Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. 2019/12/15 03:18:26 fuzzer started 2019/12/15 03:18:28 dialing manager at 10.128.0.105:44249 2019/12/15 03:18:28 syscalls: 2686 2019/12/15 03:18:28 code coverage: enabled 2019/12/15 03:18:28 comparison tracing: enabled 2019/12/15 03:18:28 extra coverage: enabled 2019/12/15 03:18:28 setuid sandbox: enabled 2019/12/15 03:18:28 namespace sandbox: enabled 2019/12/15 03:18:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/15 03:18:28 fault injection: enabled 2019/12/15 03:18:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/15 03:18:28 net packet injection: enabled 2019/12/15 03:18:28 net device setup: enabled 2019/12/15 03:18:28 concurrency sanitizer: enabled 2019/12/15 03:18:28 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 63.747656][ T7740] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/15 03:18:39 adding functions to KCSAN blacklist: 'xas_find_marked' 'do_nanosleep' 'timer_clear_idle' 'ext4_mb_good_group' 'add_timer' 'find_next_bit' 'do_exit' 'do_syslog' '__mark_inode_dirty' 'wbt_issue' 'blk_mq_get_request' 'file_remove_privs' 'find_get_pages_range_tag' 'ext4_free_inodes_count' 'tick_do_update_jiffies64' 'clear_inode' 'vm_area_dup' '__ext4_new_inode' 'copy_process' '__snd_rawmidi_transmit_ack' 'ext4_sync_file' 'watchdog' 'mmap_region' 'common_perm_cond' 'mod_timer' 'taskstats_exit' 'dd_has_work' '__add_to_page_cache_locked' 'xas_clear_mark' 'page_counter_try_charge' 'ktime_get_real_seconds' 'commit_echoes' 'pid_update_inode' 'rcu_gp_fqs_loop' 'poll_schedule_timeout' 'process_srcu' '__hrtimer_run_queues' 'echo_char' 'enqueue_timer' 'yama_ptracer_del' 'audit_log_start' 'ext4_nonda_switch' 'pcpu_alloc' 'ext4_free_inode' 'iomap_dio_bio_actor' 'ext4_mark_iloc_dirty' 'tick_sched_do_timer' 'atime_needs_update' 'iput' 'ext4_has_free_clusters' 'generic_fillattr' 'do_signal_stop' 'wbt_done' 'tomoyo_supervisor' 'sit_tunnel_xmit' 'kauditd_thread' 'blk_mq_run_hw_queue' 'blk_mq_dispatch_rq_list' 'lruvec_lru_size' '__delete_from_page_cache' 'rcu_gp_fqs_check_wake' 'schedule_hrtimeout_range_clock' 'do_readlinkat' 'add_timer_on' 'run_timer_softirq' 'kcm_rfree' 'blk_stat_add' '__dentry_kill' 'futex_wait_queue_me' 'ep_poll' 'tick_nohz_idle_stop_tick' 'blk_mq_sched_dispatch_requests' 'do_try_to_free_pages' 'generic_write_end' 'n_tty_receive_buf_common' 'wbt_wait' 03:21:30 executing program 0: semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x100000009}}], 0x400000000000049, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 03:21:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xc7f5, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000580)=[{&(0x7f00000019c0)=""/4107, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0, 0x214}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000680)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 240.677900][ T7744] IPVS: ftp: loaded support on port[0] = 21 [ 240.829286][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 240.857124][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.860317][ T7747] IPVS: ftp: loaded support on port[0] = 21 [ 240.864276][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.878147][ T7744] device bridge_slave_0 entered promiscuous mode [ 240.885499][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.893088][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.900667][ T7744] device bridge_slave_1 entered promiscuous mode 03:21:31 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0xffffff4e) recvmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{&(0x7f0000004e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 240.923032][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.934495][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.957822][ T7744] team0: Port device team_slave_0 added [ 240.975306][ T7744] team0: Port device team_slave_1 added [ 241.081364][ T7744] device hsr_slave_0 entered promiscuous mode [ 241.119353][ T7744] device hsr_slave_1 entered promiscuous mode 03:21:31 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') fstat(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r1, 0x0, 0x401) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x482}, 0x240400e0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpgrp(0x0) sched_setaffinity(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) [ 241.210225][ T7747] chnl_net:caif_netlink_parms(): no params data found [ 241.237141][ T7750] IPVS: ftp: loaded support on port[0] = 21 [ 241.277092][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.299553][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.309856][ T7747] device bridge_slave_0 entered promiscuous mode [ 241.331150][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.338179][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.360164][ T7747] device bridge_slave_1 entered promiscuous mode [ 241.393788][ T7752] IPVS: ftp: loaded support on port[0] = 21 [ 241.409763][ T7744] netdevsim netdevsim0 netdevsim0: renamed from eth0 03:21:31 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa7}}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18, 0xffffffa7}}], 0x40000000000037b, 0xc000) [ 241.510284][ T7744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.551328][ T7747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.565451][ T7744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.611121][ T7744] netdevsim netdevsim0 netdevsim3: renamed from eth3 03:21:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/244, 0xf4}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0xd09a, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) shutdown(r4, 0x0) [ 241.692933][ T7747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.715293][ T7754] IPVS: ftp: loaded support on port[0] = 21 [ 241.725536][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.732681][ T7744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.740056][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.747080][ T7744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.796208][ T7747] team0: Port device team_slave_0 added [ 241.837128][ T7747] team0: Port device team_slave_1 added [ 241.846098][ T7750] chnl_net:caif_netlink_parms(): no params data found [ 241.855038][ T2572] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.863045][ T2572] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.896890][ T7759] IPVS: ftp: loaded support on port[0] = 21 [ 241.912624][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 241.960975][ T7747] device hsr_slave_0 entered promiscuous mode [ 241.999423][ T7747] device hsr_slave_1 entered promiscuous mode [ 242.039119][ T7747] debugfs: Directory 'hsr0' with parent '/' already present! [ 242.082504][ T7747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.140909][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.147994][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.155997][ T7750] device bridge_slave_0 entered promiscuous mode [ 242.168691][ T7747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.225182][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.232352][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.240393][ T7750] device bridge_slave_1 entered promiscuous mode [ 242.258606][ T7747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.306902][ T7750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.316901][ T7750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.338102][ T7750] team0: Port device team_slave_0 added [ 242.352253][ T7747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.389978][ T7750] team0: Port device team_slave_1 added [ 242.395646][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.404302][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.412491][ T7752] device bridge_slave_0 entered promiscuous mode [ 242.419734][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.426748][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.434496][ T7752] device bridge_slave_1 entered promiscuous mode [ 242.452488][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.463870][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.501498][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 242.540345][ T7752] team0: Port device team_slave_0 added [ 242.582404][ T7752] team0: Port device team_slave_1 added [ 242.652984][ T7750] device hsr_slave_0 entered promiscuous mode [ 242.709325][ T7750] device hsr_slave_1 entered promiscuous mode [ 242.749147][ T7750] debugfs: Directory 'hsr0' with parent '/' already present! [ 242.762303][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.771570][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.779399][ T7754] device bridge_slave_0 entered promiscuous mode [ 242.801005][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.808274][ T7759] chnl_net:caif_netlink_parms(): no params data found [ 242.817278][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.824432][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.832559][ T7754] device bridge_slave_1 entered promiscuous mode [ 242.892663][ T7752] device hsr_slave_0 entered promiscuous mode [ 242.929455][ T7752] device hsr_slave_1 entered promiscuous mode [ 242.969128][ T7752] debugfs: Directory 'hsr0' with parent '/' already present! [ 243.008526][ T7747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.029782][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.042487][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.064235][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.071961][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.080991][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.094568][ T7747] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.101802][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.108805][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.116781][ T7759] device bridge_slave_0 entered promiscuous mode [ 243.125759][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.132977][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.140714][ T7759] device bridge_slave_1 entered promiscuous mode [ 243.147330][ T7750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.201430][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.209658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.226005][ T7752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.291520][ T7750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.348231][ T7752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.390551][ T7750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.430744][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.441794][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.450079][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.457081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.465149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.473637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.482198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.489307][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.497149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.506362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.515063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.523543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.532565][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.541389][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.550175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.558726][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.567196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.574219][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.582777][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.591081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.600760][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.610761][ T7754] team0: Port device team_slave_0 added [ 243.619257][ T7752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.663324][ T7752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.721240][ T7750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.773312][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.782098][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.790754][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.797766][ T7760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.805516][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.815530][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.825965][ T7754] team0: Port device team_slave_1 added [ 243.881111][ T7754] device hsr_slave_0 entered promiscuous mode [ 243.919624][ T7754] device hsr_slave_1 entered promiscuous mode [ 243.959124][ T7754] debugfs: Directory 'hsr0' with parent '/' already present! [ 243.977917][ T7744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.988440][ T7744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.000400][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.008890][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.017557][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.026352][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.034781][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.043288][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.076651][ T7759] team0: Port device team_slave_0 added [ 244.086672][ T7759] team0: Port device team_slave_1 added [ 244.092922][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.101874][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.110879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.119785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.128458][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.163710][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.171655][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.179075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.187608][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.241215][ T7759] device hsr_slave_0 entered promiscuous mode [ 244.289562][ T7759] device hsr_slave_1 entered promiscuous mode [ 244.329227][ T7759] debugfs: Directory 'hsr0' with parent '/' already present! [ 244.342973][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.368908][ T7752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.392344][ T7754] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.433670][ T7747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.444911][ T7747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.453114][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.461732][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.472480][ T7759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.520721][ T7754] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.582068][ T7754] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.612980][ T7754] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.670847][ T7747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.682175][ T7759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.713430][ T7759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.760754][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.768489][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.776589][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.783951][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.792909][ T7752] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.811435][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.818393][ T7759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.870976][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.880187][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.888762][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.889060][ C0] hrtimer: interrupt took 29048 ns [ 244.895806][ T7760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.925912][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.948527][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.966997][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.983595][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.007141][ T2572] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.014202][ T2572] bridge0: port 2(bridge_slave_1) entered forwarding state 03:21:35 executing program 0: semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x100000009}}], 0x400000000000049, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) [ 245.027072][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.035903][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.070312][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.095610][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.107840][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.116651][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.128496][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.136221][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:21:35 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x1ff) [ 245.151253][ T7752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.162821][ T7752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.186604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:21:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'lo\x00'}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0x0, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) [ 245.219920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.232216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.251969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.260299][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.268434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.277144][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.285445][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.292583][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.300537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.308161][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.360089][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.368608][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.388673][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.395752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.418088][ T7752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.442420][ T7782] device lo entered promiscuous mode [ 245.465409][ T7750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.476222][ T7750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.487780][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.497254][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.505925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.514294][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.522921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.530389][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.537816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.546400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.555209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.563638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.572019][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.580640][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.597991][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 03:21:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'lo\x00'}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0x0, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) [ 245.613947][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.638071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.649919][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.679761][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.702166][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.710160][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.718035][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.728200][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.754561][ T7750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.767322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.775253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.783102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.792517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.801692][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.808808][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.816617][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 03:21:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000380)="800000003804000019000300e60100006c000000000000000100000001000000005f00000040000080000000001c00006d5ebe5a0000ffff53ef0b0f529dc8521f58cd61daa8da21ffc522895032718c065896ab97ab3b78d67322062f3f1de1925d", 0x62, 0x400}], 0x0, 0x0) [ 245.825389][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.833847][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.840898][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.859468][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.868231][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:21:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'hsr0\x00', &(0x7f0000000200)=@ethtool_flash={0x33, 0x0, "9f75274e82085d8e10a7be5d99190480dc32137fafd6c6c6c2a0d5c016a6e77ef7296ecf45298ec535a3a1459c301b009981800c1265460d19ec1af6726ee87f96513d26c6d473ecbd6208e243962f2008fb91e0e00f92f6749e5847856617815a8538e8fb55b032eb374f3322647e83f291ba3db6996c2467704fc18e724d7a"}}) [ 245.888076][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.896806][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.906442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.914758][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.947217][ T7791] device lo left promiscuous mode [ 245.999263][ T7801] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (1800) [ 246.040854][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.056076][ T7797] device lo entered promiscuous mode [ 246.078462][ T7759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.093424][ T7801] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (1800) [ 246.102957][ T7759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.132525][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.152448][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.161666][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 03:21:36 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 03:21:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, 0x0) [ 246.199628][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.212770][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.219868][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.232222][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.240862][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.252553][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.260992][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.315139][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.347497][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.376948][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.388117][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.397713][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.405204][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.430585][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.451487][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.471404][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.492114][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.510057][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.529593][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.538307][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.555187][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.565640][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.582237][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:21:37 executing program 2: socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0xd2}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = epoll_create1(0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000180)=0xffffffff) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) 03:21:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) [ 246.590596][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.602608][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.622170][ T7754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.639600][ T7754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.666580][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.678474][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.714490][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.723275][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.738882][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 03:21:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000018c0)=""/4099}], 0x5d) dup2(r3, r0) tkill(r1, 0x1000000000016) 03:21:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000004bc0), &(0x7f0000007500)=0x4) 03:21:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:21:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000100)) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f00000001c0)=""/156) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x5) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='\xdf\x03\x00\xea\xff\x00\x00\x00\x00\f', 0x400, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xb7cecb63, 0x0, 0x0, 0xca) 03:21:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000003540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000200)={0x10, 0x2}, 0x10) shutdown(r2, 0x0) 03:21:37 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x10, &(0x7f00000001c0)) [ 247.135806][ T7867] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 03:21:37 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, "ad03064d0b090233180173920d2a3836f7d76f992ab41d9fcf9152ba5bd273eea9204e9b0e260d83009a02d5c5097cd5e21de9f73f07d13f44250cf2f92d6466", "7e2bc69a47db702cc8daf96f5e68254ee361331a88dd2965f18d2bee91bd828c9ec7b0c65e30a467c42d17bcaeb953b41590436e8cec4a4a5c7a1bd80aac5025", "b953833c4e60f9cc5d472a000000000f67289021fffff3f600"}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) fcntl$setlease(r0, 0x400, 0x0) [ 247.217778][ T7866] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.255077][ T7866] device ip6gretap0 entered promiscuous mode [ 247.298579][ T7866] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:37 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/164}, 0xac, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 03:21:37 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:21:37 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:21:38 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 03:21:38 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '/\r+', 0x4c, 0x0, 0x0, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@dstopts], @gre}}}}}, 0x0) [ 247.620159][ T7873] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.649731][ T7873] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:38 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 03:21:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:21:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 03:21:38 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)) [ 247.916599][ T7923] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.952961][ T7923] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:38 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 03:21:38 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, "ad03064d0b090233180173920d2a3836f7d76f992ab41d9fcf9152ba5bd273eea9204e9b0e260d83009a02d5c5097cd5e21de9f73f07d13f44250cf2f92d6466", "7e2bc69a47db702cc8daf96f5e68254ee361331a88dd2965f18d2bee91bd828c9ec7b0c65e30a467c42d17bcaeb953b41590436e8cec4a4a5c7a1bd80aac5025", "b953833c4e60f9cc5d472a000000000f67289021fffff3f600"}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) fcntl$setlease(r0, 0x400, 0x0) 03:21:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) 03:21:38 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 03:21:38 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1041, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x100) close(r4) read$FUSE(r3, &(0x7f00000015c0), 0x1000) close(r2) open$dir(&(0x7f00000001c0)='./file0\x00', 0x8081, 0x40) [ 248.267590][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 03:21:48 executing program 1: msgrcv(0x0, &(0x7f0000000280)={0x0, ""/164}, 0xac, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 03:21:48 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 03:21:48 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x21a, 0x0, 0x59, 0x0, 0x1d7}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 03:21:48 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 03:21:48 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 03:21:48 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xffbffffffffffffc) clock_nanosleep(0x0, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0) 03:21:48 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) 03:21:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semget(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000100)) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f00000001c0)=""/156) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x5) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='\xdf\x03\x00\xea\xff\x00\x00\x00\x00\f', 0x400, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xb7cecb63, 0x0, 0x0, 0xca) 03:21:48 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x9fab6a25) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 03:21:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="21e9403aa924791dab66e339def4ca3f"}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x11, &(0x7f0000000040)={r1}, 0x8) 03:21:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xc7f5, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000580)=[{&(0x7f00000019c0)=""/4107, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0, 0x214}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/68, 0x44}, {0x0}], 0x2}, 0x2) shutdown(r4, 0x0) shutdown(r1, 0x0) 03:21:48 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2000000050000}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) [ 258.451991][ T7978] ================================================================== [ 258.460131][ T7978] BUG: KCSAN: data-race in queue_access_lock / snd_seq_check_queue [ 258.468010][ T7978] [ 258.470339][ T7978] read to 0xffff8881269f74e4 of 1 bytes by interrupt on cpu 0: [ 258.477882][ T7978] snd_seq_check_queue+0x59/0x200 [ 258.482909][ T7978] snd_seq_timer_interrupt+0x243/0x280 [ 258.488386][ T7978] snd_timer_process_callbacks+0x1e4/0x220 [ 258.494186][ T7978] snd_timer_interrupt+0x483/0x930 [ 258.499306][ T7978] snd_hrtimer_callback+0x18f/0x260 [ 258.504493][ T7978] __hrtimer_run_queues+0x274/0x5f0 [ 258.509676][ T7978] hrtimer_interrupt+0x22a/0x480 [ 258.514601][ T7978] smp_apic_timer_interrupt+0xdc/0x280 [ 258.520048][ T7978] apic_timer_interrupt+0xf/0x20 [ 258.524975][ T7978] kcsan_setup_watchpoint+0x1d4/0x460 [ 258.530333][ T7978] __tsan_unaligned_write4+0xc7/0x110 [ 258.535689][ T7978] __rcu_read_unlock+0x90/0x3d0 [ 258.540528][ T7978] __unlock_page_memcg+0x42/0xa0 [ 258.545455][ T7978] unlock_page_memcg+0x23/0x30 [ 258.550205][ T7978] page_remove_rmap+0x371/0x7a0 [ 258.555052][ T7978] unmap_page_range+0xb31/0x1940 [ 258.559977][ T7978] unmap_single_vma+0x144/0x200 [ 258.564826][ T7978] unmap_vmas+0xda/0x1a0 [ 258.569059][ T7978] exit_mmap+0x13e/0x300 [ 258.573301][ T7978] mmput+0xea/0x280 [ 258.577091][ T7978] do_exit+0x4ac/0x18c0 [ 258.581233][ T7978] do_group_exit+0xb4/0x1c0 [ 258.585728][ T7978] get_signal+0x2a2/0x1320 [ 258.590132][ T7978] do_signal+0x2f/0x6c0 [ 258.594277][ T7978] exit_to_usermode_loop+0x250/0x2c0 [ 258.599551][ T7978] do_syscall_64+0x384/0x3a0 [ 258.604130][ T7978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 258.610001][ T7978] [ 258.612320][ T7978] write to 0xffff8881269f74e4 of 1 bytes by task 7978 on cpu 1: [ 258.619939][ T7978] queue_access_lock+0x89/0xc0 [ 258.624692][ T7978] snd_seq_control_queue+0x77/0x350 [ 258.629886][ T7978] event_input_timer+0x2f/0x50 [ 258.634650][ T7978] snd_seq_deliver_single_event.constprop.0+0x3e8/0x4d0 [ 258.641577][ T7978] snd_seq_deliver_event+0x2e9/0x4c0 [ 258.646855][ T7978] snd_seq_dispatch_event+0xa1/0x340 [ 258.652130][ T7978] snd_seq_check_queue+0xeb/0x200 [ 258.657139][ T7978] snd_seq_enqueue_event+0x163/0x2b0 [ 258.662419][ T7978] snd_seq_client_enqueue_event.constprop.0+0x187/0x2a0 [ 258.669365][ T7978] snd_seq_write+0x23f/0x4d0 [ 258.674031][ T7978] __vfs_write+0x67/0xc0 [ 258.678267][ T7978] vfs_write+0x18a/0x390 [ 258.682497][ T7978] ksys_write+0x17b/0x1b0 [ 258.686820][ T7978] __x64_sys_write+0x4c/0x60 [ 258.691401][ T7978] do_syscall_64+0xcc/0x3a0 [ 258.695899][ T7978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 258.701771][ T7978] [ 258.704081][ T7978] Reported by Kernel Concurrency Sanitizer on: [ 258.710223][ T7978] CPU: 1 PID: 7978 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 258.718786][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.728826][ T7978] ================================================================== [ 258.736874][ T7978] Kernel panic - not syncing: panic_on_warn set ... [ 258.743450][ T7978] CPU: 1 PID: 7978 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 258.752018][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.762074][ T7978] Call Trace: [ 258.765363][ T7978] dump_stack+0x11d/0x181 [ 258.769686][ T7978] panic+0x210/0x640 [ 258.773579][ T7978] ? vprintk_func+0x8d/0x140 [ 258.778160][ T7978] kcsan_report.cold+0xc/0xd [ 258.782748][ T7978] kcsan_setup_watchpoint+0x3fe/0x460 [ 258.788113][ T7978] __tsan_unaligned_write1+0xc3/0x100 [ 258.793475][ T7978] queue_access_lock+0x89/0xc0 [ 258.798229][ T7978] snd_seq_control_queue+0x77/0x350 [ 258.803420][ T7978] ? preempt_count_add+0x6f/0xb0 [ 258.808350][ T7978] event_input_timer+0x2f/0x50 [ 258.813113][ T7978] snd_seq_deliver_single_event.constprop.0+0x3e8/0x4d0 [ 258.820132][ T7978] ? snd_seq_timer_open.cold+0x30/0x30 [ 258.825580][ T7978] ? debug_smp_processor_id+0x43/0x137 [ 258.831034][ T7978] snd_seq_deliver_event+0x2e9/0x4c0 [ 258.836310][ T7978] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 258.842105][ T7978] ? preempt_count_add+0x6f/0xb0 [ 258.847038][ T7978] ? snd_seq_client_use_ptr+0x93/0x2f0 [ 258.852487][ T7978] snd_seq_dispatch_event+0xa1/0x340 [ 258.857760][ T7978] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 258.863556][ T7978] ? snd_seq_prioq_cell_out+0x163/0x210 [ 258.869092][ T7978] snd_seq_check_queue+0xeb/0x200 [ 258.874110][ T7978] snd_seq_enqueue_event+0x163/0x2b0 [ 258.879392][ T7978] snd_seq_client_enqueue_event.constprop.0+0x187/0x2a0 [ 258.886317][ T7978] snd_seq_write+0x23f/0x4d0 [ 258.890906][ T7978] __vfs_write+0x67/0xc0 [ 258.895140][ T7978] ? snd_seq_kernel_client_enqueue+0x160/0x160 [ 258.901284][ T7978] vfs_write+0x18a/0x390 [ 258.905529][ T7978] ksys_write+0x17b/0x1b0 [ 258.909849][ T7978] __x64_sys_write+0x4c/0x60 [ 258.914432][ T7978] do_syscall_64+0xcc/0x3a0 [ 258.919043][ T7978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 258.924952][ T7978] RIP: 0033:0x45a909 [ 258.928843][ T7978] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.948438][ T7978] RSP: 002b:00007f4196a1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.956841][ T7978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 258.964803][ T7978] RDX: 000000009fab6a25 RSI: 0000000020000000 RDI: 0000000000000003 [ 258.972761][ T7978] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 258.980718][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4196a1c6d4 [ 258.988686][ T7978] R13: 00000000004cc097 R14: 00000000004e5e18 R15: 00000000ffffffff [ 258.997869][ T7978] Kernel Offset: disabled [ 259.002230][ T7978] Rebooting in 86400 seconds..