[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.101113][ T23] audit: type=1800 audit(1570242327.274:25): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 37.129304][ T23] audit: type=1800 audit(1570242327.274:26): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 37.150993][ T23] audit: type=1800 audit(1570242327.274:27): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. 2019/10/05 02:25:38 fuzzer started 2019/10/05 02:25:40 dialing manager at 10.128.0.105:35709 2019/10/05 02:25:40 syscalls: 2523 2019/10/05 02:25:40 code coverage: enabled 2019/10/05 02:25:40 comparison tracing: enabled 2019/10/05 02:25:40 extra coverage: extra coverage is not supported by the kernel 2019/10/05 02:25:40 setuid sandbox: enabled 2019/10/05 02:25:40 namespace sandbox: enabled 2019/10/05 02:25:40 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/05 02:25:40 fault injection: enabled 2019/10/05 02:25:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/05 02:25:40 net packet injection: enabled 2019/10/05 02:25:40 net device setup: enabled 2019/10/05 02:25:40 concurrency sanitizer: enabled 02:25:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) syzkaller login: [ 52.666991][ T7247] IPVS: ftp: loaded support on port[0] = 21 [ 52.757429][ T7247] chnl_net:caif_netlink_parms(): no params data found [ 52.793796][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state 02:25:42 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, 0xfffffffffffff59c}}}, 0x90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x40000000, 0x10000101) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x100020) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) [ 52.801061][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.815632][ T7247] device bridge_slave_0 entered promiscuous mode [ 52.824402][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.842277][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.868427][ T7247] device bridge_slave_1 entered promiscuous mode [ 52.907820][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.927932][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.964737][ T7247] team0: Port device team_slave_0 added [ 52.987651][ T7247] team0: Port device team_slave_1 added 02:25:43 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 53.059653][ T7247] device hsr_slave_0 entered promiscuous mode [ 53.116725][ T7247] device hsr_slave_1 entered promiscuous mode [ 53.192930][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.200183][ T7247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.207539][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.214585][ T7247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.265088][ T7250] IPVS: ftp: loaded support on port[0] = 21 [ 53.354112][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.390669][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:25:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socket$inet(0xa, 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=@broute={'\n\x00oute\x00', 0x20, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20d9f000], 0x0, 0x0, 0x0}, 0xa8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x0, 0x73) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000ad00)) [ 53.399788][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.418352][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.447831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.465272][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.494004][ T7253] IPVS: ftp: loaded support on port[0] = 21 [ 53.500738][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.516824][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.523875][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.570164][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.586913][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.594000][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.660062][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.707908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.722202][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.740421][ T7250] chnl_net:caif_netlink_parms(): no params data found [ 53.752837][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.771398][ T7257] IPVS: ftp: loaded support on port[0] = 21 [ 53.782722][ T7247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.795029][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.814335][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.823159][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 02:25:44 executing program 4: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) [ 53.878214][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.892706][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.906487][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.916750][ T7250] device bridge_slave_0 entered promiscuous mode [ 53.965312][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.976699][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.984652][ T7250] device bridge_slave_1 entered promiscuous mode [ 54.058345][ T7250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.090022][ T7253] chnl_net:caif_netlink_parms(): no params data found [ 54.121137][ T7250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.226967][ T7250] team0: Port device team_slave_0 added [ 54.245563][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.283191][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.302198][ T7253] device bridge_slave_0 entered promiscuous mode [ 54.310873][ T7250] team0: Port device team_slave_1 added [ 54.336648][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.343736][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.351937][ T7269] IPVS: ftp: loaded support on port[0] = 21 [ 54.364505][ T7253] device bridge_slave_1 entered promiscuous mode 02:25:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x8, 0xfffffff00000004}]}}}]}, 0x3c}}, 0x0) 02:25:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 54.409900][ T7257] chnl_net:caif_netlink_parms(): no params data found [ 54.488993][ T7250] device hsr_slave_0 entered promiscuous mode [ 54.526903][ T7250] device hsr_slave_1 entered promiscuous mode [ 54.566880][ T7250] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.579009][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 02:25:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 54.623056][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.630170][ T7250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.637482][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.644519][ T7250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.655296][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.687743][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.694890][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.707182][ T7257] device bridge_slave_0 entered promiscuous mode [ 54.724305][ T7276] IPVS: ftp: loaded support on port[0] = 21 [ 54.729439][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.741948][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.750493][ T7257] device bridge_slave_1 entered promiscuous mode [ 54.775983][ T7253] team0: Port device team_slave_0 added [ 54.783369][ T7253] team0: Port device team_slave_1 added 02:25:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 54.811958][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.830564][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.840953][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.887711][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:25:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 54.999397][ T7253] device hsr_slave_0 entered promiscuous mode [ 55.046648][ T7253] device hsr_slave_1 entered promiscuous mode [ 55.086454][ T7253] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.103310][ T7257] team0: Port device team_slave_0 added [ 55.113684][ T7257] team0: Port device team_slave_1 added [ 55.126024][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0 02:25:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 55.148048][ T7269] chnl_net:caif_netlink_parms(): no params data found [ 55.222823][ T7257] device hsr_slave_0 entered promiscuous mode [ 55.286865][ T7257] device hsr_slave_1 entered promiscuous mode [ 55.326416][ T7257] debugfs: Directory 'hsr0' with parent '/' already present! 02:25:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 55.373540][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.380820][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.388986][ T7269] device bridge_slave_0 entered promiscuous mode [ 55.440862][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.475208][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.483935][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.492651][ T7269] device bridge_slave_1 entered promiscuous mode [ 55.510588][ T7250] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.533272][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.546965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.554570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.562420][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.570188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 02:25:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 55.579399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.588920][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.595952][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.621338][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.637477][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.665983][ T7250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.681944][ T7250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.694087][ T7276] chnl_net:caif_netlink_parms(): no params data found [ 55.705900][ T7269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.717521][ T7269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.732378][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.741054][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.749563][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.756629][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.764400][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.773037][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.781345][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.788749][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.796241][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.804872][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.813294][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.821692][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.829994][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.838460][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.846904][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.854970][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.863264][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.871509][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.879970][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.888256][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.895923][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.919891][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.928533][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.937380][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.944464][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.952572][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.963155][ T7257] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.005019][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.012383][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.020495][ T7276] device bridge_slave_0 entered promiscuous mode [ 56.028035][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.035620][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.043462][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.052007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.060264][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.067342][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.075012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.084077][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.093033][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.101751][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.108813][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.118030][ T7269] team0: Port device team_slave_0 added [ 56.125462][ T7269] team0: Port device team_slave_1 added [ 56.140960][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.148132][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.155896][ T7276] device bridge_slave_1 entered promiscuous mode [ 56.180341][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.203559][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.214366][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.228732][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.238079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.247016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.255316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.264303][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.272757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.281222][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.339541][ T7269] device hsr_slave_0 entered promiscuous mode [ 56.396955][ T7269] device hsr_slave_1 entered promiscuous mode [ 56.436485][ T7269] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.456429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.464931][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.479126][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.495523][ T7257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.510455][ T7257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.522597][ T7276] team0: Port device team_slave_0 added [ 56.529608][ T7276] team0: Port device team_slave_1 added [ 56.540905][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.549062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.557398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.565566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.573796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.582038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.590610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.612772][ T7253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.627506][ T7253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.644497][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.652223][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.660740][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.669199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.677423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.685684][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.705898][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.750848][ T7276] device hsr_slave_0 entered promiscuous mode [ 56.797049][ T7276] device hsr_slave_1 entered promiscuous mode [ 56.836481][ T7276] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.885831][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.975626][ T7269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.002229][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.015109][ T7269] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.023184][ C0] hrtimer: interrupt took 28281 ns [ 57.040773][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.060696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.082535][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.113671][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.122448][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.184603][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.213124][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.241836][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.248965][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.264745][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 57.264820][ T23] audit: type=1800 audit(1570242347.434:31): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16524 res=0 [ 57.295540][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.304447][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.320967][ T23] audit: type=1800 audit(1570242347.454:32): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16524 res=0 02:25:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 02:25:47 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 57.345578][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.352704][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.361464][ T23] audit: type=1800 audit(1570242347.454:33): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16524 res=0 [ 57.400070][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.427811][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.481977][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.502027][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.536654][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.584164][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.591676][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.604811][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.613867][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.623222][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:25:47 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, 0xfffffffffffff59c}}}, 0x90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x40000000, 0x10000101) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x100020) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) [ 57.632266][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.648191][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.655279][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.677605][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.687479][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.714160][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.746235][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.772482][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.791286][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.800840][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.808934][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.817654][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.829385][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.845246][ T7276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.885433][ T7276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.927515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.936241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.967048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.994946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.007886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.016694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.025003][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.034041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.042696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.064809][ T7269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.072567][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.081619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.093882][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 02:25:48 executing program 4: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 02:25:48 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 02:25:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 02:25:48 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socket$inet(0xa, 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=@broute={'\n\x00oute\x00', 0x20, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20d9f000], 0x0, 0x0, 0x0}, 0xa8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x0, 0x73) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000ad00)) 02:25:48 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, 0xfffffffffffff59c}}}, 0x90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x40000000, 0x10000101) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x100020) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) 02:25:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x8, 0xfffffff00000004}]}}}]}, 0x3c}}, 0x0) 02:25:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x8, 0xfffffff00000004}]}}}]}, 0x3c}}, 0x0) 02:25:49 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 58.888502][ T7389] sp0: Synchronizing with TNC 02:25:49 executing program 0: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 02:25:49 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, 0xfffffffffffff59c}}}, 0x90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x40000000, 0x10000101) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x100020) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) 02:25:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x8, 0xfffffff00000004}]}}}]}, 0x3c}}, 0x0) 02:25:49 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socket$inet(0xa, 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=@broute={'\n\x00oute\x00', 0x20, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20d9f000], 0x0, 0x0, 0x0}, 0xa8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x0, 0x73) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000ad00)) 02:25:50 executing program 4: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 02:25:50 executing program 2: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 02:25:50 executing program 5: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) [ 59.966573][ T7427] sp0: Synchronizing with TNC 02:25:50 executing program 0: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 02:25:50 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socket$inet(0xa, 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=@broute={'\n\x00oute\x00', 0x20, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20d9f000], 0x0, 0x0, 0x0}, 0xa8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x0, 0x73) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000ad00)) 02:25:50 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socket$inet(0xa, 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=@broute={'\n\x00oute\x00', 0x20, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20d9f000], 0x0, 0x0, 0x0}, 0xa8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x0, 0x73) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000ad00)) 02:25:50 executing program 2: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 02:25:50 executing program 5: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 02:25:51 executing program 4: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) [ 60.910443][ T7464] sp0: Synchronizing with TNC [ 60.952010][ T7468] sp1: Synchronizing with TNC 02:25:51 executing program 0: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 02:25:51 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socket$inet(0xa, 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=@broute={'\n\x00oute\x00', 0x20, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20d9f000], 0x0, 0x0, 0x0}, 0xa8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x0, 0x73) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000ad00)) 02:25:51 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socket$inet(0xa, 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=@broute={'\n\x00oute\x00', 0x20, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20d9f000], 0x0, 0x0, 0x0}, 0xa8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x0, 0x73) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000ad00)) 02:25:51 executing program 2: r0 = io_uring_setup(0xa6, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') readv(r2, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) [ 62.054560][ T7520] sp0: Synchronizing with TNC [ 62.070149][ T7494] ================================================================== [ 62.078343][ T7494] BUG: KCSAN: data-race in dnotify_flush / pid_update_inode [ 62.085611][ T7494] [ 62.087934][ T7494] write to 0xffff8881244e75a8 of 2 bytes by task 7503 on cpu 1: [ 62.095561][ T7494] pid_update_inode+0x51/0x70 [ 62.100230][ T7494] pid_revalidate+0x91/0xd0 [ 62.104724][ T7494] lookup_fast+0x685/0x7e0 [ 62.109135][ T7494] path_openat+0x2ac/0x3530 [ 62.113634][ T7494] do_filp_open+0x11e/0x1b0 [ 62.118132][ T7494] do_sys_open+0x3b3/0x4f0 [ 62.122538][ T7494] __x64_sys_open+0x55/0x70 [ 62.127030][ T7494] do_syscall_64+0xcf/0x2f0 [ 62.131535][ T7494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.132826][ T7519] sp1: Synchronizing with TNC [ 62.137413][ T7494] [ 62.137428][ T7494] read to 0xffff8881244e75a8 of 2 bytes by task 7494 on cpu 0: [ 62.137444][ T7494] dnotify_flush+0x3a/0x210 [ 62.137455][ T7494] filp_close+0xd5/0x120 [ 62.137525][ T7494] __close_fd+0xef/0x140 [ 62.164935][ T7494] __x64_sys_close+0x49/0xb0 [ 62.169520][ T7494] do_syscall_64+0xcf/0x2f0 [ 62.174019][ T7494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.179896][ T7494] [ 62.182217][ T7494] Reported by Kernel Concurrency Sanitizer on: [ 62.188485][ T7494] CPU: 0 PID: 7494 Comm: ps Not tainted 5.3.0+ #0 [ 62.194892][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.204939][ T7494] ================================================================== [ 62.212989][ T7494] Kernel panic - not syncing: panic_on_warn set ... [ 62.219578][ T7494] CPU: 0 PID: 7494 Comm: ps Not tainted 5.3.0+ #0 [ 62.225981][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.236027][ T7494] Call Trace: [ 62.239321][ T7494] dump_stack+0xf5/0x159 [ 62.243565][ T7494] panic+0x209/0x639 [ 62.247463][ T7494] ? vprintk_func+0x8d/0x140 [ 62.252057][ T7494] kcsan_report.cold+0x57/0xeb [ 62.256820][ T7494] __kcsan_setup_watchpoint+0x342/0x500 [ 62.262369][ T7494] __tsan_read2+0x2c/0x30 [ 62.266695][ T7494] dnotify_flush+0x3a/0x210 [ 62.271197][ T7494] filp_close+0xd5/0x120 [ 62.275442][ T7494] __close_fd+0xef/0x140 [ 62.279683][ T7494] __x64_sys_close+0x49/0xb0 [ 62.284273][ T7494] do_syscall_64+0xcf/0x2f0 [ 62.288783][ T7494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.294668][ T7494] RIP: 0033:0x7f13754ae2b0 [ 62.299103][ T7494] Code: 40 75 0b 31 c0 48 83 c4 08 e9 0c ff ff ff 48 8d 3d c5 32 08 00 e8 c0 07 02 00 83 3d 45 a3 2b 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ce 8a 01 00 48 89 04 24 [ 62.318702][ T7494] RSP: 002b:00007ffc1fd4f4b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.327108][ T7494] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f13754ae2b0 [ 62.335072][ T7494] RDX: 0000000000000fff RSI: 00007f137597bd00 RDI: 0000000000000006 [ 62.343040][ T7494] RBP: 000000000000009f R08: 0000000000000000 R09: 00007f1375776a10 [ 62.351004][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f137597bd00 [ 62.358970][ T7494] R13: 00000000008501c0 R14: 0000000000000005 R15: 0000000000000000 [ 62.368300][ T7494] Kernel Offset: disabled [ 62.372622][ T7494] Rebooting in 86400 seconds..