvise64(r4, 0x9432, 0x2, 0x4) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xb4b3267}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000fed000/0x1000)=nil, 0x1000}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200000) write$P9_RUNLINKAT(r5, &(0x7f0000000440)={0x7, 0x4d, 0x2}, 0x7) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) mprotect(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) [ 340.148833][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.166345][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.229218][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.262413][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.318742][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.357627][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.468615][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.543102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.555668][ T7361] ================================================================== [ 340.563791][ T7361] BUG: KCSAN: data-race in get_task_cred / get_task_cred [ 340.570797][ T7361] [ 340.573122][ T7361] write to 0xffff88812afbca58 of 4 bytes by task 7358 on cpu 0: [ 340.580748][ T7361] get_task_cred+0xd2/0x120 [ 340.585240][ T7361] proc_pid_status+0x17c/0x1000 [ 340.590085][ T7361] proc_single_show+0x89/0xe0 [ 340.594754][ T7361] seq_read+0x350/0x960 [ 340.598900][ T7361] __vfs_read+0x67/0xc0 [ 340.603047][ T7361] vfs_read+0x143/0x2c0 [ 340.607193][ T7361] ksys_read+0xd5/0x1b0 [ 340.611370][ T7361] __x64_sys_read+0x4c/0x60 [ 340.615878][ T7361] do_syscall_64+0xcc/0x370 [ 340.620372][ T7361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 340.626261][ T7361] [ 340.628590][ T7361] write to 0xffff88812afbca58 of 4 bytes by task 7361 on cpu 1: [ 340.636211][ T7361] get_task_cred+0xd2/0x120 [ 340.640705][ T7361] proc_pid_status+0x17c/0x1000 [ 340.645548][ T7361] proc_single_show+0x89/0xe0 [ 340.650218][ T7361] seq_read+0x350/0x960 [ 340.654373][ T7361] __vfs_read+0x67/0xc0 [ 340.658529][ T7361] vfs_read+0x143/0x2c0 [ 340.662675][ T7361] ksys_read+0xd5/0x1b0 [ 340.666831][ T7361] __x64_sys_read+0x4c/0x60 [ 340.671330][ T7361] do_syscall_64+0xcc/0x370 [ 340.675829][ T7361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 340.681703][ T7361] [ 340.684021][ T7361] Reported by Kernel Concurrency Sanitizer on: [ 340.690167][ T7361] CPU: 1 PID: 7361 Comm: ps Not tainted 5.4.0-rc3+ #0 [ 340.696914][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.706958][ T7361] ================================================================== [ 340.715026][ T7361] Kernel panic - not syncing: panic_on_warn set ... [ 340.721623][ T7361] CPU: 1 PID: 7361 Comm: ps Not tainted 5.4.0-rc3+ #0 [ 340.728373][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.738421][ T7361] Call Trace: [ 340.741712][ T7361] dump_stack+0xf5/0x159 [ 340.745954][ T7361] panic+0x210/0x640 [ 340.749860][ T7361] ? do_syscall_64+0xcc/0x370 [ 340.754534][ T7361] ? vprintk_func+0x8d/0x140 [ 340.759127][ T7361] kcsan_report.cold+0xc/0x10 [ 340.763807][ T7361] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 340.769360][ T7361] __tsan_write4+0x32/0x40 [ 340.773775][ T7361] get_task_cred+0xd2/0x120 [ 340.778282][ T7361] proc_pid_status+0x17c/0x1000 [ 340.783135][ T7361] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 340.788857][ T7361] proc_single_show+0x89/0xe0 [ 340.793534][ T7361] seq_read+0x350/0x960 [ 340.797704][ T7361] __vfs_read+0x67/0xc0 [ 340.801868][ T7361] ? seq_hlist_start_head_rcu+0x60/0x60 [ 340.807412][ T7361] vfs_read+0x143/0x2c0 [ 340.811568][ T7361] ksys_read+0xd5/0x1b0 [ 340.815810][ T7361] __x64_sys_read+0x4c/0x60 [ 340.820314][ T7361] do_syscall_64+0xcc/0x370 [ 340.824840][ T7361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 340.830733][ T7361] RIP: 0033:0x7f7146032310 [ 340.835145][ T7361] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 340.854748][ T7361] RSP: 002b:00007ffcca2e7328 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.863157][ T7361] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f7146032310 [ 340.871127][ T7361] RDX: 0000000000000fff RSI: 00007f71464ffd00 RDI: 0000000000000006 [ 340.879090][ T7361] RBP: 0000000000000fff R08: 0000000000000000 R09: 00007f71462fa57b [ 340.887056][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f71464ffd00 [ 340.895027][ T7361] R13: 0000000000000020 R14: 0000000000000005 R15: 0000000000000000 [ 340.904459][ T7361] Kernel Offset: disabled [ 340.908778][ T7361] Rebooting in 86400 seconds..