[ 120.962431][ T39] audit: type=1400 audit(1575991235.120:41): avc: denied { map } for pid=8547 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:47227' (ECDSA) to the list of known hosts. [ 123.460336][ T39] audit: type=1400 audit(1575991237.620:42): avc: denied { map } for pid=8557 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/12/10 15:20:37 fuzzer started 2019/12/10 15:20:41 dialing manager at 10.0.2.10:37707 2019/12/10 15:20:41 syscalls: 2712 2019/12/10 15:20:41 code coverage: enabled 2019/12/10 15:20:41 comparison tracing: enabled 2019/12/10 15:20:41 extra coverage: enabled 2019/12/10 15:20:41 setuid sandbox: enabled 2019/12/10 15:20:41 namespace sandbox: enabled 2019/12/10 15:20:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/10 15:20:41 fault injection: enabled 2019/12/10 15:20:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/10 15:20:41 net packet injection: enabled 2019/12/10 15:20:41 net device setup: enabled 2019/12/10 15:20:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/10 15:20:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 15:21:10 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) [ 156.596078][ T39] audit: type=1400 audit(1575991270.750:43): avc: denied { map } for pid=8580 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23828 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 157.176649][ T8581] IPVS: ftp: loaded support on port[0] = 21 15:21:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000500)=ANY=[@ANYBLOB="0002040000880000ff020000000000000000001200000001d278e6dd72a179549408fb7d56fd85a7842f0c5287de20089b8552d39a2929dc060cda08ced7b9d0b92baaf0ed13d4c278db05fac50c94dccd07cf995810dd1952623d9396ccfae1348bbbeb89efbecf416839ba85cd29ffffffff00000000ead14dcc548eb23b83857300"/146], 0x18) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) [ 157.548786][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 157.650235][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.684261][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.726831][ T8581] device bridge_slave_0 entered promiscuous mode [ 157.776306][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.805970][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.839883][ T8581] device bridge_slave_1 entered promiscuous mode [ 157.881966][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.903379][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.927021][ T8584] IPVS: ftp: loaded support on port[0] = 21 [ 157.954221][ T8581] team0: Port device team_slave_0 added [ 157.980515][ T8581] team0: Port device team_slave_1 added [ 158.233087][ T8581] device hsr_slave_0 entered promiscuous mode 15:21:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) dup2(r0, r1) r2 = semget$private(0x0, 0x5, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x5}, {}], 0x2, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) [ 158.362736][ T8581] device hsr_slave_1 entered promiscuous mode [ 158.569718][ T8587] IPVS: ftp: loaded support on port[0] = 21 [ 158.650397][ T39] audit: type=1400 audit(1575991272.810:44): avc: denied { create } for pid=8581 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:21:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0xe3) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000100)) [ 158.750794][ T39] audit: type=1400 audit(1575991272.810:45): avc: denied { write } for pid=8581 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 158.846600][ T39] audit: type=1400 audit(1575991272.810:46): avc: denied { read } for pid=8581 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 158.944566][ T8581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.032743][ T8581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.120743][ T8581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.254099][ T8581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.403630][ T8589] IPVS: ftp: loaded support on port[0] = 21 [ 159.436081][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 159.561365][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.576307][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.595374][ T8584] device bridge_slave_0 entered promiscuous mode [ 159.618163][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.638383][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.661351][ T8584] device bridge_slave_1 entered promiscuous mode [ 159.722580][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.744615][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 159.767286][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.831965][ T8584] team0: Port device team_slave_0 added [ 159.842266][ T8584] team0: Port device team_slave_1 added [ 159.852450][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.862187][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.883350][ T8587] device bridge_slave_0 entered promiscuous mode [ 159.911156][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.923528][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.935045][ T8587] device bridge_slave_1 entered promiscuous mode [ 159.964442][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.010499][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.100024][ T8584] device hsr_slave_0 entered promiscuous mode [ 160.190284][ T8584] device hsr_slave_1 entered promiscuous mode [ 160.258536][ T8584] debugfs: Directory 'hsr0' with parent '/' already present! [ 160.309261][ T8587] team0: Port device team_slave_0 added [ 160.322124][ T8587] team0: Port device team_slave_1 added [ 160.340046][ T8589] chnl_net:caif_netlink_parms(): no params data found [ 160.430480][ T8587] device hsr_slave_0 entered promiscuous mode [ 160.498350][ T8587] device hsr_slave_1 entered promiscuous mode [ 160.568125][ T8587] debugfs: Directory 'hsr0' with parent '/' already present! [ 160.625108][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.639497][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.651629][ T8589] device bridge_slave_0 entered promiscuous mode [ 160.671557][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.683935][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.707249][ T8589] device bridge_slave_1 entered promiscuous mode [ 160.729777][ T8584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.815005][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.830276][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.854560][ T8584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.933472][ T8584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.000887][ T8584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.050890][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.076832][ T8589] team0: Port device team_slave_0 added [ 161.094622][ T8587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.181488][ T8589] team0: Port device team_slave_1 added [ 161.203790][ T8587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.302944][ T8587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.375285][ T8587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.458921][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.480203][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.499551][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.580937][ T8589] device hsr_slave_0 entered promiscuous mode [ 161.688576][ T8589] device hsr_slave_1 entered promiscuous mode [ 161.758462][ T8589] debugfs: Directory 'hsr0' with parent '/' already present! [ 161.801294][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.818748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.835976][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.855968][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.883046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.914186][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.941449][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.973453][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.991079][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.006717][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.040420][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.060427][ T8589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.130297][ T8589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.214252][ T8589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.293715][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.314781][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.334229][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.351486][ T8589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.437967][ T8581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.459646][ T8581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.492465][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.522183][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.548290][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.569870][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.593349][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.610957][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.644074][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.726100][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.751463][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.783741][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.816044][ T39] audit: type=1400 audit(1575991276.970:47): avc: denied { associate } for pid=8581 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 162.823113][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.911938][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.931973][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.951359][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.969519][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.996776][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.016920][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.036985][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.056822][ T39] audit: type=1400 audit(1575991277.210:48): avc: denied { create } for pid=8598 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 163.056850][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.102122][ T39] audit: type=1400 audit(1575991277.210:49): avc: denied { ioctl } for pid=8598 comm="syz-executor.0" path="socket:[38392]" dev="sockfs" ino=38392 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 163.146127][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.225043][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.245242][ T8599] bond0: (slave bond_slave_1): Releasing backup interface [ 163.341255][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.362481][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.374133][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.389182][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.420153][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.439753][ T8594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.455490][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.472373][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.491522][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.521199][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.546306][ T8599] bond0: (slave bond_slave_1): Releasing backup interface [ 163.633830][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 15:21:17 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) [ 163.659551][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.682407][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.706115][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.723814][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.736859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.752684][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.771560][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.804708][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.823378][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 15:21:18 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) [ 163.842391][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.862098][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.881344][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.897781][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.915854][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.936657][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.950458][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.967382][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.991102][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.013397][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.034870][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.056851][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.071163][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.092284][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.111715][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.129698][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.161120][ T8611] bond0: (slave bond_slave_1): Releasing backup interface [ 164.245648][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:21:18 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) [ 164.282972][ T8587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.316042][ T8587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.345875][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.367749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.388922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.407340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.424217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.438574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.453090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.467239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.482025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.498396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.516021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.536257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.554942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.569007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.586752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.608529][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.632963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.649694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.669106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.692179][ T8589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.730116][ T8589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.761405][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.773174][ T8616] bond0: (slave bond_slave_1): Releasing backup interface [ 164.870867][ T8619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.902053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 15:21:19 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) [ 164.921908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.946579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.974706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.002718][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.033399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.070689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.116956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.154746][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.190047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.242366][ T8621] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:19 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) [ 165.318937][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.352541][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.377547][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.398660][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.420639][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.451982][ T3408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.485224][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.515139][ T8626] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 165.547779][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.573689][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 15:21:19 executing program 3: 15:21:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) dup2(r0, r1) r2 = semget$private(0x0, 0x5, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x5}, {}], 0x2, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:20 executing program 3: 15:21:20 executing program 1: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:20 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:20 executing program 3: [ 165.849863][ T8652] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 165.883307][ T8653] bond0: (slave bond_slave_1): Releasing backup interface 15:21:20 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:20 executing program 3: 15:21:20 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) dup2(r0, r1) r2 = semget$private(0x0, 0x5, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x5}, {}], 0x2, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) [ 165.971484][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:21:20 executing program 3: 15:21:20 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:20 executing program 1: 15:21:20 executing program 3: 15:21:20 executing program 1: 15:21:20 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:20 executing program 1: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) dup2(r0, r1) r2 = semget$private(0x0, 0x5, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x5}, {}], 0x2, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:20 executing program 3: [ 166.101581][ T8688] bond0: (slave bond_slave_1): Releasing backup interface 15:21:20 executing program 3: 15:21:20 executing program 1: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:20 executing program 3: 15:21:20 executing program 3: [ 166.193863][ T8695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:21:20 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:20 executing program 1: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) dup2(r0, r1) r2 = semget$private(0x0, 0x5, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x5}, {}], 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5425, &(0x7f0000000040)) 15:21:20 executing program 1: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) [ 166.275713][ T8716] bond0: (slave bond_slave_1): Releasing backup interface 15:21:20 executing program 1: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5425, &(0x7f0000000040)) 15:21:20 executing program 1: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) [ 166.354011][ T8729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:21:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5425, &(0x7f0000000040)) 15:21:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) [ 166.404861][ T8741] bond0: (slave bond_slave_1): Releasing backup interface [ 166.463860][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:21:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5425, &(0x7f0000000040)) 15:21:21 executing program 1: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) dup2(r0, r1) semget$private(0x0, 0x5, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) [ 167.544396][ T8748] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:21 executing program 3: ioctl$TIOCGDEV(0xffffffffffffffff, 0x5425, &(0x7f0000000040)) 15:21:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:21 executing program 3: ioctl$TIOCGDEV(0xffffffffffffffff, 0x5425, &(0x7f0000000040)) 15:21:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:22 executing program 3: ioctl$TIOCGDEV(0xffffffffffffffff, 0x5425, &(0x7f0000000040)) [ 167.940769][ T8767] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:22 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) [ 168.009077][ T8781] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5425, &(0x7f0000000040)) 15:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:22 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(0xffffffffffffffff, 0x5425, &(0x7f0000000040)) 15:21:22 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) [ 168.068870][ T8791] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:22 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x1}) 15:21:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:22 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(0xffffffffffffffff, 0x5425, &(0x7f0000000040)) 15:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) [ 168.139372][ T8809] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:22 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(0xffffffffffffffff, 0x5425, &(0x7f0000000040)) 15:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 15:21:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5425, 0x0) 15:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) [ 168.207811][ T8821] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 15:21:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5425, 0x0) 15:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1}) 15:21:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5425, 0x0) 15:21:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) [ 168.293995][ T8837] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) 15:21:22 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) write$fb(r0, &(0x7f0000000a00)=' ', 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0xc041, 0x0) write$fb(r1, &(0x7f0000000a00)="d9", 0x20000a01) 15:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1}) [ 168.471226][ T8852] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1}) 15:21:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x103102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) [ 168.567815][ T8864] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 15:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9}) 15:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) [ 168.811299][ T8879] bond0: (slave bond_slave_1): Releasing backup interface 15:21:23 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) write$fb(r0, &(0x7f0000000a00)=' ', 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0xc041, 0x0) write$fb(r1, &(0x7f0000000a00)="d9", 0x20000a01) 15:21:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9}) 15:21:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x9}) 15:21:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) write$fb(r0, &(0x7f0000000a00)=' ', 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0xc041, 0x0) write$fb(r1, &(0x7f0000000a00)="d9", 0x20000a01) 15:21:23 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/fb0\x00', 0xc823035de211ec59, 0x0) 15:21:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(r0, 0x5425, 0x0) 15:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(r0, 0x5607, 0x0) 15:21:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(r0, 0x5607, 0x0) 15:21:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:23 executing program 2: r0 = eventfd(0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 15:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) 15:21:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(r0, 0x5607, 0x0) 15:21:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:23 executing program 2: r0 = eventfd(0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 15:21:23 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, 0x0) 15:21:23 executing program 2: r0 = eventfd(0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 15:21:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(r0, 0x5607, 0x0) 15:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, 0x0) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:24 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:24 executing program 3: ioctl$TCGETX(0xffffffffffffffff, 0x5607, 0x0) 15:21:24 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, 0x0) 15:21:24 executing program 3: ioctl$TCGETX(0xffffffffffffffff, 0x5607, 0x0) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:24 executing program 3: ioctl$TCGETX(0xffffffffffffffff, 0x5607, 0x0) 15:21:24 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:24 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = eventfd(0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 15:21:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(r0, 0x5607, 0x0) 15:21:24 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) 15:21:24 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = eventfd(0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 15:21:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(0xffffffffffffffff, 0x5607, 0x0) 15:21:24 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) 15:21:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) 15:21:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(0xffffffffffffffff, 0x5607, 0x0) 15:21:24 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = eventfd(0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 15:21:24 executing program 0: syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0xf74b06645b98cd59) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(0xffffffffffffffff, 0x5607, 0x0) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 15:21:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5424, 0x0) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 15:21:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(r0, 0x540a, 0x0) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x1}) 15:21:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfa, &(0x7f0000000040)) 15:21:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETX(r0, 0x540a, 0x0) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 15:21:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfa, &(0x7f0000000040)) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)) 15:21:24 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x10040) 15:21:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfa, &(0x7f0000000040)) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5428, 0x0) 15:21:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfa, &(0x7f0000000040)) 15:21:24 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5428, 0x0) 15:21:24 executing program 0: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4bfa, &(0x7f0000000040)) 15:21:24 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x18000000}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) 15:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5428, 0x0) 15:21:24 executing program 0: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4bfa, &(0x7f0000000040)) 15:21:24 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x18000000}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) 15:21:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5428, 0x0) 15:21:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="1768fecbb86a16114801b32d3bb0540fbfa79da6d3fc1b7dbf0afde7786df6db6a3a17638f6d445826cd7f6babd94e7aa833540163292dfc4f4bde0b7deb19") [ 170.526611][ T9109] BUG: unable to handle page fault for address: fffff5200124c3fc [ 170.526821][ T9109] #PF: supervisor read access in kernel mode [ 170.526826][ T9109] #PF: error_code(0x0000) - not-present page [ 170.526872][ T9109] PGD 7ffcd067 P4D 7ffcd067 PUD 2cd1c067 PMD 299b2067 PTE 0 [ 170.526969][ T9109] Oops: 0000 [#1] PREEMPT SMP KASAN [ 170.527022][ T9109] CPU: 2 PID: 9109 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 170.527086][ T9109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 170.528008][ T9109] RIP: 0010:sys_imageblit+0x61c/0x1240 [ 170.528008][ T9109] Code: 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 57 0b 00 00 48 b9 00 00 00 00 00 fc ff df 4c 89 fa 8b 45 b0 23 07 4d 8d 77 04 48 c1 ea 03 <0f> b6 0c 0a 4c 89 fa 83 e2 07 33 45 c4 83 c2 03 38 ca 7c 08 84 c9 [ 170.528008][ T9109] RSP: 0018:ffffc900042c7168 EFLAGS: 00010a06 [ 170.528008][ T9109] RAX: 0000000000000000 RBX: ffff888076970800 RCX: dffffc0000000000 [ 170.528008][ T9109] RDX: 1ffff9200124c3fc RSI: ffffffff83b4fada RDI: ffffffff887498e0 [ 170.528008][ T9109] RBP: ffffc900042c7230 R08: ffff88805d278e40 R09: 000000000000007f [ 170.528008][ T9109] R10: fffffbfff14f3347 R11: ffffffff8a799a3b R12: 0000000000000007 [ 170.528008][ T9109] R13: 0000000000000007 R14: ffffc90009261fe4 R15: ffffc90009261fe0 [ 170.528008][ T9109] FS: 00007f0af02fc700(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 170.528008][ T9109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.528008][ T9109] CR2: fffff5200124c3fc CR3: 00000000278c2000 CR4: 0000000000340ee0 [ 170.528008][ T9109] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.528008][ T9109] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.528008][ T9109] Call Trace: [ 170.528008][ T9109] ? preempt_schedule_irq+0xf3/0x160 [ 170.528008][ T9109] drm_fb_helper_sys_imageblit+0x21/0x180 [ 170.528008][ T9109] bit_putcs+0x9a3/0xf10 [ 170.528008][ T9109] ? bit_cursor+0x1a60/0x1a60 [ 170.528008][ T9109] ? write_comp_data+0x1/0x70 [ 170.528008][ T9109] ? fb_get_color_depth.part.0+0xcf/0x200 [ 170.528008][ T9109] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 170.528008][ T9109] fbcon_putcs+0x33c/0x3e0 [ 170.528008][ T9109] ? bit_cursor+0x1a60/0x1a60 [ 170.528008][ T9109] do_update_region+0x42b/0x6f0 [ 170.528008][ T9109] ? con_get_trans_old+0x2a0/0x2a0 [ 170.528008][ T9109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.528008][ T9109] ? fbcon_invert_region+0x21d/0x260 [ 170.528008][ T9109] invert_screen+0x2da/0x650 [ 170.528008][ T9109] ? vc_uniscr_copy_line+0x4b0/0x4b0 [ 170.528008][ T9109] ? __kmalloc+0x608/0x770 [ 170.528008][ T9109] ? mark_lock+0xc2/0x1220 [ 170.528008][ T9109] clear_selection+0x59/0x70 [ 170.528008][ T9109] vc_do_resize+0x1163/0x1460 [ 170.528008][ T9109] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 170.528008][ T9109] ? lockdep_hardirqs_on+0x421/0x5e0 [ 170.528008][ T9109] ? retint_kernel+0x2b/0x2b [ 170.528008][ T9109] ? trace_hardirqs_on_caller+0x6a/0x240 [ 170.528008][ T9109] ? preempt_schedule_irq+0xf3/0x160 [ 170.528008][ T9109] ? vc_uniscr_alloc+0xd0/0xd0 [ 170.528008][ T9109] ? crc32_le_base+0x303/0x610 [ 170.528008][ T9109] vc_resize+0x4d/0x60 [ 170.528008][ T9109] fbcon_do_set_font+0x4a6/0x960 [ 170.528008][ T9109] fbcon_set_font+0x72e/0x860 [ 170.528008][ T9109] ? set_con2fb_map+0xd60/0xd60 [ 170.528008][ T9109] con_font_op+0xe30/0x1270 [ 170.528008][ T9109] ? con_write+0xd0/0xd0 [ 170.528008][ T9109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.528008][ T9109] ? security_capable+0x95/0xc0 [ 170.528008][ T9109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.528008][ T9109] ? ns_capable_common+0x93/0x100 [ 170.528008][ T9109] vt_ioctl+0xd2e/0x26d0 [ 170.528008][ T9109] ? complete_change_console+0x3a0/0x3a0 [ 170.528008][ T9109] ? lock_downgrade+0x920/0x920 [ 170.528008][ T9109] ? rwlock_bug.part.0+0x90/0x90 [ 170.528008][ T9109] ? tomoyo_path_number_perm+0x214/0x520 [ 170.528008][ T9109] ? find_held_lock+0x35/0x130 [ 170.528008][ T9109] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 170.528008][ T9109] ? tty_jobctrl_ioctl+0x50/0xd40 [ 170.528008][ T9109] ? complete_change_console+0x3a0/0x3a0 [ 170.528008][ T9109] tty_ioctl+0xa37/0x14f0 [ 170.528008][ T9109] ? tty_vhangup+0x30/0x30 [ 170.528008][ T9109] ? tomoyo_path_number_perm+0x454/0x520 [ 170.528008][ T9109] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 170.528008][ T9109] ? tomoyo_path_number_perm+0x25e/0x520 [ 170.528008][ T9109] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 170.532287][ T9109] ? ___might_sleep+0x163/0x2c0 [ 170.532287][ T9109] ? tty_vhangup+0x30/0x30 [ 170.532287][ T9109] do_vfs_ioctl+0x977/0x14e0 [ 170.532287][ T9109] ? compat_ioctl_preallocate+0x220/0x220 [ 170.532287][ T9109] ? selinux_file_mprotect+0x620/0x620 [ 170.532287][ T9109] ? __fget+0x37f/0x550 [ 170.532287][ T9109] ? ksys_dup3+0x3e0/0x3e0 [ 170.532287][ T9109] ? ns_to_kernel_old_timeval+0x100/0x100 [ 170.532287][ T9109] ? tomoyo_file_ioctl+0x23/0x30 [ 170.532287][ T9109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.532287][ T9109] ? security_file_ioctl+0x8d/0xc0 [ 170.532287][ T9109] ksys_ioctl+0xab/0xd0 [ 170.532287][ T9109] __x64_sys_ioctl+0x73/0xb0 [ 170.532287][ T9109] do_syscall_64+0xfa/0x790 [ 170.532287][ T9109] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.532287][ T9109] RIP: 0033:0x45a7c9 [ 170.532287][ T9109] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.532287][ T9109] RSP: 002b:00007f0af02fbc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.532287][ T9109] RAX: ffffffffffffffda RBX: 000000000072bf00 RCX: 000000000045a7c9 [ 170.532287][ T9109] RDX: 0000000020000000 RSI: 0000000000004b61 RDI: 0000000000000003 [ 170.532287][ T9109] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 170.532287][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0af02fc6d4 [ 170.532287][ T9109] R13: 00000000004ab60f R14: 00000000006ede60 R15: 00000000ffffffff [ 170.532287][ T9109] Modules linked in: [ 170.532287][ T9109] CR2: fffff5200124c3fc [ 170.532287][ T9109] ---[ end trace 7698227ca2d5f789 ]--- [ 170.532287][ T9109] RIP: 0010:sys_imageblit+0x61c/0x1240 [ 170.532287][ T9109] Code: 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 57 0b 00 00 48 b9 00 00 00 00 00 fc ff df 4c 89 fa 8b 45 b0 23 07 4d 8d 77 04 48 c1 ea 03 <0f> b6 0c 0a 4c 89 fa 83 e2 07 33 45 c4 83 c2 03 38 ca 7c 08 84 c9 [ 170.532287][ T9109] RSP: 0018:ffffc900042c7168 EFLAGS: 00010a06 [ 170.532287][ T9109] RAX: 0000000000000000 RBX: ffff888076970800 RCX: dffffc0000000000 [ 170.532287][ T9109] RDX: 1ffff9200124c3fc RSI: ffffffff83b4fada RDI: ffffffff887498e0 [ 170.532287][ T9109] RBP: ffffc900042c7230 R08: ffff88805d278e40 R09: 000000000000007f [ 170.532287][ T9109] R10: fffffbfff14f3347 R11: ffffffff8a799a3b R12: 0000000000000007 [ 170.532287][ T9109] R13: 0000000000000007 R14: ffffc90009261fe4 R15: ffffc90009261fe0 [ 170.532287][ T9109] FS: 00007f0af02fc700(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 170.532287][ T9109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.532287][ T9109] CR2: fffff5200124c3fc CR3: 00000000278c2000 CR4: 0000000000340ee0 [ 170.532287][ T9109] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.532287][ T9109] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.532287][ T9109] Kernel panic - not syncing: Fatal exception [ 170.532287][ T9109] Kernel Offset: disabled [ 170.532287][ T9109] Rebooting in 86400 seconds..