[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.833524][ T26] audit: type=1800 audit(1573484513.964:25): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 53.860151][ T26] audit: type=1800 audit(1573484513.964:26): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 53.913100][ T26] audit: type=1800 audit(1573484513.964:27): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. 2019/11/11 15:02:05 fuzzer started 2019/11/11 15:02:06 dialing manager at 10.128.0.26:36385 2019/11/11 15:02:07 syscalls: 2566 2019/11/11 15:02:07 code coverage: enabled 2019/11/11 15:02:07 comparison tracing: enabled 2019/11/11 15:02:07 extra coverage: enabled 2019/11/11 15:02:07 setuid sandbox: enabled 2019/11/11 15:02:07 namespace sandbox: enabled 2019/11/11 15:02:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/11 15:02:07 fault injection: enabled 2019/11/11 15:02:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/11 15:02:07 net packet injection: enabled 2019/11/11 15:02:07 net device setup: enabled 2019/11/11 15:02:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/11 15:02:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 15:04:40 executing program 0: 15:04:40 executing program 1: syzkaller login: [ 220.242788][ T8805] IPVS: ftp: loaded support on port[0] = 21 [ 220.395951][ T8805] chnl_net:caif_netlink_parms(): no params data found 15:04:40 executing program 2: [ 220.436469][ T8808] IPVS: ftp: loaded support on port[0] = 21 [ 220.484729][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.504709][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.521345][ T8805] device bridge_slave_0 entered promiscuous mode [ 220.544994][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.560194][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.581207][ T8805] device bridge_slave_1 entered promiscuous mode [ 220.662262][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.679905][ T8810] IPVS: ftp: loaded support on port[0] = 21 [ 220.690851][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:04:40 executing program 3: [ 220.739223][ T8805] team0: Port device team_slave_0 added [ 220.776758][ T8805] team0: Port device team_slave_1 added [ 220.893721][ T8805] device hsr_slave_0 entered promiscuous mode [ 220.930472][ T8805] device hsr_slave_1 entered promiscuous mode 15:04:41 executing program 4: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="230000005e0081aee4050c00000f0000709110ecab372942b44ee4a0008bc609f6d8ff", 0x23}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0xffffffffffffff77) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 221.063438][ T8813] IPVS: ftp: loaded support on port[0] = 21 [ 221.105110][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 221.266824][ T8816] IPVS: ftp: loaded support on port[0] = 21 [ 221.292179][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.299321][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.307773][ T8808] device bridge_slave_0 entered promiscuous mode 15:04:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 221.321332][ T8810] chnl_net:caif_netlink_parms(): no params data found [ 221.344539][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.354844][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.362684][ T8808] device bridge_slave_1 entered promiscuous mode [ 221.425627][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.432905][ T8805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.440790][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.447871][ T8805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.480026][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.487256][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.495018][ T8810] device bridge_slave_0 entered promiscuous mode [ 221.504612][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.516594][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.524670][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.538939][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.547592][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.555947][ T8810] device bridge_slave_1 entered promiscuous mode [ 221.557073][ T8818] IPVS: ftp: loaded support on port[0] = 21 [ 221.571758][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.598441][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.638620][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.671651][ T8808] team0: Port device team_slave_0 added [ 221.683832][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 221.733362][ T8808] team0: Port device team_slave_1 added [ 221.739156][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.746347][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.754070][ T8813] device bridge_slave_0 entered promiscuous mode [ 221.763251][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.771098][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.778711][ T8813] device bridge_slave_1 entered promiscuous mode [ 221.789894][ T8810] team0: Port device team_slave_0 added [ 221.798387][ T8810] team0: Port device team_slave_1 added [ 221.852157][ T8808] device hsr_slave_0 entered promiscuous mode [ 221.910807][ T8808] device hsr_slave_1 entered promiscuous mode [ 221.950235][ T8808] debugfs: Directory 'hsr0' with parent '/' already present! [ 222.042954][ T8810] device hsr_slave_0 entered promiscuous mode [ 222.080640][ T8810] device hsr_slave_1 entered promiscuous mode [ 222.150197][ T8810] debugfs: Directory 'hsr0' with parent '/' already present! [ 222.171107][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.189090][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.252866][ T8816] chnl_net:caif_netlink_parms(): no params data found [ 222.268294][ T8813] team0: Port device team_slave_0 added [ 222.303989][ T8813] team0: Port device team_slave_1 added [ 222.463413][ T8813] device hsr_slave_0 entered promiscuous mode [ 222.520637][ T8813] device hsr_slave_1 entered promiscuous mode [ 222.580272][ T8813] debugfs: Directory 'hsr0' with parent '/' already present! [ 222.588262][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.595633][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.603451][ T8816] device bridge_slave_0 entered promiscuous mode [ 222.612941][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.619983][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.628177][ T8816] device bridge_slave_1 entered promiscuous mode [ 222.664717][ T8818] chnl_net:caif_netlink_parms(): no params data found [ 222.697391][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.746619][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.758531][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.806420][ T8816] team0: Port device team_slave_0 added [ 222.813853][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.821407][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.831596][ T8818] device bridge_slave_0 entered promiscuous mode [ 222.839398][ T8818] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.846873][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.854967][ T8818] device bridge_slave_1 entered promiscuous mode [ 222.866736][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.875263][ T8816] team0: Port device team_slave_1 added [ 222.903853][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.912807][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.948106][ T8818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.959211][ T8818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.970794][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.979274][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.987856][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.994960][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.002648][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.011378][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.019732][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.026819][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.038186][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.082182][ T8816] device hsr_slave_0 entered promiscuous mode [ 223.120937][ T8816] device hsr_slave_1 entered promiscuous mode [ 223.150253][ T8816] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.181553][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.190379][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.198854][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.226034][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.243748][ T8818] team0: Port device team_slave_0 added [ 223.268804][ T8805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.284665][ T8805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.300568][ T8818] team0: Port device team_slave_1 added [ 223.312434][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.321508][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.329764][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.339078][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.347768][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.356609][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.366449][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.405119][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.417837][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.473586][ T8818] device hsr_slave_0 entered promiscuous mode [ 223.520644][ T8818] device hsr_slave_1 entered promiscuous mode [ 223.560232][ T8818] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.597029][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.609107][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.618044][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.625820][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.633361][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.641405][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.652654][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.675758][ T8810] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.689476][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.698413][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.709413][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.718584][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.729771][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.736893][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.748333][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.811050][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.818973][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.828482][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.838571][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.847668][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.854775][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.862740][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.871431][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.879907][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.888492][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.895605][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.904290][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.913200][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.921752][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.928854][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.936550][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.948657][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.989521][ T8813] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.005622][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.015260][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.025211][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 15:04:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) [ 224.035105][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.045553][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.067190][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.079109][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.089813][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.103949][ T8810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.115089][ T8810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.133633][ T8816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.162535][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.171356][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.179474][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.189035][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.197827][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.206844][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.215304][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.224289][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.233323][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.242130][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.251277][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.258431][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.266560][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.275554][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.284193][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.291316][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.299149][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.308332][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 15:04:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) [ 224.335141][ T8816] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.391766][ T8808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.403668][ T8808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.416830][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.425590][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.434126][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.444967][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.453626][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.462967][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.472028][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.479994][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.487918][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.497320][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.506027][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.513189][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.521445][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.530526][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 15:04:44 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000d06000), 0x4) [ 224.539317][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.548253][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.556952][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.565708][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.580702][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.588126][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.614492][ T8813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.626949][ T8813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.644661][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0 15:04:44 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@dev, @in6=@ipv4={[], [], @empty}}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, 0xe8) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) ptrace(0x10, r3) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 224.671734][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.679461][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.689024][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.697691][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.706491][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.716021][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.723155][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.731518][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.740663][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.749391][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.758481][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.767122][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.775672][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.824501][ T8816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.839548][ T8816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.851800][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.859791][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.869845][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.878452][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.887280][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.896363][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.904782][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.913358][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.920899][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.928314][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.935864][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.943373][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.953616][ T8813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.971181][ T8818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.018382][ T8818] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.028775][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.051627][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.059777][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.068017][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.076304][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.091464][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.101241][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 15:04:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x10000, 0x4, 0xfffffff7, 0x400}, 0x10) setsockopt(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet6(r0, &(0x7f0000000000), 0xcfd0, 0xfec00000, 0x0, 0x4d97) [ 225.125873][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.133033][ T8822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.149579][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.167621][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.206804][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.232963][ C0] hrtimer: interrupt took 35735 ns [ 225.237941][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.274996][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.282165][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state 15:04:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 225.324116][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.411813][ T8871] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.434791][ T8818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 15:04:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x10000, 0x4, 0xfffffff7, 0x400}, 0x10) setsockopt(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet6(r0, &(0x7f0000000000), 0xcfd0, 0xfec00000, 0x0, 0x4d97) [ 225.460610][ T8818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.475065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.489044][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.505606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.518879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.538842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.549173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.563795][ T8880] ptrace attach of "/root/syz-executor.0"[8844] was attempted by "/root/syz-executor.0"[8880] [ 225.580622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.591512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.608080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.617689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.632874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 15:04:46 executing program 1: 15:04:46 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x101000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)) 15:04:46 executing program 3: [ 225.973348][ T8818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.040208][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.047684][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 15:04:46 executing program 4: 15:04:46 executing program 5: 15:04:46 executing program 0: 15:04:46 executing program 3: 15:04:46 executing program 1: 15:04:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x10000, 0x4, 0xfffffff7, 0x400}, 0x10) setsockopt(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet6(r0, &(0x7f0000000000), 0xcfd0, 0xfec00000, 0x0, 0x4d97) 15:04:46 executing program 4: 15:04:46 executing program 4: 15:04:46 executing program 3: 15:04:46 executing program 0: 15:04:46 executing program 1: 15:04:47 executing program 5: 15:04:47 executing program 4: 15:04:47 executing program 3: 15:04:47 executing program 1: 15:04:47 executing program 0: 15:04:47 executing program 1: 15:04:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x10000, 0x4, 0xfffffff7, 0x400}, 0x10) setsockopt(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet6(r0, &(0x7f0000000000), 0xcfd0, 0xfec00000, 0x0, 0x4d97) 15:04:47 executing program 3: 15:04:47 executing program 4: 15:04:47 executing program 5: 15:04:47 executing program 1: 15:04:47 executing program 0: 15:04:47 executing program 3: 15:04:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x4000200) 15:04:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x24, &(0x7f0000000300)={{{@in6=@empty, @in=@remote}}, {{@in6=@mcast2}}}, 0xe8) 15:04:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r4, r0, 0x0, 0x9) sendfile(r0, r4, &(0x7f0000000180), 0x80000000003ff) 15:04:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:04:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x34e, 0x0, 0x0}, 0xfffffd1f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) [ 228.065503][ T8959] syz-executor.4 (8959): /proc/8959/oom_adj is deprecated, please use /proc/8959/oom_score_adj instead. 15:04:48 executing program 2: 15:04:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:04:48 executing program 4: 15:04:48 executing program 1: 15:04:48 executing program 1: 15:04:48 executing program 4: 15:04:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:04:48 executing program 5: 15:04:48 executing program 2: 15:04:48 executing program 1: 15:04:49 executing program 4: 15:04:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x34e, 0x0, 0x0}, 0xfffffd1f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) 15:04:49 executing program 5: 15:04:49 executing program 2: 15:04:49 executing program 3: 15:04:49 executing program 1: 15:04:49 executing program 4: 15:04:49 executing program 5: 15:04:49 executing program 2: 15:04:49 executing program 4: 15:04:49 executing program 1: 15:04:49 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) 15:04:49 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r0, 0x95ca5000) 15:04:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\t', 0x2) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 15:04:49 executing program 1: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/231) 15:04:49 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6000, 0x8, &(0x7f0000000100)) 15:04:49 executing program 2: 15:04:49 executing program 3: 15:04:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='[keyring\x00') 15:04:50 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18") 15:04:50 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x2000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 15:04:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d06000)=0x1, 0x4) 15:04:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @remote, 0x0, 0x0, 'none\x00'}, 0x2c) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) 15:04:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@remote, @dev={[], 0x17}, [], {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "318ac379b97e41f3914cd0983648624f81a427fa39afd3592b4244bae4a773d5c9bf8498d6927ed871a81ebeb4640022ddfe074e820a3f5a625b98bcb255b547"}}}}, 0x0) syz_genetlink_get_family_id$nbd(0x0) 15:04:50 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 15:04:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='[keyring\x00') 15:04:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 15:04:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='[keyring\x00') 15:04:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 15:04:50 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDDELIO(r0, 0x4b35, 0x0) 15:04:50 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x2000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 15:04:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x2, 0x4e20, 0x8}}}}}}, 0x0) 15:04:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080), 0x4) 15:04:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='[keyring\x00') 15:04:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:04:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000d06000)=0x1, 0x4) 15:04:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='[keyring\x00') 15:04:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080), 0x4) 15:04:51 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 15:04:51 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 15:04:51 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x2000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 231.385358][ T9127] ================================================================== [ 231.393673][ T9127] BUG: KASAN: use-after-free in snd_timer_close_locked+0xb5f/0xbd0 [ 231.401579][ T9127] Read of size 8 at addr ffff8880a8eb6878 by task syz-executor.2/9127 [ 231.409730][ T9127] [ 231.412079][ T9127] CPU: 0 PID: 9127 Comm: syz-executor.2 Not tainted 5.4.0-rc6-next-20191111 #0 [ 231.421010][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.431071][ T9127] Call Trace: 15:04:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x3000, 0x4e20, 0x8}}}}}}, 0x0) [ 231.434372][ T9127] dump_stack+0x197/0x210 [ 231.438731][ T9127] ? snd_timer_close_locked+0xb5f/0xbd0 [ 231.444302][ T9127] print_address_description.constprop.0.cold+0xd4/0x30b [ 231.451340][ T9127] ? snd_timer_close_locked+0xb5f/0xbd0 [ 231.456901][ T9127] ? snd_timer_close_locked+0xb5f/0xbd0 [ 231.462463][ T9127] __kasan_report.cold+0x1b/0x41 [ 231.462491][ T9127] ? snd_timer_close_locked+0xb5f/0xbd0 [ 231.462507][ T9127] kasan_report+0x12/0x20 [ 231.462521][ T9127] __asan_report_load8_noabort+0x14/0x20 [ 231.462534][ T9127] snd_timer_close_locked+0xb5f/0xbd0 [ 231.462558][ T9127] snd_timer_close+0x88/0xf0 [ 231.462570][ T9127] ? snd_timer_open+0x1150/0x1150 [ 231.462583][ T9127] ? __kasan_check_read+0x11/0x20 [ 231.493028][ T9127] snd_seq_timer_close+0x91/0xe0 [ 231.493045][ T9127] queue_delete+0x52/0xb0 [ 231.493059][ T9127] snd_seq_queue_delete+0x4e/0x70 [ 231.493078][ T9127] snd_seq_ioctl_delete_queue+0x6a/0x90 [ 231.493096][ T9127] snd_seq_kernel_client_ctl+0xf8/0x140 [ 231.493113][ T9127] delete_seq_queue.part.0+0xb6/0x120 [ 231.493127][ T9127] ? receive_announce+0x150/0x150 [ 231.493163][ T9127] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 231.493180][ T9127] snd_seq_oss_release+0x116/0x150 [ 231.493197][ T9127] odev_release+0x54/0x80 [ 231.554102][ T9127] __fput+0x2ff/0x890 [ 231.558109][ T9127] ? snd_seq_info_done+0x30/0x30 [ 231.563073][ T9127] ____fput+0x16/0x20 [ 231.567067][ T9127] task_work_run+0x145/0x1c0 [ 231.571678][ T9127] exit_to_usermode_loop+0x316/0x380 [ 231.576974][ T9127] do_syscall_64+0x65f/0x760 [ 231.581578][ T9127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.587478][ T9127] RIP: 0033:0x413db1 [ 231.591377][ T9127] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 231.610991][ T9127] RSP: 002b:00007ffdfb1bc8d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 231.619411][ T9127] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413db1 [ 231.627394][ T9127] RDX: 0000001b32520000 RSI: 0000000000000000 RDI: 0000000000000003 [ 231.635375][ T9127] RBP: 0000000000000001 R08: 00000000ca6eb3e2 R09: 00000000ca6eb3e6 [ 231.643357][ T9127] R10: 00007ffdfb1bc9b0 R11: 0000000000000293 R12: 000000000075bf20 [ 231.651332][ T9127] R13: 00000000000387ad R14: 0000000000760780 R15: 000000000075bf2c [ 231.651356][ T9127] [ 231.651363][ T9127] Allocated by task 9136: [ 231.651380][ T9127] save_stack+0x23/0x90 [ 231.651393][ T9127] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 231.651403][ T9127] kasan_kmalloc+0x9/0x10 [ 231.651415][ T9127] kmem_cache_alloc_trace+0x158/0x790 [ 231.651430][ T9127] snd_timer_instance_new+0x4a/0x300 [ 231.651444][ T9127] __snd_timer_user_ioctl.isra.0+0x665/0x2070 [ 231.651456][ T9127] snd_timer_user_ioctl+0x7a/0xa7 [ 231.651473][ T9127] do_vfs_ioctl+0x977/0x14e0 [ 231.670223][ T9127] ksys_ioctl+0xab/0xd0 [ 231.670236][ T9127] __x64_sys_ioctl+0x73/0xb0 [ 231.670252][ T9127] do_syscall_64+0xfa/0x760 [ 231.670268][ T9127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.670272][ T9127] [ 231.670279][ T9127] Freed by task 9136: [ 231.670290][ T9127] save_stack+0x23/0x90 15:04:51 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) signalfd(r0, 0x0, 0x0) 15:04:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000d06000), 0x4) [ 231.670301][ T9127] __kasan_slab_free+0x102/0x150 [ 231.670313][ T9127] kasan_slab_free+0xe/0x10 [ 231.670323][ T9127] kfree+0x10a/0x2c0 [ 231.670337][ T9127] snd_timer_instance_free+0x7c/0xa0 [ 231.670350][ T9127] __snd_timer_user_ioctl.isra.0+0x160d/0x2070 [ 231.670361][ T9127] snd_timer_user_ioctl+0x7a/0xa7 [ 231.670375][ T9127] do_vfs_ioctl+0x977/0x14e0 [ 231.696987][ T9127] ksys_ioctl+0xab/0xd0 [ 231.697000][ T9127] __x64_sys_ioctl+0x73/0xb0 [ 231.697015][ T9127] do_syscall_64+0xfa/0x760 [ 231.697033][ T9127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.715322][ T9127] [ 231.715336][ T9127] The buggy address belongs to the object at ffff8880a8eb6800 [ 231.715336][ T9127] which belongs to the cache kmalloc-256 of size 256 [ 231.715347][ T9127] The buggy address is located 120 bytes inside of [ 231.715347][ T9127] 256-byte region [ffff8880a8eb6800, ffff8880a8eb6900) [ 231.715357][ T9127] The buggy address belongs to the page: [ 231.824759][ T9127] page:ffffea0002a3ad80 refcount:1 mapcount:0 mapping:ffff8880aa4008c0 index:0x0 [ 231.833848][ T9127] flags: 0x1fffc0000000200(slab) [ 231.838769][ T9127] raw: 01fffc0000000200 ffffea00029d71c8 ffffea0002a58288 ffff8880aa4008c0 [ 231.847339][ T9127] raw: 0000000000000000 ffff8880a8eb6000 0000000100000008 0000000000000000 [ 231.855916][ T9127] page dumped because: kasan: bad access detected [ 231.862303][ T9127] [ 231.864608][ T9127] Memory state around the buggy address: [ 231.870220][ T9127] ffff8880a8eb6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 231.878262][ T9127] ffff8880a8eb6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 231.886305][ T9127] >ffff8880a8eb6800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.894342][ T9127] ^ [ 231.902296][ T9127] ffff8880a8eb6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.910338][ T9127] ffff8880a8eb6900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 231.918375][ T9127] ================================================================== [ 231.926416][ T9127] Disabling lock debugging due to kernel taint [ 231.932545][ T9127] Kernel panic - not syncing: panic_on_warn set ... [ 231.939113][ T9127] CPU: 0 PID: 9127 Comm: syz-executor.2 Tainted: G B 5.4.0-rc6-next-20191111 #0 [ 231.949407][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.959440][ T9127] Call Trace: [ 231.962713][ T9127] dump_stack+0x197/0x210 [ 231.967032][ T9127] panic+0x2e3/0x75c [ 231.970905][ T9127] ? add_taint.cold+0x16/0x16 [ 231.975565][ T9127] ? snd_timer_close_locked+0xb5f/0xbd0 [ 231.981092][ T9127] ? trace_hardirqs_off+0x62/0x240 [ 231.986182][ T9127] ? trace_hardirqs_off+0x59/0x240 [ 231.991285][ T9127] ? snd_timer_close_locked+0xb5f/0xbd0 [ 231.996811][ T9127] end_report+0x47/0x4f [ 232.000946][ T9127] ? snd_timer_close_locked+0xb5f/0xbd0 [ 232.006471][ T9127] __kasan_report.cold+0xe/0x41 [ 232.011303][ T9127] ? snd_timer_close_locked+0xb5f/0xbd0 [ 232.016827][ T9127] kasan_report+0x12/0x20 [ 232.021138][ T9127] __asan_report_load8_noabort+0x14/0x20 [ 232.026748][ T9127] snd_timer_close_locked+0xb5f/0xbd0 [ 232.032114][ T9127] snd_timer_close+0x88/0xf0 [ 232.036684][ T9127] ? snd_timer_open+0x1150/0x1150 [ 232.041689][ T9127] ? __kasan_check_read+0x11/0x20 [ 232.046696][ T9127] snd_seq_timer_close+0x91/0xe0 [ 232.051612][ T9127] queue_delete+0x52/0xb0 [ 232.055934][ T9127] snd_seq_queue_delete+0x4e/0x70 [ 232.060944][ T9127] snd_seq_ioctl_delete_queue+0x6a/0x90 [ 232.066470][ T9127] snd_seq_kernel_client_ctl+0xf8/0x140 [ 232.071994][ T9127] delete_seq_queue.part.0+0xb6/0x120 [ 232.077343][ T9127] ? receive_announce+0x150/0x150 [ 232.082355][ T9127] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 232.088057][ T9127] snd_seq_oss_release+0x116/0x150 [ 232.093149][ T9127] odev_release+0x54/0x80 [ 232.097490][ T9127] __fput+0x2ff/0x890 [ 232.101480][ T9127] ? snd_seq_info_done+0x30/0x30 [ 232.106407][ T9127] ____fput+0x16/0x20 [ 232.110380][ T9127] task_work_run+0x145/0x1c0 [ 232.114967][ T9127] exit_to_usermode_loop+0x316/0x380 [ 232.120239][ T9127] do_syscall_64+0x65f/0x760 [ 232.124813][ T9127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.130684][ T9127] RIP: 0033:0x413db1 [ 232.134560][ T9127] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 232.154141][ T9127] RSP: 002b:00007ffdfb1bc8d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 232.162531][ T9127] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413db1 [ 232.170480][ T9127] RDX: 0000001b32520000 RSI: 0000000000000000 RDI: 0000000000000003 [ 232.178429][ T9127] RBP: 0000000000000001 R08: 00000000ca6eb3e2 R09: 00000000ca6eb3e6 [ 232.186379][ T9127] R10: 00007ffdfb1bc9b0 R11: 0000000000000293 R12: 000000000075bf20 [ 232.194329][ T9127] R13: 00000000000387ad R14: 0000000000760780 R15: 000000000075bf2c [ 232.203646][ T9127] Kernel Offset: disabled [ 232.208011][ T9127] Rebooting in 86400 seconds..