[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.658464][ T23] audit: type=1800 audit(1571847565.462:25): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 33.685567][ T23] audit: type=1800 audit(1571847565.462:26): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 33.712372][ T23] audit: type=1800 audit(1571847565.462:27): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.8' (ECDSA) to the list of known hosts. 2019/10/23 16:19:36 fuzzer started 2019/10/23 16:19:37 dialing manager at 10.128.0.105:40369 2019/10/23 16:19:41 syscalls: 2524 2019/10/23 16:19:41 code coverage: enabled 2019/10/23 16:19:41 comparison tracing: enabled 2019/10/23 16:19:41 extra coverage: extra coverage is not supported by the kernel 2019/10/23 16:19:41 setuid sandbox: enabled 2019/10/23 16:19:41 namespace sandbox: enabled 2019/10/23 16:19:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/23 16:19:41 fault injection: enabled 2019/10/23 16:19:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/23 16:19:41 net packet injection: enabled 2019/10/23 16:19:41 net device setup: enabled 2019/10/23 16:19:41 concurrency sanitizer: enabled syzkaller login: [ 52.284867][ T7215] KCSAN: could not find function: 'poll_schedule_timeout' 2019/10/23 16:19:55 adding functions to KCSAN blacklist: 'snapshot_refaults' 'mem_cgroup_select_victim_node' 'pid_update_inode' 'vm_area_dup' 'mod_timer' 'ktime_get_seconds' 'rcu_gp_fqs_loop' '__writeback_single_inode' 'blk_mq_dispatch_rq_list' 'rcu_gp_fqs_check_wake' 'ext4_mb_good_group' 'pipe_poll' 'blk_mq_sched_dispatch_requests' 'vti_tunnel_xmit' '__splice_from_pipe' 'poll_schedule_timeout' 'icmp_global_allow' 'xas_find_marked' '__nf_conntrack_find_get' 'ext4_has_free_clusters' 'tick_nohz_idle_stop_tick' 'page_counter_try_charge' 'tick_sched_do_timer' '__ext4_new_inode' 'copy_process' 'run_timer_softirq' 'common_perm_cond' 'add_timer' 'commit_echoes' 'handle_userfault' 'sit_tunnel_xmit' 'ext4_free_inodes_count' 'do_syslog' '__nf_ct_refresh_acct' 'atime_needs_update' 'tcp_poll' 'fanotify_handle_event' 'generic_fillattr' 'handle_mm_fault' 'dd_has_work' '__filemap_fdatawrite_range' 'pipe_wait' 'tcp_add_backlog' 'ep_poll' 'ext4_writepages' 'kauditd_thread' 'pcpu_alloc' 'tick_do_update_jiffies64' 'ktime_get_real_seconds' 'echo_char' 'find_next_bit' 'ext4_nonda_switch' 'kvm_arch_vcpu_load' '__alloc_file' 'tomoyo_supervisor' 'generic_permission' 'ksys_read' '__hrtimer_run_queues' 'update_defense_level' 'find_get_pages_range_tag' 'blk_mq_get_request' '__skb_wait_for_more_packets' '__snd_rawmidi_transmit_ack' 'generic_write_end' 'wbt_issue' 'do_nanosleep' 'futex_wait_queue_me' 'shmem_file_read_iter' 'wbc_detach_inode' 'taskstats_exit' 'ext4_free_inode' 16:22:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,H^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 190.855385][ T7217] IPVS: ftp: loaded support on port[0] = 21 16:22:02 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a62000/0x1000)=nil) close(r0) [ 190.989314][ T7217] chnl_net:caif_netlink_parms(): no params data found [ 191.046857][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.054899][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.062877][ T7217] device bridge_slave_0 entered promiscuous mode [ 191.071130][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.079532][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.087860][ T7217] device bridge_slave_1 entered promiscuous mode [ 191.121176][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.135167][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.160260][ T7217] team0: Port device team_slave_0 added [ 191.167240][ T7217] team0: Port device team_slave_1 added [ 191.180769][ T7220] IPVS: ftp: loaded support on port[0] = 21 16:22:03 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x8001, 0x0) [ 191.276847][ T7217] device hsr_slave_0 entered promiscuous mode [ 191.314149][ T7217] device hsr_slave_1 entered promiscuous mode [ 191.373158][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.380298][ T7217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.387732][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.394807][ T7217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.449415][ T7222] IPVS: ftp: loaded support on port[0] = 21 16:22:03 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180007351dfffd946f6105000200000a1f000007042808000800084004001000280000001100ffffba16a0aa1cec00000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 191.614220][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 191.640373][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.717077][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.733830][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.741906][ T7220] device bridge_slave_0 entered promiscuous mode [ 191.790106][ T7227] IPVS: ftp: loaded support on port[0] = 21 [ 191.796552][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.806769][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.831809][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.841615][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 191.856510][ T7217] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.865986][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.873046][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state 16:22:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 191.882223][ T7220] device bridge_slave_1 entered promiscuous mode [ 191.933357][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.944387][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.951455][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.961324][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.970099][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.977240][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.026691][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.049606][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 192.068383][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.085261][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.104668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.113589][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.130488][ T7217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.142442][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.152804][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.167622][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.176499][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.228866][ T7231] IPVS: ftp: loaded support on port[0] = 21 [ 192.231542][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.247631][ T7220] team0: Port device team_slave_0 added [ 192.273649][ T7220] team0: Port device team_slave_1 added [ 192.298963][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.307105][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.317665][ T7222] device bridge_slave_0 entered promiscuous mode 16:22:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x1002, 0x4, 0x1}, 0x3c) [ 192.346450][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.363242][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.374426][ T7222] device bridge_slave_1 entered promiscuous mode [ 192.461622][ T7220] device hsr_slave_0 entered promiscuous mode [ 192.524236][ T7220] device hsr_slave_1 entered promiscuous mode [ 192.563866][ T7220] debugfs: Directory 'hsr0' with parent '/' already present! [ 192.584208][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.594925][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.686978][ T7238] IPVS: ftp: loaded support on port[0] = 21 [ 192.767898][ T7222] team0: Port device team_slave_0 added [ 192.773683][ T7227] chnl_net:caif_netlink_parms(): no params data found [ 192.801854][ T7222] team0: Port device team_slave_1 added [ 192.907403][ T7222] device hsr_slave_0 entered promiscuous mode [ 192.944155][ T7222] device hsr_slave_1 entered promiscuous mode [ 192.983796][ T7222] debugfs: Directory 'hsr0' with parent '/' already present! [ 193.027571][ T7231] chnl_net:caif_netlink_parms(): no params data found [ 193.046440][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.053591][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.065053][ T7227] device bridge_slave_0 entered promiscuous mode [ 193.080843][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.087938][ T7222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.095243][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.102268][ T7222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.118730][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state 16:22:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,H^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 193.126618][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.134913][ T7227] device bridge_slave_1 entered promiscuous mode [ 193.143599][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.151833][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.193429][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.248936][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.263296][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.286230][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.335693][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.343617][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.351655][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.359497][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.369115][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.381799][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.390640][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.398736][ T7231] device bridge_slave_0 entered promiscuous mode [ 193.422049][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 16:22:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,H^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 193.445026][ T7227] team0: Port device team_slave_0 added [ 193.453719][ T7227] team0: Port device team_slave_1 added [ 193.462543][ T7231] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.469795][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.478636][ T7231] device bridge_slave_1 entered promiscuous mode [ 193.511131][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.520143][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.529196][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.536369][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.545198][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.554098][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.562474][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.569575][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.577724][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.586513][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.594987][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.602205][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.647764][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.659698][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.668673][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.677652][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.684739][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.692732][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.702329][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.711500][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.720467][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.729615][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.738508][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.747551][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.756441][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.771295][ T7238] chnl_net:caif_netlink_parms(): no params data found [ 193.798710][ T7222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.809316][ T7222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.831640][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.840369][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.848777][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.857507][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.866752][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.875518][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.884604][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.893000][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.901441][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.910052][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.919072][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.927459][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.976867][ T7227] device hsr_slave_0 entered promiscuous mode [ 194.014207][ T7227] device hsr_slave_1 entered promiscuous mode [ 194.074109][ T7227] debugfs: Directory 'hsr0' with parent '/' already present! [ 194.098054][ T7220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.109124][ T7220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:22:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,H^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 194.119345][ T7231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.130783][ T7231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.146064][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.157706][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.168246][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.190687][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.205986][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.224374][ T7238] device bridge_slave_0 entered promiscuous mode [ 194.246062][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.273694][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.281309][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.289748][ T7238] device bridge_slave_1 entered promiscuous mode [ 194.318204][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.329716][ T7231] team0: Port device team_slave_0 added [ 194.359763][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.375820][ T7231] team0: Port device team_slave_1 added [ 194.392307][ T7227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.442048][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.467344][ T7238] team0: Port device team_slave_0 added [ 194.474594][ T7238] team0: Port device team_slave_1 added [ 194.571626][ T7231] device hsr_slave_0 entered promiscuous mode [ 194.614398][ T7231] device hsr_slave_1 entered promiscuous mode [ 194.664067][ T7231] debugfs: Directory 'hsr0' with parent '/' already present! [ 194.728520][ T7238] device hsr_slave_0 entered promiscuous mode [ 194.784446][ T7238] device hsr_slave_1 entered promiscuous mode [ 194.826795][ T7238] debugfs: Directory 'hsr0' with parent '/' already present! [ 194.838989][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.847312][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.857421][ T7227] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.935505][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.953055][ T7227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.975655][ T7227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.011810][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 195.029763][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.038851][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.052365][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.059565][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.071744][ T7275] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 195.080512][ T7275] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 195.090427][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:22:06 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x8001, 0x0) 16:22:06 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a62000/0x1000)=nil) close(r0) [ 195.119169][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.143246][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.150359][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.173361][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.183265][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.208869][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.225475][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.237202][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.246716][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.256572][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.265745][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.293418][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.311809][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 16:22:07 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a62000/0x1000)=nil) close(r0) [ 195.339466][ T7238] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.361022][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.387382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.403317][ T7285] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 195.411473][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.442812][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.451539][ T7285] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 195.484330][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.492602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.517029][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0 16:22:07 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="a8000000000000000000000000000000552cac235d8858c9b708ad9643c738d845a5fa85ced2a340ac176ffbac05e6222cbc8929131d136728d4d0acff19bd737b737560067fef1f1e8d2069c7ffa1563bed4bdee4344b15a0d7f1c44ec31224aa6baf56bb184de6d2f32b46c89765f7eb62e08698b0c4554267855d36657087dc2c47d7f869887aa39050aac67a99cbfe392501d99b904af4d8e3065c6c11c9e900000000000000080100000000000000000000000000000ff3aef0a9b8a6efc313d34304c7f14bcb22c30d39bf615b56bb9c16794e0041a7973d349e9dd85ff19d93226694acb41136451c5ba34cbdd2c2d272d559c8119e0a5d5d30e04aa89d276d91698c1b6b83578f080c4e30cd7e1053f7fd6b68db9df6b05220d8571de00be77aced8f86178af2632f8f23af15c5e2d67f9085d4e4d5a92024cae0f2f73f47bf4a728398102933f683c476cb40063fbe6b4375b4d0de06910cf916b5b79bad8926043aa8a61461b4a4d5013bfdf0f7168899b6ab1ca1c4b2f6253361c51f6efffaec7d1fba2bbe2b41e1f3ca3e5b73b0760ac2e364d8baa2ece7cb1646dcd7155fb0ab3d76f00000000000000000100000000000000000000000000006dd232c0bd6c3bcdf97e9fb4aec7ab7df8cd16ab2527fe5495bc997969f034db0422c21378d693ad1da2e4efd1b89336b2d2382c1e101cd601b7b8167ceb1f036c5c4abc81f89af03390fe26c9ea1f31f1e060fda4a98b61faae360cd7a711cddf0993a6de6054f38aa9f0fd5a2c300ac9c00c3e51f98ad955d8b2357373df08bbc60131a15aea538e52b8b58a043f0895b09d02af680849dd5f96c29f4ae5e36703aed6c6a0e3ae831f69112864b10eb711bd5e9757a8c69607549f5fac1cb773c76eaad96b8997181fffcc62a28a10c246b53125d95cfe0e5efa5bcdb81ece786bdd313d4f0b0e8c0000000010000010010000000000000000000000000000a1848b5a91bec30a552eaab313b6350ed0a817f4166961a6f300b0561c28eed80b530ec025c4674b14be96dfd854af5ce97c40bc1a1acfdfd97711084bf9ba7d0050373e6e4cab696b84926fd7d411c8af5b10afe4be14828eb508e6daab295091c30f262c7e181fd8ddcd219b9907ec68bd5fa4fe752857a3c9d4da19c8f401351bf00a04f8f13e01c46e3e675de59e42971dfcbc6c5eea85a9252516694dee741cbdc663ac80c7280f9c76c591e7aa4d9076db46ebb12d22a275ec7451dfa345b037a5808ad2edc65b6260d8ea147c7862904165df4c01d75b43e96bbaa99c35cab6fe11275d1aaffd1c120ff4c46098ced8f2b68734ddcf000000000000004800000000000000000000000000000010acd3c343d9ceb1f930765c5d1dbad5684e6c9c4af50064caf5eee01a7f7eb1d31371104ce0b8705e0a2a02420e6fec9600000000000000434b13f044cfb2dc6df9de840653e447e5a7251b7250f0627c91e6686176fbf886989715180b1d4bcd53a62ee54709f74d91a4314d48a34725ba0c4f87950219b696a9a7f4e16001f724191293e3ff4945b2cf1ae0f409aea88cc0dd3fa08db805df34e0e56c31ca2e3cafc60b59373aac5730f583fb4f58870fb217401068a3ec6b8e2fa2ecae0b1d861842e750260a63beeaa4dcb0db4531f19a7725d0746df66c121fab3a33ac4e587cecfabdb849c7fada2a40585726aace71af66c89c9a564e30e7055fde9d62397f1e93fe62a15dccb0514939ae"], 0x408}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x8001, 0x0) [ 195.539823][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.569680][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.583269][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state 16:22:07 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a62000/0x1000)=nil) close(r0) [ 195.590410][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.598618][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.624680][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.633359][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.640487][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.650424][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.673250][ T7238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.703957][ T7238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.728944][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 16:22:07 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a62000/0x1000)=nil) close(r0) [ 195.753490][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.791535][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.806197][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.827989][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.835755][ T7298] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 195.845061][ T7298] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 195.858965][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.880942][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.892632][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.919303][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.956658][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.001550][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.037126][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.060568][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.088767][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.099723][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.122084][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.131186][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.140257][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.147340][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.167364][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.179187][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.190621][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.197742][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.206483][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.215774][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.225210][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.233845][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.242715][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.251485][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.262326][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.270508][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.291317][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.337975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.348942][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.357613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.366987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.377936][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.388698][ T7238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.414963][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.434871][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:22:08 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180007351dfffd946f6105000200000a1f000007042808000800084004001000280000001100ffffba16a0aa1cec00000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 196.573680][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.744844][ T7337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 196.798348][ C1] hrtimer: interrupt took 33719 ns [ 196.902802][ T7337] kvm: pic: non byte read [ 196.908984][ T7337] kvm: pic: non byte write [ 196.914881][ T7337] kvm: pic: single mode not supported [ 196.916271][ T7337] kvm: pic: non byte read [ 196.929367][ T7337] kvm: pic: non byte write [ 196.936804][ T7337] kvm: pic: non byte read [ 196.941590][ T7337] kvm: pic: non byte write [ 196.949057][ T7337] kvm: pic: non byte read [ 196.954127][ T7337] kvm: pic: non byte write [ 196.960428][ T7337] kvm: pic: non byte read [ 196.965831][ T7337] kvm: pic: non byte write [ 196.972666][ T7337] kvm: pic: non byte read [ 196.977906][ T7337] kvm: pic: non byte write [ 196.987661][ T7337] kvm: pic: non byte read [ 196.993290][ T7337] kvm: pic: non byte write [ 197.001018][ T7337] kvm: pic: non byte read [ 197.006506][ T7337] kvm: pic: non byte write [ 197.012717][ T7337] kvm: pic: non byte read [ 197.018096][ T7337] kvm: pic: non byte write [ 197.026698][ T7337] kvm: pic: non byte read [ 197.032006][ T7337] kvm: pic: non byte write 16:22:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:22:09 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a62000/0x1000)=nil) close(r0) 16:22:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 16:22:09 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x8001, 0x0) 16:22:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180007351dfffd946f6105000200000a1f000007042808000800084004001000280000001100ffffba16a0aa1cec00000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 16:22:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x1002, 0x4, 0x1}, 0x3c) [ 197.299887][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:22:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 16:22:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x1002, 0x4, 0x1}, 0x3c) 16:22:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180007351dfffd946f6105000200000a1f000007042808000800084004001000280000001100ffffba16a0aa1cec00000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 16:22:09 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a62000/0x1000)=nil) close(r0) [ 197.517780][ T7357] kvm: pic: single mode not supported [ 197.675545][ T7355] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 197.724272][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:22:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x1002, 0x4, 0x1}, 0x3c) [ 197.801274][ T7355] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) 16:22:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 16:22:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:22:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:22:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 16:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:22:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:22:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:22:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:22:10 executing program 1: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000240)={0x0, 0x0, "8adf94906ddcf53de24bbd9e51e55c668ddbfc467da8e8fe6670256dd55d44dc", 0x0, 0x7}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f455c410600010005010d4da5921d751890fe532e3f"], 0x16) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) dup2(r3, 0xffffffffffffffff) pipe(0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 198.964053][ T7412] ================================================================== [ 198.972203][ T7412] BUG: KCSAN: data-race in do_writev / ksys_write [ 198.978605][ T7412] [ 198.980941][ T7412] read to 0xffff8880b19acc68 of 8 bytes by task 7411 on cpu 1: [ 198.988490][ T7412] do_writev+0xb1/0x250 [ 198.992657][ T7412] __x64_sys_writev+0x4e/0x60 [ 198.997339][ T7412] do_syscall_64+0xcc/0x370 [ 199.001847][ T7412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.007726][ T7412] [ 199.010061][ T7412] write to 0xffff8880b19acc68 of 8 bytes by task 7412 on cpu 0: [ 199.017718][ T7412] ksys_write+0x101/0x1b0 [ 199.022052][ T7412] __x64_sys_write+0x4c/0x60 [ 199.026648][ T7412] do_syscall_64+0xcc/0x370 [ 199.031155][ T7412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.037036][ T7412] [ 199.039363][ T7412] Reported by Kernel Concurrency Sanitizer on: [ 199.045519][ T7412] CPU: 0 PID: 7412 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 199.053331][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.063385][ T7412] ================================================================== [ 199.071445][ T7412] Kernel panic - not syncing: panic_on_warn set ... [ 199.078061][ T7412] CPU: 0 PID: 7412 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 199.085860][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.095914][ T7412] Call Trace: [ 199.099209][ T7412] dump_stack+0xf5/0x159 [ 199.103464][ T7412] panic+0x210/0x640 [ 199.107368][ T7412] ? vprintk_func+0x8d/0x140 [ 199.111963][ T7412] kcsan_report.cold+0xc/0x10 [ 199.116641][ T7412] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 199.122179][ T7412] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 199.128406][ T7412] __tsan_write8+0x32/0x40 [ 199.132813][ T7412] ksys_write+0x101/0x1b0 [ 199.137131][ T7412] __x64_sys_write+0x4c/0x60 [ 199.141712][ T7412] do_syscall_64+0xcc/0x370 [ 199.146248][ T7412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.152129][ T7412] RIP: 0033:0x459ef9 [ 199.156016][ T7412] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.175606][ T7412] RSP: 002b:00007fec3b005c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.184003][ T7412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 199.191962][ T7412] RDX: 0000000000000016 RSI: 0000000020000080 RDI: 0000000000000004 [ 199.199922][ T7412] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 199.207879][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec3b0066d4 [ 199.215839][ T7412] R13: 00000000004ca49c R14: 00000000004e2330 R15: 00000000ffffffff [ 199.225237][ T7412] Kernel Offset: disabled [ 199.229564][ T7412] Rebooting in 86400 seconds..