[ 52.306181][ T26] audit: type=1800 audit(1573376786.210:27): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 52.326770][ T26] audit: type=1800 audit(1573376786.210:28): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.465992][ T26] audit: type=1800 audit(1573376787.440:29): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 53.486032][ T26] audit: type=1800 audit(1573376787.440:30): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. 2019/11/10 09:06:35 fuzzer started 2019/11/10 09:06:37 dialing manager at 10.128.0.105:33901 2019/11/10 09:06:37 syscalls: 2553 2019/11/10 09:06:37 code coverage: enabled 2019/11/10 09:06:37 comparison tracing: enabled 2019/11/10 09:06:37 extra coverage: extra coverage is not supported by the kernel 2019/11/10 09:06:37 setuid sandbox: enabled 2019/11/10 09:06:37 namespace sandbox: enabled 2019/11/10 09:06:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/10 09:06:37 fault injection: enabled 2019/11/10 09:06:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/10 09:06:37 net packet injection: enabled 2019/11/10 09:06:37 net device setup: enabled 2019/11/10 09:06:37 concurrency sanitizer: enabled 2019/11/10 09:06:37 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 76.248282][ T8082] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/10 09:06:53 adding functions to KCSAN blacklist: 'generic_permission' 'lruvec_lru_size' 'pid_update_inode' 'ext4_free_inode' 'xas_find_marked' 'queue_access_lock' 'pipe_wait' 'yama_ptracer_del' 'blk_mq_dispatch_rq_list' 'n_tty_receive_buf_common' '__snd_rawmidi_transmit_ack' '__perf_event_overflow' 'generic_fillattr' 'wbt_issue' 'vm_area_dup' 'task_dump_owner' 'ext4_has_free_clusters' 'free_pid' 'commit_echoes' 'percpu_counter_add_batch' 'tomoyo_supervisor' 'mod_timer' 'taskstats_exit' 'inet_putpeer' 'sit_tunnel_xmit' 'mem_cgroup_select_victim_node' 'dd_has_work' 'process_srcu' 'do_exit' 'audit_log_start' '__blk_queue_split' 'generic_update_time' 'snd_seq_timer_get_cur_tick' 'blk_stat_add' 'find_next_bit' 'generic_write_end' 'blk_mq_get_request' 'futex_wait_queue_me' 'ext4_mb_find_by_goal' 'shmem_file_read_iter' 'tick_nohz_idle_stop_tick' 'do_mpage_readpage' 'tick_do_update_jiffies64' 'ext4_nonda_switch' 'pcpu_alloc' 'osq_lock' 'watchdog' 'xas_clear_mark' 'tick_sched_do_timer' 'ext4_mark_iloc_dirty' 'icmp_global_allow' 'blk_mq_run_hw_queue' 'rcu_gp_fqs_loop' 'ext4_mb_good_group' 'list_lru_count_one' 'fsnotify' '__ext4_new_inode' 'ep_poll' 'copy_process' '__alloc_file' 'd_instantiate_new' 'snd_ctl_notify' 'ext4_free_inodes_count' 'do_syslog' 'rcu_gp_fqs_check_wake' 'snd_seq_prioq_cell_out' 'alloc_empty_file' 'kauditd_thread' 'echo_char' 'kvm_arch_vcpu_load' '__dev_queue_xmit' 'balance_dirty_pages' 'ip_finish_output2' 'snd_seq_check_queue' '__hrtimer_run_queues' 'poll_schedule_timeout' 'blk_mq_sched_dispatch_requests' 'pipe_poll' 'ktime_get_seconds' 'p9_poll_workfn' 'find_get_pages_range_tag' 'timer_clear_idle' 'fasync_remove_entry' 'ext4_da_write_end' 'lookup_fast' 'tcp_add_backlog' 'do_wait' 'do_nanosleep' 'evict' 'do_readlinkat' 'ktime_get_real_seconds' 'inactive_list_is_low' 'add_timer' 'shmem_getpage_gfp' 'run_timer_softirq' 'dnotify_flush' 'ksys_read' 09:10:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffff1, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000ac0), 0x12f, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 09:10:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f6"], 0x0, 0x0, 0x0}) [ 318.113372][ T8085] IPVS: ftp: loaded support on port[0] = 21 [ 318.210431][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 318.274263][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.296168][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.303932][ T8085] device bridge_slave_0 entered promiscuous mode [ 318.317141][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.324371][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.346679][ T8085] device bridge_slave_1 entered promiscuous mode [ 318.363145][ T8089] IPVS: ftp: loaded support on port[0] = 21 09:10:52 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) [ 318.385706][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.409713][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.454114][ T8085] team0: Port device team_slave_0 added [ 318.469209][ T8085] team0: Port device team_slave_1 added [ 318.528614][ T8085] device hsr_slave_0 entered promiscuous mode [ 318.576451][ T8085] device hsr_slave_1 entered promiscuous mode 09:10:52 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc038563c, &(0x7f0000000040)={0x980914}) [ 318.674256][ T8093] IPVS: ftp: loaded support on port[0] = 21 [ 318.717411][ T8089] chnl_net:caif_netlink_parms(): no params data found [ 318.757131][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.764227][ T8085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.771657][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.778715][ T8085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.046860][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.054184][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.077075][ T8089] device bridge_slave_0 entered promiscuous mode [ 319.124540][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.137627][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.145478][ T8089] device bridge_slave_1 entered promiscuous mode [ 319.179378][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.238266][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.277692][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.307260][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 319.357729][ T8121] IPVS: ftp: loaded support on port[0] = 21 [ 319.367062][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.377065][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.397953][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.419479][ T8089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.441856][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 319.487802][ T8089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.523040][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.537865][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.566631][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.573680][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.618064][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.646975][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.666435][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.673502][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.726697][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.747377][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 09:10:53 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x3e8, 0x0, 0xffffffffffffff37) [ 319.825606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.857079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.890750][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.946893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.977943][ T8089] team0: Port device team_slave_0 added [ 320.050020][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.077358][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.108604][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.137675][ T8089] team0: Port device team_slave_1 added [ 320.146508][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.153562][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.228639][ T8093] device bridge_slave_0 entered promiscuous mode [ 320.250928][ T8085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.287330][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.339273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.357119][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.389190][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.408113][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.428163][ T8093] device bridge_slave_1 entered promiscuous mode [ 320.465045][ T8126] IPVS: ftp: loaded support on port[0] = 21 [ 320.469985][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 09:10:54 executing program 5: syz_emit_ethernet(0xe, &(0x7f0000000080)={@broadcast, @local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "9a0800", 0x0, "6b6a90"}}}}}}}, 0x0) [ 320.550625][ T8089] device hsr_slave_0 entered promiscuous mode [ 320.606568][ T8089] device hsr_slave_1 entered promiscuous mode [ 320.638459][ T8089] debugfs: Directory 'hsr0' with parent '/' already present! [ 320.645993][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.653920][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.711188][ T8138] IPVS: ftp: loaded support on port[0] = 21 [ 320.735970][ T8121] chnl_net:caif_netlink_parms(): no params data found [ 320.764859][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.840180][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.930409][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.949778][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.004330][ T8121] device bridge_slave_0 entered promiscuous mode [ 321.054705][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.069451][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.099558][ T8121] device bridge_slave_1 entered promiscuous mode [ 321.124399][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.150415][ T8093] team0: Port device team_slave_0 added [ 321.210760][ T8089] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.260912][ T8093] team0: Port device team_slave_1 added 09:10:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) nanosleep(&(0x7f0000000300), &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x0, 0xfffffff9, @local, 0x6}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e20, @broadcast}], 0x68) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000140)) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000240)=""/83, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) epoll_create1(0x80000) [ 321.303943][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.316743][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.377989][ T8121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.411165][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.426857][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.462578][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.469669][ T8113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.491191][ C1] hrtimer: interrupt took 24508 ns [ 321.578044][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.629444][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.656455][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.663572][ T8113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.716652][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.749800][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 09:10:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) nanosleep(&(0x7f0000000300), &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x0, 0xfffffff9, @local, 0x6}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e20, @broadcast}], 0x68) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000140)) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000240)=""/83, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) epoll_create1(0x80000) [ 321.780499][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.832998][ T8089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.891243][ T8089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.930897][ T8121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.988445][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.000055][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 09:10:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}}, 0x0) [ 322.039776][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.059525][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.096917][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.125306][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.147080][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.186727][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.384708][ T8126] chnl_net:caif_netlink_parms(): no params data found [ 322.412703][ T8089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.482116][ T8093] device hsr_slave_0 entered promiscuous mode [ 322.536540][ T8093] device hsr_slave_1 entered promiscuous mode [ 322.566172][ T8093] debugfs: Directory 'hsr0' with parent '/' already present! [ 322.591890][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.604678][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.624425][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.642213][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.665017][ T8138] chnl_net:caif_netlink_parms(): no params data found [ 322.803243][ T8121] team0: Port device team_slave_0 added [ 322.907865][ T8121] team0: Port device team_slave_1 added [ 322.936177][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.943279][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state 09:10:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}}, 0x0) [ 322.990853][ T8126] device bridge_slave_0 entered promiscuous mode [ 323.033151][ T8211] binder: 8207:8211 unknown command 246 [ 323.046627][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.071940][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.091354][ T8211] binder: 8207:8211 ioctl c0306201 20000040 returned -22 [ 323.136620][ T8126] device bridge_slave_1 entered promiscuous mode 09:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) fanotify_init(0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) [ 323.258932][ T8121] device hsr_slave_0 entered promiscuous mode [ 323.316448][ T8121] device hsr_slave_1 entered promiscuous mode [ 323.333108][ T8223] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 323.376241][ T8121] debugfs: Directory 'hsr0' with parent '/' already present! [ 323.395338][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.413332][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.450060][ T8138] device bridge_slave_0 entered promiscuous mode 09:10:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) close(r1) [ 323.746248][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.753395][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.815156][ T8138] device bridge_slave_1 entered promiscuous mode [ 323.885477][ T8126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.910601][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.992262][ T8126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.069891][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.162084][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.197705][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.208479][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:10:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}}, 0x0) [ 324.268136][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.317353][ T8126] team0: Port device team_slave_0 added [ 324.333093][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.370473][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.416640][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.423724][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.485898][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.543477][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 09:10:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) close(r1) [ 324.583966][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.591073][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.681932][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.742089][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.805541][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.849699][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.906035][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.965457][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.025670][ T8093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.080103][ T8093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.163401][ T8126] team0: Port device team_slave_1 added [ 325.554924][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.569509][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.618698][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.662480][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.714689][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.752008][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.842052][ T8138] team0: Port device team_slave_0 added [ 325.853201][ T8121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.871931][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.888251][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.940306][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.981215][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.062407][ T8126] device hsr_slave_0 entered promiscuous mode [ 326.126461][ T8126] device hsr_slave_1 entered promiscuous mode [ 326.147283][ T8126] debugfs: Directory 'hsr0' with parent '/' already present! [ 326.155600][ T8138] team0: Port device team_slave_1 added [ 326.171494][ T8121] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.193242][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.225928][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.289380][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.302571][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.321158][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.328294][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.391706][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.509004][ T8138] device hsr_slave_0 entered promiscuous mode [ 326.529065][ T8138] device hsr_slave_1 entered promiscuous mode [ 326.596177][ T8138] debugfs: Directory 'hsr0' with parent '/' already present! [ 326.612628][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.630850][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.726521][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.733588][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.776812][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.910617][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.950969][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.009033][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.078703][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 09:11:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchmod(r1, 0x55) [ 327.139244][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.206305][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.250310][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.312355][ T8121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.360869][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.446030][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.467997][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.520724][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.584527][ T8121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.661545][ T8126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.749029][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.771429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.835647][ T8126] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.916959][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.924829][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.070901][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.116592][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.125407][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.186682][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.193889][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.266819][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.320545][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.360459][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.367552][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.400249][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.461445][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.521031][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.560670][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.600684][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.647123][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.711811][ T8126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.760231][ T8126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.832166][ T8138] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.916834][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.924841][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.007242][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.015680][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.075116][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.122592][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.174933][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 09:11:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='f\x00\x00\x00\xf3\xff\xff\xff\xff\xff\xff\xff', 0x5114f7941f3d736c, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\xfeL \x00\x00\nz\x03', 0xffb}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3}, 0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 329.218289][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.362287][ T8126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.412487][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.430695][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.497038][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.505457][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.512530][ T8120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.604046][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.645089][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.696766][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.703846][ T8120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.757151][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.795284][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.825178][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.859356][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.882177][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.901939][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.079909][ T8352] device bond0 entered promiscuous mode [ 330.085494][ T8352] device bond_slave_0 entered promiscuous mode [ 330.092964][ T8352] device bond_slave_1 entered promiscuous mode [ 330.101059][ T8352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.112800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.120724][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.128820][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.137396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.146840][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.155144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.165961][ T8352] device bond0 left promiscuous mode [ 330.171546][ T8352] device bond_slave_0 left promiscuous mode [ 330.177563][ T8352] device bond_slave_1 left promiscuous mode [ 330.213197][ T8138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.238345][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.247587][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.259243][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.292149][ T8138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.316955][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.324473][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 09:11:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xc50ea21d) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8013, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000480)=0x4, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000003c0)) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0x80000001, 0x4) openat$cgroup_ro(r0, &(0x7f00000005c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@ccm_128={{}, "4d5cc2004bdd5bcf", "18ae8b3303fd1b39ff1efcec2c056481", "5c85a865", "3abe2ac8e00275ab"}, 0x28) 09:11:04 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0x1, @output}) 09:11:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r5, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x2000402) fallocate(r4, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x4, r5, 0x0, 0x0, 0x800}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400006f, 0x0, 0x0) 09:11:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}}, 0x0) 09:11:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchmod(r1, 0x55) 09:11:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x1, 0x0, &(0x7f0000000200)="d1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="9f"}) 09:11:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@nocompress='nocompress'}]}) 09:11:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r5, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x2000402) fallocate(r4, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x4, r5, 0x0, 0x0, 0x800}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400006f, 0x0, 0x0) 09:11:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r5, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x2000402) fallocate(r4, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x4, r5, 0x0, 0x0, 0x800}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400006f, 0x0, 0x0) 09:11:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}}, 0x0) [ 331.031963][ T8403] ISOFS: Unable to identify CD-ROM format. 09:11:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r5, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x2000402) fallocate(r4, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x4, r5, 0x0, 0x0, 0x800}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400006f, 0x0, 0x0) 09:11:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r5, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x2000402) fallocate(r4, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x4, r5, 0x0, 0x0, 0x800}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400006f, 0x0, 0x0) [ 331.419618][ T8394] debugfs: File '8386' in directory 'proc' already present! [ 331.457196][ T8394] binder: BINDER_SET_CONTEXT_MGR already set [ 331.489070][ T8394] binder: 8386:8394 ioctl 40046207 0 returned -16 09:11:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xc50ea21d) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8013, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000480)=0x4, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000003c0)) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0x80000001, 0x4) openat$cgroup_ro(r0, &(0x7f00000005c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@ccm_128={{}, "4d5cc2004bdd5bcf", "18ae8b3303fd1b39ff1efcec2c056481", "5c85a865", "3abe2ac8e00275ab"}, 0x28) 09:11:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r5, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x2000402) fallocate(r4, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x4, r5, 0x0, 0x0, 0x800}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400006f, 0x0, 0x0) 09:11:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}}, 0x0) 09:11:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_STAT(0x0, 0x3, &(0x7f0000000000)=""/192) 09:11:07 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_init1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 09:11:07 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') sendfile(r0, r1, 0x0, 0xb8f3) 09:11:07 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') sendfile(r0, r1, 0x0, 0xb8f3) 09:11:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0x1a}, @local}, 0xc) close(r0) 09:11:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) syncfs(0xffffffffffffffff) fchdir(0xffffffffffffffff) 09:11:07 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') sendfile(r0, r1, 0x0, 0xb8f3) 09:11:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r1, r0, 0x0, 0x9) sendfile(r0, r1, &(0x7f0000000000), 0x7) 09:11:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) read(r0, &(0x7f0000000300)=""/115, 0x73) sched_setscheduler(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) [ 333.578110][ T8488] syz-executor.5 (8488): /proc/8487/oom_adj is deprecated, please use /proc/8487/oom_score_adj instead. [ 333.666314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 333.672113][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:11:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xc50ea21d) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8013, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000480)=0x4, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000003c0)) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0x80000001, 0x4) openat$cgroup_ro(r0, &(0x7f00000005c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@ccm_128={{}, "4d5cc2004bdd5bcf", "18ae8b3303fd1b39ff1efcec2c056481", "5c85a865", "3abe2ac8e00275ab"}, 0x28) 09:11:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}}, 0x0) 09:11:14 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') sendfile(r0, r1, 0x0, 0xb8f3) 09:11:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) nanosleep(0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x0, 0x0, @local, 0x80000000}], 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) getsockopt(0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000240)=""/83, &(0x7f00000002c0)=0x53) 09:11:14 executing program 5: 09:11:14 executing program 3: 09:11:14 executing program 3: 09:11:14 executing program 5: 09:11:14 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r0, 0xffffffffffffffff, 0x0, 0xb8f3) 09:11:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) nanosleep(0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x0, 0x0, @local, 0x80000000}], 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) getsockopt(0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000240)=""/83, &(0x7f00000002c0)=0x53) 09:11:14 executing program 3: 09:11:14 executing program 5: 09:11:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xc50ea21d) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8013, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000480)=0x4, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000003c0)) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0x80000001, 0x4) openat$cgroup_ro(r0, &(0x7f00000005c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@ccm_128={{}, "4d5cc2004bdd5bcf", "18ae8b3303fd1b39ff1efcec2c056481", "5c85a865", "3abe2ac8e00275ab"}, 0x28) 09:11:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r0, 0xffffffffffffffff, 0x0, 0xb8f3) 09:11:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}}, 0x0) 09:11:23 executing program 5: 09:11:23 executing program 2: 09:11:23 executing program 3: 09:11:23 executing program 5: 09:11:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r0, 0xffffffffffffffff, 0x0, 0xb8f3) 09:11:23 executing program 2: 09:11:23 executing program 3: 09:11:23 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x102}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db0c21d74b8c1994cb573ff0c5320e3fe397bd8a7c25799573fdffffffffffffff16ed2d05dfcd8089ed7cfcc53c2c4c19daee0a2449ee45439a1b546b1aba6dcc98"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=r8, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000001e08184400080001000000000000000c0008006c000000000000000c000200f52c2f740000ffffffff060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24010855) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x400007) fsetxattr(r9, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x50, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) chroot(&(0x7f0000000240)='./file0\x00') r10 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r10, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r10, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x88100, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r11, 0xc0206416, &(0x7f0000000280)={0x8, 0x0, 0x9, 0x750f, 0x4, 0xf5f}) chdir(&(0x7f0000000180)='./file0\x00') 09:11:23 executing program 2: link(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in6=@loopback}}, {{@in=@remote}, 0x0, @in6=@empty}}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000000140)) fcntl$setsig(r0, 0xa, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = inotify_init() ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000100)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x41c000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$nbd(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000006517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3202f99f16d06589e0b469637a7267592938766010a35efd21affe2009efdc31a3815870000010000742dc6b88be20c606c9f008694c03787fc6282a9d3ea9659c408b6fc2c673c6f25262f7cbf08993588a66a1b3e76a685ed9578f7e629205940c722960a153a886e7201cf029a"], 0x4b) sendfile(r2, r2, &(0x7f0000000200), 0xa198) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240801, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x1, 0xa0080) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000002c0)) [ 358.293087][ T8583] ================================================================== [ 358.301227][ T8583] BUG: KCSAN: data-race in __add_to_page_cache_locked / ext4_writepages [ 358.309534][ T8583] [ 358.311858][ T8583] read to 0xffff888125d7a330 of 8 bytes by task 8090 on cpu 1: [ 358.319404][ T8583] ext4_writepages+0x188/0x2300 [ 358.324263][ T8583] do_writepages+0x6b/0x170 [ 358.328760][ T8583] __writeback_single_inode+0xaf/0x8e0 [ 358.334210][ T8583] writeback_sb_inodes+0x4ba/0xa50 [ 358.339311][ T8583] __writeback_inodes_wb+0xe8/0x1b0 [ 358.344501][ T8583] wb_writeback+0x557/0x6a0 [ 358.348998][ T8583] wb_workfn+0x696/0x970 [ 358.353240][ T8583] process_one_work+0x3d4/0x890 [ 358.358091][ T8583] worker_thread+0xa0/0x800 [ 358.362590][ T8583] kthread+0x1d4/0x200 [ 358.366653][ T8583] ret_from_fork+0x1f/0x30 [ 358.371052][ T8583] [ 358.373378][ T8583] write to 0xffff888125d7a330 of 8 bytes by task 8583 on cpu 0: [ 358.381002][ T8583] __add_to_page_cache_locked+0x298/0x780 [ 358.386820][ T8583] add_to_page_cache_lru+0xc4/0x260 [ 358.392027][ T8583] pagecache_get_page+0x2ac/0x6f0 [ 358.397052][ T8583] grab_cache_page_write_begin+0x5d/0x90 [ 358.402685][ T8583] ext4_da_write_begin+0x175/0x7e0 [ 358.407799][ T8583] generic_perform_write+0x136/0x320 [ 358.413079][ T8583] __generic_file_write_iter+0x251/0x380 [ 358.418708][ T8583] ext4_file_write_iter+0x1bd/0xa00 [ 358.423894][ T8583] new_sync_write+0x388/0x4a0 [ 358.428559][ T8583] __vfs_write+0xb1/0xc0 [ 358.432796][ T8583] vfs_write+0x18a/0x390 [ 358.437032][ T8583] ksys_write+0xd5/0x1b0 [ 358.441264][ T8583] __x64_sys_write+0x4c/0x60 [ 358.445851][ T8583] do_syscall_64+0xcc/0x370 [ 358.450349][ T8583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 358.456219][ T8583] [ 358.458535][ T8583] Reported by Kernel Concurrency Sanitizer on: [ 358.464686][ T8583] CPU: 0 PID: 8583 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 358.472476][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.482525][ T8583] ================================================================== [ 358.490586][ T8583] Kernel panic - not syncing: panic_on_warn set ... [ 358.497173][ T8583] CPU: 0 PID: 8583 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 358.504963][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.515007][ T8583] Call Trace: [ 358.518305][ T8583] dump_stack+0xf5/0x159 [ 358.522546][ T8583] panic+0x210/0x640 [ 358.526444][ T8583] ? vprintk_func+0x8d/0x140 [ 358.531035][ T8583] kcsan_report.cold+0xc/0xe [ 358.535624][ T8583] kcsan_setup_watchpoint+0x3fe/0x410 [ 358.540998][ T8583] __tsan_unaligned_write8+0x143/0x1f0 [ 358.546452][ T8583] __add_to_page_cache_locked+0x298/0x780 [ 358.552175][ T8583] ? __read_once_size.constprop.0+0x20/0x20 [ 358.558066][ T8583] add_to_page_cache_lru+0xc4/0x260 [ 358.563271][ T8583] pagecache_get_page+0x2ac/0x6f0 [ 358.568297][ T8583] grab_cache_page_write_begin+0x5d/0x90 [ 358.573925][ T8583] ext4_da_write_begin+0x175/0x7e0 [ 358.579039][ T8583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.585280][ T8583] ? iov_iter_fault_in_readable+0x15c/0x2b0 [ 358.591169][ T8583] generic_perform_write+0x136/0x320 [ 358.596462][ T8583] __generic_file_write_iter+0x251/0x380 [ 358.602089][ T8583] ? constant_test_bit+0x12/0x30 [ 358.607032][ T8583] ext4_file_write_iter+0x1bd/0xa00 [ 358.612231][ T8583] ? iov_iter_init+0xe2/0x120 [ 358.616909][ T8583] new_sync_write+0x388/0x4a0 [ 358.621590][ T8583] __vfs_write+0xb1/0xc0 [ 358.625829][ T8583] vfs_write+0x18a/0x390 [ 358.630072][ T8583] ksys_write+0xd5/0x1b0 [ 358.634320][ T8583] __x64_sys_write+0x4c/0x60 [ 358.638916][ T8583] do_syscall_64+0xcc/0x370 [ 358.643422][ T8583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 358.649310][ T8583] RIP: 0033:0x45a219 [ 358.653206][ T8583] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.672800][ T8583] RSP: 002b:00007f18c5344c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.681200][ T8583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 358.689174][ T8583] RDX: 00000000c50ea21d RSI: 0000000020000040 RDI: 0000000000000003 [ 358.697147][ T8583] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 358.705121][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18c53456d4 [ 358.713094][ T8583] R13: 00000000004cab18 R14: 00000000004e2fb8 R15: 00000000ffffffff [ 359.881101][ T8583] Shutting down cpus with NMI [ 359.887157][ T8583] Kernel Offset: disabled [ 359.891486][ T8583] Rebooting in 86400 seconds..