[info] Using makefile-style concurrent boot in runlevel 2. [ 47.168605][ T27] audit: type=1800 audit(1577124257.095:21): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 47.198074][ T27] audit: type=1800 audit(1577124257.095:22): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. 2019/12/23 18:04:28 fuzzer started 2019/12/23 18:04:30 dialing manager at 10.128.0.105:38197 2019/12/23 18:04:30 syscalls: 2692 2019/12/23 18:04:30 code coverage: enabled 2019/12/23 18:04:30 comparison tracing: enabled 2019/12/23 18:04:30 extra coverage: enabled 2019/12/23 18:04:30 setuid sandbox: enabled 2019/12/23 18:04:30 namespace sandbox: enabled 2019/12/23 18:04:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/23 18:04:30 fault injection: enabled 2019/12/23 18:04:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/23 18:04:30 net packet injection: enabled 2019/12/23 18:04:30 net device setup: enabled 2019/12/23 18:04:30 concurrency sanitizer: enabled 2019/12/23 18:04:30 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 72.763853][ T7978] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/23 18:04:43 adding functions to KCSAN blacklist: 'watchdog' 'add_timer' 'file_update_time' 'process_srcu' 'page_counter_try_charge' 'do_nanosleep' 'd_instantiate_new' 'pid_update_inode' '__mark_inode_dirty' 'blk_mq_get_request' '__dentry_kill' 'blk_stat_add' 'generic_fillattr' 'enqueue_timer' 'xas_clear_mark' 'tick_do_update_jiffies64' 'virtqueue_disable_cb' '__perf_event_overflow' 'ext4_free_inodes_count' 'lruvec_lru_size' 'ext4_free_inode' 'blk_mq_sched_dispatch_requests' 'echo_char' 'do_syslog' 'futex_wait_queue_me' 'tick_sched_do_timer' 'alloc_empty_file' 'do_signal_stop' 'free_pid' 'generic_write_end' 'pcpu_alloc' '__rb_insert_augmented' 'kauditd_thread' 'mod_timer' 'wbt_issue' 'audit_log_start' '__rb_rotate_set_parents' 'iomap_dio_bio_actor' 'xas_find_marked' 'tomoyo_supervisor' 'queue_access_lock' 'run_timer_softirq' 'taskstats_exit' '__ext4_new_inode' 'tick_nohz_idle_stop_tick' 'sit_tunnel_xmit' 'hsr_register_frame_out' 'wbt_done' 'do_exit' '__rb_erase_color' 'ext4_mb_good_group' 'ext4_has_free_clusters' 'ext4_nonda_switch' 'mm_update_next_owner' 'kcm_rcv_strparser' 'find_get_pages_range_tag' 'rcu_gp_fqs_check_wake' 'fsnotify' 'copy_process' 'ext4_mb_find_by_goal' '__snd_rawmidi_transmit_ack' 'evict' 'kcm_rfree' 'timer_clear_idle' 'ktime_get_real_seconds' 'do_try_to_free_pages' 'd_delete' 'write_cache_pages' 'dd_has_work' 'poll_schedule_timeout' 'blk_mq_run_hw_queue' 'vm_area_dup' 'ep_poll' 'find_next_bit' 'list_lru_count_one' '__hrtimer_run_queues' 'blk_mq_dispatch_rq_list' 'ext4_mark_iloc_dirty' 'n_tty_receive_buf_common' 18:07:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x97\xcdxR3\xb5\x13a\xf2>\xf6\xd9\x05eL\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80000000000003) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) 18:07:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 267.123955][ T7982] IPVS: ftp: loaded support on port[0] = 21 [ 267.214617][ T7982] chnl_net:caif_netlink_parms(): no params data found [ 267.282419][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.289563][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.297174][ T7982] device bridge_slave_0 entered promiscuous mode [ 267.305080][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.312253][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.320407][ T7982] device bridge_slave_1 entered promiscuous mode [ 267.339774][ T7982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.351564][ T7982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.371964][ T7982] team0: Port device team_slave_0 added [ 267.379224][ T7982] team0: Port device team_slave_1 added 18:07:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000500)={0x76591ff02f01386a}, 0xfffffffffffffe81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f00000002c0)="6ad10d870fe593c83895666985b4c60c0389ad9a568c0bad4681d48dd243f973a944ae207591833b93ef3f6dd3feb2d6b5e89366b421dbf8cc6eb03c53071d260e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) sendto(0xffffffffffffffff, &(0x7f00000002c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x54) getresuid(&(0x7f0000000780), 0x0, &(0x7f0000000800)) getuid() open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) lseek(r5, 0x0, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xfffffffffffffdb9) [ 267.451213][ T7982] device hsr_slave_0 entered promiscuous mode [ 267.518622][ T7982] device hsr_slave_1 entered promiscuous mode [ 267.564005][ T7985] IPVS: ftp: loaded support on port[0] = 21 [ 267.575042][ T7987] IPVS: ftp: loaded support on port[0] = 21 [ 267.584931][ T7982] netdevsim netdevsim0 netdevsim0: renamed from eth0 18:07:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b6827f4bbea342ffdb88978ebef12a1bd1d979d6ea7c3ecb0ed0ec4ce10816dcd91d6f51245eae70605ec5641f4aca2a2528b", 0xd8}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 267.640166][ T7982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.706392][ T7982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.768484][ T7982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.850373][ T7989] IPVS: ftp: loaded support on port[0] = 21 [ 267.867258][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.874385][ T7982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.881651][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.888692][ T7982] bridge0: port 1(bridge_slave_0) entered forwarding state 18:07:57 executing program 4: [ 268.007030][ T7987] chnl_net:caif_netlink_parms(): no params data found [ 268.039972][ T7985] chnl_net:caif_netlink_parms(): no params data found [ 268.063045][ T7982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.160088][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.179190][ T3093] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.197676][ T3093] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.207291][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 268.219961][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.235901][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.247861][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.255389][ T7985] device bridge_slave_0 entered promiscuous mode [ 268.275885][ T7995] IPVS: ftp: loaded support on port[0] = 21 [ 268.283621][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.297847][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.305647][ T7987] device bridge_slave_0 entered promiscuous mode [ 268.328836][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.336034][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.346434][ T7985] device bridge_slave_1 entered promiscuous mode 18:07:58 executing program 5: [ 268.356341][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.368942][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.377412][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.384491][ T7990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.394247][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.404255][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.414972][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.422046][ T7990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.431947][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.449207][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.456302][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.465891][ T7987] device bridge_slave_1 entered promiscuous mode [ 268.482224][ T7989] chnl_net:caif_netlink_parms(): no params data found [ 268.491765][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.500904][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.509473][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.519050][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.527599][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.576333][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.584576][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.593401][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.606633][ T7987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.617528][ T7985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.628599][ T7985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.644773][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.651928][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.659771][ T7989] device bridge_slave_0 entered promiscuous mode [ 268.667711][ T7987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.693823][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.700929][ T7998] IPVS: ftp: loaded support on port[0] = 21 [ 268.701409][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.715631][ T7989] device bridge_slave_1 entered promiscuous mode [ 268.728342][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.737192][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.746629][ T7987] team0: Port device team_slave_0 added [ 268.766627][ T7985] team0: Port device team_slave_0 added [ 268.773586][ T7982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.787737][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.798544][ T7987] team0: Port device team_slave_1 added [ 268.806303][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.829144][ T7989] team0: Port device team_slave_0 added [ 268.835658][ T7989] team0: Port device team_slave_1 added [ 268.842836][ T7985] team0: Port device team_slave_1 added [ 268.920069][ T7985] device hsr_slave_0 entered promiscuous mode [ 268.978205][ T7985] device hsr_slave_1 entered promiscuous mode [ 269.017897][ T7985] debugfs: Directory 'hsr0' with parent '/' already present! [ 269.079983][ T7987] device hsr_slave_0 entered promiscuous mode [ 269.118373][ T7987] device hsr_slave_1 entered promiscuous mode [ 269.157889][ T7987] debugfs: Directory 'hsr0' with parent '/' already present! [ 269.176715][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.184243][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.260290][ T7989] device hsr_slave_0 entered promiscuous mode [ 269.298210][ T7989] device hsr_slave_1 entered promiscuous mode [ 269.338166][ T7989] debugfs: Directory 'hsr0' with parent '/' already present! [ 269.350713][ T7995] chnl_net:caif_netlink_parms(): no params data found [ 269.403222][ T7982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.425655][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.433217][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.441537][ T7995] device bridge_slave_0 entered promiscuous mode [ 269.451235][ T7987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.520223][ T7987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.560091][ T7987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.619977][ T7989] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 269.680326][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.687508][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.695764][ T7995] device bridge_slave_1 entered promiscuous mode [ 269.702959][ T7985] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.769196][ T7987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.833225][ T7989] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 269.885133][ T7989] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 269.929212][ T7985] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.990304][ T7995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.000535][ T7989] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.050423][ T7985] netdevsim netdevsim1 netdevsim2: renamed from eth2 18:08:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "1a2082d1059696866456a3d076cd9f524485f3bc82098344f767e5e499fbcc7d4637e4a5c52fa6b0ccc9d963baf4811feb6b2aef6aaf488d03c734446b288a0a"}}, 0x38}}, 0x0) [ 270.091903][ T7995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.129708][ T7985] netdevsim netdevsim1 netdevsim3: renamed from eth3 18:08:00 executing program 0: close(0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) getpgrp(0xffffffffffffffff) socket(0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) [ 270.180434][ T7995] team0: Port device team_slave_0 added [ 270.187573][ T7995] team0: Port device team_slave_1 added [ 270.202987][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 270.320545][ T7995] device hsr_slave_0 entered promiscuous mode [ 270.368092][ T7995] device hsr_slave_1 entered promiscuous mode [ 270.407817][ T7995] debugfs: Directory 'hsr0' with parent '/' already present! [ 270.423414][ T7987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.452754][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 18:08:00 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000002) fcntl$dupfd(r1, 0x0, r2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) fcntl$setstatus(r2, 0x4, 0x2000) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) write$char_usb(r3, &(0x7f00000002c0)='>', 0x300) tkill(r0, 0x15) [ 270.482711][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.497838][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.505705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.516441][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.525273][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.545570][ T7998] device bridge_slave_0 entered promiscuous mode [ 270.559918][ T7987] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.572734][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.582606][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.591031][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.599261][ T7998] device bridge_slave_1 entered promiscuous mode [ 270.605975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.614037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.621676][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.629503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.638844][ T7985] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.667353][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.677401][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.685901][ T2413] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.693124][ T2413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.701501][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.710117][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.718703][ T2413] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.725720][ T2413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.733616][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.742697][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.751236][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.759478][ T2413] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.766541][ T2413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.774901][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.783000][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.791402][ T7995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.839923][ T7995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.891065][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.913580][ T7995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.950646][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.960687][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.969350][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.977657][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.984943][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.992756][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.003036][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.012053][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.020647][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.029697][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.038658][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.047648][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.054871][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.062911][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.071425][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.079948][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.087067][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.094949][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.103603][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.112962][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.121750][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.139735][ T7995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.197538][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.206964][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.215836][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.224760][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.233432][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.243926][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.252413][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.260861][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.269360][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.278118][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.287562][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.296104][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.305138][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.315498][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.332177][ T7998] team0: Port device team_slave_0 added 18:08:01 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) socketpair$nbd(0x1, 0x1, 0x0, 0x0) [ 271.356191][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.366406][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.377273][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.388811][ T7998] team0: Port device team_slave_1 added [ 271.396911][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.420066][ T7987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.444870][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.457421][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.472394][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.494403][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.502448][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.511154][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.529035][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.550855][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.571470][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.579126][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.590969][ T7989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.604777][ T7989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.636384][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.688504][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.696978][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.735145][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.759863][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.771460][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 271.771480][ T27] audit: type=1804 audit(1577124481.695:31): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/0/bus" dev="sda1" ino=16527 res=1 [ 271.806947][ T27] audit: type=1804 audit(1577124481.695:32): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/0/bus" dev="sda1" ino=16527 res=1 [ 271.840111][ T7998] device hsr_slave_0 entered promiscuous mode [ 271.859860][ T27] audit: type=1804 audit(1577124481.785:33): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/0/bus" dev="sda1" ino=16527 res=1 [ 271.906872][ T27] audit: type=1804 audit(1577124481.785:34): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/0/bus" dev="sda1" ino=16527 res=1 [ 271.931963][ C1] hrtimer: interrupt took 23822 ns [ 271.935185][ T7998] device hsr_slave_1 entered promiscuous mode [ 271.943625][ T27] audit: type=1804 audit(1577124481.815:35): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/0/bus" dev="sda1" ino=16527 res=1 [ 271.971263][ T27] audit: type=1804 audit(1577124481.815:36): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/0/bus" dev="sda1" ino=16527 res=1 [ 271.998287][ T7998] debugfs: Directory 'hsr0' with parent '/' already present! [ 272.009789][ T7995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.031889][ T27] audit: type=1804 audit(1577124481.875:37): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/0/bus" dev="sda1" ino=16527 res=1 [ 272.061502][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.074885][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.085845][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:08:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000500)={0x76591ff02f01386a}, 0xfffffffffffffe81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f00000002c0)="6ad10d870fe593c83895666985b4c60c0389ad9a568c0bad4681d48dd243f973a944ae207591833b93ef3f6dd3feb2d6b5e89366b421dbf8cc6eb03c53071d260e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) sendto(0xffffffffffffffff, &(0x7f00000002c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x54) getresuid(&(0x7f0000000780), 0x0, &(0x7f0000000800)) getuid() open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) lseek(r5, 0x0, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xfffffffffffffdb9) [ 272.094391][ T27] audit: type=1804 audit(1577124481.875:38): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/0/bus" dev="sda1" ino=16527 res=1 [ 272.105353][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 18:08:02 executing program 0: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$minix(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 272.156484][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.168002][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.221112][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.234912][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.267725][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.274857][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.281189][ T27] audit: type=1804 audit(1577124482.205:39): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/1/bus" dev="sda1" ino=16525 res=1 [ 272.290328][ T8046] overlayfs: conflicting lowerdir path [ 272.324256][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.333137][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.343954][ T27] audit: type=1804 audit(1577124482.245:40): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir657354874/syzkaller.YAAf4x/1/bus" dev="sda1" ino=16525 res=1 [ 272.344458][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.375348][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.385871][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.399156][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.410066][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.422932][ T7998] netdevsim netdevsim5 netdevsim0: renamed from eth0 18:08:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 272.479921][ T7998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.491319][ T8052] mmap: syz-executor.3 (8052) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 272.545854][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.556250][ T8047] overlayfs: conflicting lowerdir path [ 272.572821][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.592805][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.602910][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.612957][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.625186][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.634263][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.648504][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.683815][ T7998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.719970][ T7998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.768714][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.784410][ T7995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.823340][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.840869][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.852256][ T7995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.884476][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.896293][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.905181][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.915385][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.925240][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.934295][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.945094][ T2413] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.952308][ T2413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.961637][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.978009][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.986752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.995500][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.002563][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.010484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.019563][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.028539][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.037012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.056958][ T7998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.067740][ T7998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.084929][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.095502][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.104704][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.114746][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.123421][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.132649][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.141341][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.161779][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.169605][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.177118][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.186414][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 18:08:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005d40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x44, r1, 0xc1b6fd6550dd7933, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev}, @IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x44}}, 0x0) 18:08:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) 18:08:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x6000, 0x1) 18:08:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:04 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2) [ 274.693463][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 18:08:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x8}]}}, &(0x7f00000002c0)=""/236, 0x26, 0xec, 0x8}, 0x20) 18:08:04 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000005, &(0x7f0000000000)="e1affde3", 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000003b80)={0x0}}, 0x0) [ 274.742927][ T8092] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 274.758054][ T8092] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 274.766154][ T8092] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:08:04 executing program 2: r0 = socket$inet(0xa, 0x4000000801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000007ff) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "e91f6fe936f58ba8"}, 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000002c0)={0x0, 0x0, 0x30}, &(0x7f0000000300)=0x18) [ 274.884896][ T8105] BPF:[1] TYPEDEF (anon) [ 274.902237][ T8105] BPF:type_id=4 [ 274.907461][ T8105] BPF: [ 274.911696][ T8105] BPF:Invalid name [ 274.915547][ T8105] BPF: [ 274.915547][ T8105] [ 274.941150][ T8105] BPF:[1] TYPEDEF (anon) [ 274.945528][ T8105] BPF:type_id=4 [ 274.966129][ T8105] BPF: [ 274.979389][ T8105] BPF:Invalid name [ 274.984579][ T8105] BPF: [ 274.984579][ T8105] 18:08:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:04 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x145180, 0x0) 18:08:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x1, 0x3f, 0x0, 0x40, 0xff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x0, 0x4}) 18:08:05 executing program 2: r0 = socket$inet(0xa, 0x4000000801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000007ff) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "e91f6fe936f58ba8"}, 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000002c0)={0x0, 0x0, 0x30}, &(0x7f0000000300)=0x18) [ 275.177494][ T8128] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:08:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) write$tun(r0, &(0x7f0000001540)={@void, @val={0xfef1}, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast2, "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"}}}}, 0xfca) 18:08:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x1, 0x3f, 0x0, 0x40, 0xff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x0, 0x4}) 18:08:07 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)) 18:08:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 18:08:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:07 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/\xff\x04Z\x1eZ\r\xd6\xc6dom\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000480)=@util={0x25, "2f38b06c380702bdad1dd32845b33ad7"}, 0x18) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:08:07 executing program 0: pipe(0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 18:08:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 18:08:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 18:08:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:10 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeec, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x27d}], 0x1}, 0x0) 18:08:10 executing program 3: r0 = fsopen(&(0x7f00000004c0)='gfs2meta\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) 18:08:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12e, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfd77, 0x10, 0x0}, 0x70) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 18:08:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x36, 0x0, &(0x7f0000000000)) 18:08:10 executing program 5: clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0x9) setxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "948e4b870c872729e89f534b4e4278b77767c2c5"}, 0x15, 0x0) 18:08:10 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x3cf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) 18:08:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) 18:08:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = add_key(&(0x7f0000000440)='.dead\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000300)='rxrpc\x00', 0x0, 0x0, r0) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'\x00', 0x1}, &(0x7f0000000240)='/dev/dri/card#\x00', r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xcd7d715b4a0195a6) dup2(r2, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x7f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000001c0)={r6, 0x80000}) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000100)) 18:08:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="c4219158057b00000065f3a50f00d036f34c0f2d737f660faef23e4d0fc72166440f388230f3460f09c482890a30b9800000c00f3235001000000f300f01bf00800000", 0x43}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:08:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:13 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000400)}) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x10, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0xffff}]}, 0xc, 0xda74569885fb2b98) r2 = inotify_init1(0x0) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x8, 0x20000) fcntl$setown(r2, 0x8, 0xffffffffffffffff) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) sendmsg$rds(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400080, 0x0) ioctl(0xffffffffffffffff, 0x9, &(0x7f0000000500)="749780ad63e6062c5d7aac884e544f491a559f668210dd311dad1fac7ded43026d10b1077eb98270f3420792f0b177cd920bb161523b9c2422e09e76f5b14bd802d83f80f8697c380ad5501e775f754da822cf0c8ea32e1f6ea0ee82ecf05d0a09c96fbad3ef1c99c003d4fd38d5e770c8f53a611e8a91e8fd48859c516611a5d463d8bca1c19681d2f780deb56aad2b7dba251b2e8df1c3c88736b1a9ab8c5c6a643ef1b7181f460211baaeebca6d48349ff8") r4 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r4, 0x0, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendto$inet6(r4, &(0x7f0000000200)="dde9157c886d0887359e8a9cb1e99fbbecad462c16c68fe877739ec7fa9483119df2882bec0fa914edbd31cb4e5ac7d8f78b8cf9", 0x34, 0x4000000, &(0x7f0000000240)={0xa, 0x4e24, 0xef, @dev={0xfe, 0x80, [], 0xa}, 0xffff7fff}, 0x1c) 18:08:13 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000003b80)={0x0}}, 0x0) 18:08:13 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000000)='wlan1\x00') 18:08:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 18:08:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}) 18:08:14 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000003b80)={0x0}}, 0x0) 18:08:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000180)=0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) io_submit(r1, 0x1f1, &(0x7f0000000540)) 18:08:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) 18:08:14 executing program 5: 18:08:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 18:08:14 executing program 3: 18:08:17 executing program 2: 18:08:17 executing program 5: 18:08:17 executing program 3: 18:08:17 executing program 0: 18:08:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 18:08:17 executing program 3: 18:08:17 executing program 5: 18:08:17 executing program 2: 18:08:17 executing program 0: 18:08:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r0}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r0}}, 0x18) 18:08:17 executing program 3: 18:08:17 executing program 0: 18:08:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5) 18:08:17 executing program 2: 18:08:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r0}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r0}}, 0x18) 18:08:20 executing program 0: 18:08:20 executing program 2: 18:08:20 executing program 3: 18:08:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5) 18:08:20 executing program 0: 18:08:20 executing program 3: 18:08:20 executing program 2: 18:08:20 executing program 5: 18:08:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r0}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r0}}, 0x18) 18:08:20 executing program 5: 18:08:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:23 executing program 3: 18:08:23 executing program 0: 18:08:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000040)=[{r0, 0x44}, {r0}], 0x2, 0x0) poll(&(0x7f0000000180)=[{r0, 0x26}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00aa7) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x2000000000000017, 0x1ff) shutdown(r1, 0x0) 18:08:23 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x1f, 0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={@multicast2, @empty}, 0x8) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000480)={0x0, 0x1, {0x0, 0x29, 0x14, 0xa, 0x5, 0x3ca7, 0x0, 0x7b}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:08:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:23 executing program 0: perf_event_open(0x0, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7500, 0x4, &(0x7f00000003c0)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'\xf4\xff\x96', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r4) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x737956514ff058bc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5a2c2bca, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x236, 0x0, 0xa, 0x0, 0x9, 0x2, 0xff}, 0x0, 0x0, r3, 0x10) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 18:08:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:23 executing program 3: perf_event_open(0x0, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7500, 0x4, &(0x7f00000003c0)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'\xf4\xff\x96', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r4) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x737956514ff058bc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5a2c2bca, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x236, 0x0, 0xa, 0x0, 0x0, 0x2, 0xff}, 0x0, 0x0, r3, 0x10) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 18:08:23 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = creat(0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = gettid() ptrace$setopts(0xffffffffffffffff, r5, 0x0, 0x0) tkill(r0, 0x8800820) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0x4) clone(0xd48d24434713bd52, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="0100d34e57fdf1c30422e961486ad1867f3e00", @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="00000000e63200b90800a1059bec5df05daa5f00"/32]) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x7ff}) setsockopt$packet_buf(r6, 0x107, 0x2, 0x0, 0x0) 18:08:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:26 executing program 0: perf_event_open(0x0, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7500, 0x4, &(0x7f00000003c0)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'\xf4\xff\x96', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r4) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x737956514ff058bc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5a2c2bca, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x236, 0x0, 0xa, 0x0, 0x9, 0x2, 0xff}, 0x0, 0x0, r3, 0x10) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 18:08:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff000c00e313000000093903680000000006000300124b", 0x26) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) 18:08:26 executing program 5: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x7530}, {0x77359400}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'veth1_to_bridge\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000001c0)={0x0, 0x0, [0x3, 0x8, 0x0, 0x9, 0x40, 0x9, 0xf6, 0x8]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:08:26 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = creat(0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = gettid() ptrace$setopts(0xffffffffffffffff, r5, 0x0, 0x0) tkill(r0, 0x8800820) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0x4) clone(0xd48d24434713bd52, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="0100d34e57fdf1c30422e961486ad1867f3e00", @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="00000000e63200b90800a1059bec5df05daa5f00"/32]) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x7ff}) setsockopt$packet_buf(r6, 0x107, 0x2, 0x0, 0x0) [ 296.545860][ T8425] K: renamed from caif0 [ 296.628201][ T8425] device K entered promiscuous mode [ 296.633724][ T8425] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 18:08:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff000c00e313000000093903680000000006000300124b", 0x26) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) 18:08:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) getpid() getpgid(0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) close(r0) [ 296.847927][ T8450] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 18:08:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:26 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 18:08:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) [ 297.041672][ T8456] input: syz1 as /devices/virtual/input/input5 [ 297.292837][ T8456] input: syz1 as /devices/virtual/input/input6 18:08:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed51636cabc3de2e36ff47694d24ec89f61c738002fcf0cf3ace8350410df57c2938a70b0c56bb5bf8b6eff51a32ed5abe14bfd774aefac8668051a8dfaca5d2412b68", 0xa7}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5c, 0x0, 0xfffffffffffffce4, 0x0, 0xfffffffffffffdd2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:08:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 18:08:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000001c0)="a53afbce178e1a0664ad51769f181cf5fb6541c69baa96458e695ae8b4f59857fbcbdd2d50db23b9360c39ee3eca61b33f552020ef078fec744b1d900037a17bbb27af1e628052ab4a0a03338659f506ce1708196da11299d515bda72d1e76f4863a75011319113f11ffd3a11ba9f76cb4270af0dd8f4334441d7b2760ceb4e2db54e52ae31cc195a47757b9e817f2dc5c408d11e0fe53ff7d9f41") openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4, &(0x7f00000006c0)=""/195, 0xc3}, 0x1}, {{&(0x7f00000007c0)=@ax25={{0x3, @rose}, [@rose, @netrom, @netrom, @null, @default, @remote, @remote, @null]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1, &(0x7f0000000940)=""/112, 0x70}, 0x80000000}, {{&(0x7f00000009c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000b00)=""/75, 0x4b}, {&(0x7f0000000c00)=""/206, 0xce}], 0x4, &(0x7f0000000d80)=""/168, 0xa8}, 0x6}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/29, 0x1d}], 0x1}, 0x1}], 0x4, 0x0, &(0x7f0000002240)={0x77359400}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)) 18:08:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) getpid() getpgid(0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) close(r0) 18:08:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) getpid() getpgid(0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) close(r0) 18:08:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) getpid() getpgid(0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) close(r0) 18:08:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) [ 299.700346][ T8484] input: syz1 as /devices/virtual/input/input7 [ 299.718831][ T8487] input: syz1 as /devices/virtual/input/input8 18:08:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) [ 299.926932][ T8486] input: syz1 as /devices/virtual/input/input9 18:08:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 18:08:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) [ 300.207918][ T10] ================================================================== [ 300.216058][ T10] BUG: KCSAN: data-race in rcu_gp_fqs_loop / rcu_preempt_deferred_qs_irqrestore [ 300.225165][ T10] [ 300.227500][ T10] write to 0xffffffff85c7d190 of 8 bytes by task 7949 on cpu 0: [ 300.235946][ T10] rcu_preempt_deferred_qs_irqrestore+0x43d/0x580 [ 300.242371][ T10] __rcu_read_unlock+0x16a/0x3d0 [ 300.247311][ T10] sock_def_readable+0xd0/0x140 [ 300.252166][ T10] unix_dgram_sendmsg+0x9be/0xdc0 18:08:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 18:08:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000001c0)="a53afbce178e1a0664ad51769f181cf5fb6541c69baa96458e695ae8b4f59857fbcbdd2d50db23b9360c39ee3eca61b33f552020ef078fec744b1d900037a17bbb27af1e628052ab4a0a03338659f506ce1708196da11299d515bda72d1e76f4863a75011319113f11ffd3a11ba9f76cb4270af0dd8f4334441d7b2760ceb4e2db54e52ae31cc195a47757b9e817f2dc5c408d11e0fe53ff7d9f41") openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4, &(0x7f00000006c0)=""/195, 0xc3}, 0x1}, {{&(0x7f00000007c0)=@ax25={{0x3, @rose}, [@rose, @netrom, @netrom, @null, @default, @remote, @remote, @null]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1, &(0x7f0000000940)=""/112, 0x70}, 0x80000000}, {{&(0x7f00000009c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000b00)=""/75, 0x4b}, {&(0x7f0000000c00)=""/206, 0xce}], 0x4, &(0x7f0000000d80)=""/168, 0xa8}, 0x6}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/29, 0x1d}], 0x1}, 0x1}], 0x4, 0x0, &(0x7f0000002240)={0x77359400}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)) [ 300.257197][ T10] sock_sendmsg+0x9f/0xc0 [ 300.261526][ T10] __sys_sendto+0x21f/0x320 [ 300.266028][ T10] __x64_sys_sendto+0x89/0xb0 [ 300.270710][ T10] do_syscall_64+0xcc/0x3a0 [ 300.275221][ T10] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 300.281103][ T10] [ 300.283436][ T10] read to 0xffffffff85c7d190 of 8 bytes by task 10 on cpu 1: [ 300.290811][ T10] rcu_gp_fqs_loop+0x23c/0x580 [ 300.295571][ T10] rcu_gp_kthread+0x143/0x230 [ 300.300248][ T10] kthread+0x1d4/0x200 [ 300.304348][ T10] ret_from_fork+0x1f/0x30 [ 300.308754][ T10] [ 300.311218][ T10] Reported by Kernel Concurrency Sanitizer on: [ 300.317465][ T10] CPU: 1 PID: 10 Comm: rcu_preempt Not tainted 5.5.0-rc1-syzkaller #0 [ 300.325630][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.335956][ T10] ================================================================== [ 300.344363][ T10] Kernel panic - not syncing: panic_on_warn set ... [ 300.350972][ T10] CPU: 1 PID: 10 Comm: rcu_preempt Not tainted 5.5.0-rc1-syzkaller #0 [ 300.367713][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.378640][ T10] Call Trace: [ 300.382032][ T10] dump_stack+0x11d/0x181 [ 300.386404][ T10] panic+0x210/0x640 [ 300.390315][ T10] ? vprintk_func+0x8d/0x140 [ 300.394929][ T10] kcsan_report.cold+0xc/0xd [ 300.399552][ T10] kcsan_setup_watchpoint+0x3fe/0x460 [ 300.404948][ T10] __tsan_read8+0xc6/0x100 [ 300.409382][ T10] rcu_gp_fqs_loop+0x23c/0x580 [ 300.414264][ T10] rcu_gp_kthread+0x143/0x230 [ 300.418949][ T10] kthread+0x1d4/0x200 [ 300.423017][ T10] ? rcu_gp_cleanup+0x520/0x520 [ 300.427872][ T10] ? kthread_unpark+0xe0/0xe0 [ 300.432562][ T10] ret_from_fork+0x1f/0x30 [ 300.438489][ T10] Kernel Offset: disabled [ 300.442825][ T10] Rebooting in 86400 seconds..