Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. 2019/10/11 15:46:20 fuzzer started 2019/10/11 15:46:20 dialing manager at 10.128.0.105:43913 2019/10/11 15:46:20 syscalls: 2523 2019/10/11 15:46:20 code coverage: enabled 2019/10/11 15:46:20 comparison tracing: enabled 2019/10/11 15:46:20 extra coverage: extra coverage is not supported by the kernel 2019/10/11 15:46:20 setuid sandbox: enabled 2019/10/11 15:46:20 namespace sandbox: enabled 2019/10/11 15:46:20 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/11 15:46:20 fault injection: enabled 2019/10/11 15:46:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/11 15:46:20 net packet injection: enabled 2019/10/11 15:46:20 net device setup: enabled 2019/10/11 15:46:20 concurrency sanitizer: enabled 15:46:22 executing program 0: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @empty}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) syzkaller login: [ 48.864451][ T7278] IPVS: ftp: loaded support on port[0] = 21 15:46:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, 0x0, &(0x7f0000000280)) [ 48.967904][ T7278] chnl_net:caif_netlink_parms(): no params data found [ 49.064032][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.071279][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.095483][ T7278] device bridge_slave_0 entered promiscuous mode [ 49.103230][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.114626][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.133819][ T7278] device bridge_slave_1 entered promiscuous mode [ 49.167844][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.179551][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.215397][ T7278] team0: Port device team_slave_0 added [ 49.234640][ T7278] team0: Port device team_slave_1 added 15:46:23 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb4, 0x100) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480eff0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) open$dir(0x0, 0x20000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x95, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82344e62a2bc91b9f4fa6e6662aafd7478ac2", 0x8, 0x5}], 0x40, 0xfffffffffffffffe) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000140)=0x10001, 0x4) [ 49.297232][ T7278] device hsr_slave_0 entered promiscuous mode [ 49.334120][ T7278] device hsr_slave_1 entered promiscuous mode [ 49.372960][ T7282] IPVS: ftp: loaded support on port[0] = 21 [ 49.385355][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.392470][ T7278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.399887][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.406965][ T7278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.606381][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.623373][ T7285] IPVS: ftp: loaded support on port[0] = 21 [ 49.660817][ T7282] chnl_net:caif_netlink_parms(): no params data found [ 49.697994][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.716332][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.736205][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.746634][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 15:46:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x68}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6, 0x10, &(0x7f0000000000), 0xfdd1}, 0x48) [ 49.765265][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.828756][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.844932][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.852028][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.897981][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.915968][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.923046][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.932547][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.955426][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.963618][ T7282] device bridge_slave_0 entered promiscuous mode [ 49.986994][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.996207][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.004840][ T7282] device bridge_slave_1 entered promiscuous mode [ 50.074426][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.083566][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.104997][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.134117][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.143291][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.158129][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.167471][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.176708][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.198463][ T7278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.209137][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.230647][ T7285] chnl_net:caif_netlink_parms(): no params data found 15:46:24 executing program 4: r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x10000000006) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xbb, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) [ 50.248278][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.263497][ T7291] IPVS: ftp: loaded support on port[0] = 21 [ 50.317944][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.336756][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.416318][ T7282] team0: Port device team_slave_0 added [ 50.422219][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.434950][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.452870][ T7285] device bridge_slave_0 entered promiscuous mode [ 50.467231][ T7282] team0: Port device team_slave_1 added [ 50.482639][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.501996][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.523132][ T7285] device bridge_slave_1 entered promiscuous mode [ 50.669350][ T7282] device hsr_slave_0 entered promiscuous mode 15:46:24 executing program 0: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @empty}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 15:46:24 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() socket$inet6(0xa, 0x1, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 50.734876][ T7282] device hsr_slave_1 entered promiscuous mode [ 50.774093][ T7282] debugfs: Directory 'hsr0' with parent '/' already present! 15:46:24 executing program 0: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @empty}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) [ 50.820312][ T7298] IPVS: ftp: loaded support on port[0] = 21 [ 50.893290][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.948729][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.969045][ T7291] chnl_net:caif_netlink_parms(): no params data found 15:46:24 executing program 0: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @empty}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) [ 51.093352][ T7285] team0: Port device team_slave_0 added [ 51.159911][ T7285] team0: Port device team_slave_1 added [ 51.193243][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state 15:46:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 51.207371][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.218546][ T7291] device bridge_slave_0 entered promiscuous mode [ 51.227824][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.237706][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.247574][ T7291] device bridge_slave_1 entered promiscuous mode [ 51.308608][ T7285] device hsr_slave_0 entered promiscuous mode [ 51.364294][ T7285] device hsr_slave_1 entered promiscuous mode [ 51.403875][ T7285] debugfs: Directory 'hsr0' with parent '/' already present! [ 51.441106][ T7311] IPVS: ftp: loaded support on port[0] = 21 [ 51.457764][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.467077][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.478416][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.548498][ T7291] team0: Port device team_slave_0 added [ 51.554622][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 51.573173][ T7291] team0: Port device team_slave_1 added [ 51.585182][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.610528][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.618426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.626702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.635692][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.644536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.651606][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.659828][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.668848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.677427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.684514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.692629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.714715][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.751258][ T7282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.762235][ T7282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.774670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.784403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.793484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.805815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.815081][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.824070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.832986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.841840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.850394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.858899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.867589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.876315][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.896731][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.904124][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.912039][ T7298] device bridge_slave_0 entered promiscuous mode [ 51.919754][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.926883][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.935385][ T7298] device bridge_slave_1 entered promiscuous mode [ 51.947694][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.006624][ T7291] device hsr_slave_0 entered promiscuous mode [ 52.054354][ T7291] device hsr_slave_1 entered promiscuous mode [ 52.093803][ T7291] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.109380][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.117214][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.132608][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 15:46:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 52.198468][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.211210][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.227411][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.234547][ T7288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.250863][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.273517][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.284168][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.291249][ T7288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.300305][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.314716][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.324855][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.366411][ T7311] chnl_net:caif_netlink_parms(): no params data found [ 52.390019][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.399794][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.433640][ T7285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.445601][ T7285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.497423][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.514806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 15:46:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, 0x0, &(0x7f0000000280)) [ 52.539410][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.549432][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.564411][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.573594][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.583927][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.592832][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.622930][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.634527][ T7298] team0: Port device team_slave_0 added [ 52.642686][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.656378][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.679111][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state 15:46:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, 0x0, &(0x7f0000000280)) [ 52.687650][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.705529][ T7311] device bridge_slave_0 entered promiscuous mode [ 52.715977][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.723248][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.737370][ T7311] device bridge_slave_1 entered promiscuous mode [ 52.760372][ T7298] team0: Port device team_slave_1 added [ 52.800394][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.821923][ T7311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 15:46:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, 0x0, &(0x7f0000000280)) [ 52.848975][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.863884][ T7311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.876206][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.884865][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.936888][ T7298] device hsr_slave_0 entered promiscuous mode [ 52.995020][ T7298] device hsr_slave_1 entered promiscuous mode [ 53.053808][ T7298] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.094270][ T7311] team0: Port device team_slave_0 added [ 53.116677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.128790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.153055][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.160245][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.173443][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.174086][ C1] hrtimer: interrupt took 33007 ns [ 53.182600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.218865][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.226084][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.239887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.249408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.272951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.289144][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.298837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.308276][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.320663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.329470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.352231][ T7291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.363111][ T7291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.380881][ T7311] team0: Port device team_slave_1 added [ 53.397255][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.406268][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.415404][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.425086][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.439299][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 15:46:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, 0x0, &(0x7f0000000280)) [ 53.490197][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.542156][ T7311] device hsr_slave_0 entered promiscuous mode [ 53.614219][ T7311] device hsr_slave_1 entered promiscuous mode [ 53.653862][ T7311] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.691325][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.738391][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.747394][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.757563][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.777044][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.794609][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.803222][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.810553][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.863532][ T7298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.874673][ T7298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.907984][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.920243][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.929709][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.939208][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.946374][ T7287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.955559][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.965221][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.974944][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.984111][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.992906][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.002150][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.011399][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.020165][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.029420][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.038316][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 15:46:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x68}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6, 0x10, &(0x7f0000000000), 0xfdd1}, 0x48) [ 54.057347][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.068209][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.085860][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.100903][ T7311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.121196][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.129993][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.147744][ T7311] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.168947][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.185223][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.199294][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.206441][ T7287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.220843][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.229323][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.238334][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.247556][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.254776][ T7288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.284788][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.300269][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.310538][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.338238][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.350539][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.364759][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.374558][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.383248][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.393459][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.410206][ T7311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.635565][ T7387] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:46:28 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb4, 0x100) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480eff0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) open$dir(0x0, 0x20000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x95, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82344e62a2bc91b9f4fa6e6662aafd7478ac2", 0x8, 0x5}], 0x40, 0xfffffffffffffffe) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000140)=0x10001, 0x4) [ 55.185631][ T7390] XFS (loop2): Invalid superblock magic number 15:46:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, 0x0, &(0x7f0000000280)) 15:46:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:46:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x68}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6, 0x10, &(0x7f0000000000), 0xfdd1}, 0x48) 15:46:29 executing program 4: r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x10000000006) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xbb, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) 15:46:29 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb4, 0x100) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480eff0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) open$dir(0x0, 0x20000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x95, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82344e62a2bc91b9f4fa6e6662aafd7478ac2", 0x8, 0x5}], 0x40, 0xfffffffffffffffe) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000140)=0x10001, 0x4) 15:46:29 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() socket$inet6(0xa, 0x1, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:46:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x68}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6, 0x10, &(0x7f0000000000), 0xfdd1}, 0x48) 15:46:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, 0x0, &(0x7f0000000280)) [ 56.156555][ T7414] XFS (loop2): Invalid superblock magic number 15:46:30 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() socket$inet6(0xa, 0x1, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:46:30 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() socket$inet6(0xa, 0x1, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 56.395903][ T7443] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:46:30 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() socket$inet6(0xa, 0x1, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x60, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 56.438540][ T7445] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:46:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb4, 0x100) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480eff0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) open$dir(0x0, 0x20000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x95, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82344e62a2bc91b9f4fa6e6662aafd7478ac2", 0x8, 0x5}], 0x40, 0xfffffffffffffffe) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000140)=0x10001, 0x4) 15:46:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:46:30 executing program 4: r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x10000000006) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xbb, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) [ 57.209670][ T7466] ================================================================== [ 57.217824][ T7466] BUG: KCSAN: data-race in __splice_from_pipe / pipe_poll [ 57.224927][ T7466] [ 57.227260][ T7466] read to 0xffff8881053d2ab8 of 4 bytes by task 7451 on cpu 1: [ 57.234831][ T7466] pipe_poll+0x84/0x1d0 [ 57.239022][ T7466] do_select+0x7d0/0x1020 [ 57.243354][ T7466] core_sys_select+0x38b/0x520 [ 57.248129][ T7466] __x64_sys_pselect6+0x22a/0x280 [ 57.253160][ T7466] do_syscall_64+0xcf/0x2f0 [ 57.257850][ T7466] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 57.263742][ T7466] [ 57.266076][ T7466] write to 0xffff8881053d2ab8 of 4 bytes by task 7466 on cpu 0: [ 57.273718][ T7466] __splice_from_pipe+0x3ce/0x480 [ 57.278749][ T7466] do_vmsplice.part.0+0x1c5/0x210 [ 57.283777][ T7466] __do_sys_vmsplice+0x15f/0x1c0 [ 57.288733][ T7466] __x64_sys_vmsplice+0x5e/0x80 [ 57.293596][ T7466] do_syscall_64+0xcf/0x2f0 [ 57.298113][ T7466] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 57.303994][ T7466] [ 57.306325][ T7466] Reported by Kernel Concurrency Sanitizer on: [ 57.312495][ T7466] CPU: 0 PID: 7466 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 57.320192][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.330248][ T7466] ================================================================== [ 57.338306][ T7466] Kernel panic - not syncing: panic_on_warn set ... [ 57.344903][ T7466] CPU: 0 PID: 7466 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 57.352355][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.362420][ T7466] Call Trace: [ 57.365729][ T7466] dump_stack+0xf5/0x159 [ 57.369994][ T7466] panic+0x209/0x639 [ 57.373914][ T7466] ? vprintk_func+0x8d/0x140 [ 57.378533][ T7466] kcsan_report.cold+0xc/0x1b [ 57.383231][ T7466] __kcsan_setup_watchpoint+0x3ee/0x510 [ 57.388787][ T7466] __tsan_write4+0x32/0x40 [ 57.393214][ T7466] __splice_from_pipe+0x3ce/0x480 [ 57.398248][ T7466] ? iter_to_pipe+0x3f0/0x3f0 [ 57.402947][ T7466] do_vmsplice.part.0+0x1c5/0x210 [ 57.407982][ T7466] __do_sys_vmsplice+0x15f/0x1c0 [ 57.412931][ T7466] ? __tsan_read8+0x2c/0x30 [ 57.417551][ T7466] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 57.423459][ T7466] ? __kcsan_setup_watchpoint+0x96/0x510 [ 57.429108][ T7466] ? _copy_to_user+0x84/0xb0 [ 57.433712][ T7466] ? __kcsan_setup_watchpoint+0x96/0x510 [ 57.439352][ T7466] ? __kcsan_setup_watchpoint+0x96/0x510 [ 57.445002][ T7466] __x64_sys_vmsplice+0x5e/0x80 [ 57.449862][ T7466] do_syscall_64+0xcf/0x2f0 [ 57.454405][ T7466] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 57.460296][ T7466] RIP: 0033:0x459a59 [ 57.464189][ T7466] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.483791][ T7466] RSP: 002b:00007fabc4c78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 57.493423][ T7466] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a59 [ 57.501428][ T7466] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000007 [ 57.509419][ T7466] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 57.517394][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabc4c796d4 [ 57.525377][ T7466] R13: 00000000004c94e5 R14: 00000000004e0c68 R15: 00000000ffffffff [ 57.534726][ T7466] Kernel Offset: disabled [ 57.539057][ T7466] Rebooting in 86400 seconds..