Warning: Permanently added '10.128.0.206' (ECDSA) to the list of known hosts. 2019/12/05 22:26:15 fuzzer started 2019/12/05 22:26:17 dialing manager at 10.128.0.105:33795 2019/12/05 22:26:17 syscalls: 2684 2019/12/05 22:26:17 code coverage: enabled 2019/12/05 22:26:17 comparison tracing: enabled 2019/12/05 22:26:17 extra coverage: extra coverage is not supported by the kernel 2019/12/05 22:26:17 setuid sandbox: enabled 2019/12/05 22:26:17 namespace sandbox: enabled 2019/12/05 22:26:17 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/05 22:26:17 fault injection: enabled 2019/12/05 22:26:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/05 22:26:17 net packet injection: enabled 2019/12/05 22:26:17 net device setup: enabled 2019/12/05 22:26:17 concurrency sanitizer: enabled 2019/12/05 22:26:17 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 59.784311][ T7658] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/05 22:26:29 adding functions to KCSAN blacklist: 'xas_clear_mark' 'mod_timer' 'copy_process' 'pid_update_inode' '__lru_cache_add' '__fput' 'ext4_mb_good_group' 'ext4_da_write_end' 'taskstats_exit' 'blk_mq_run_hw_queue' 'common_perm_cond' 'find_get_pages_range_tag' 'add_timer' 'ep_poll' 'ext4_nonda_switch' 'poll_schedule_timeout' 'kauditd_thread' 'fasync_remove_entry' 'tick_sched_do_timer' 'timer_clear_idle' 'ext4_mark_iloc_dirty' '__hrtimer_run_queues' 'tick_do_update_jiffies64' 'blk_mq_sched_dispatch_requests' 'run_timer_softirq' 'wbt_done' 'do_signal_stop' 'rcu_gp_fqs_loop' 'ktime_get_seconds' 'rcu_gp_fqs_check_wake' '__rb_rotate_set_parents' 'audit_log_start' 'sit_tunnel_xmit' 'blk_mq_free_request' 'mm_update_next_owner' 'list_lru_count_one' 'tick_nohz_idle_stop_tick' 'wbt_issue' 'vm_area_dup' 'process_srcu' 'pipe_poll' 'do_syslog' 'attach_to_pi_owner' 'blk_stat_add' 'ktime_get_real_seconds' '__find_get_block' 'dd_has_work' 'xas_find_marked' 'echo_char' '__mark_inode_dirty' 'do_fcntl' 'futex_wait_queue_me' 'p9_poll_workfn' 'tomoyo_supervisor' 'do_nanosleep' 'generic_write_end' 'generic_fillattr' 'percpu_counter_add_batch' 'commit_echoes' 'queue_access_lock' 'blk_mq_get_request' 'ext4_has_free_clusters' 'blk_mq_dispatch_rq_list' 'n_tty_receive_buf_common' '__perf_event_overflow' '__add_to_page_cache_locked' 'find_next_bit' 'pcpu_alloc' 'page_counter_try_charge' 'do_exit' 'relay_switch_subbuf' 'page_counter_charge' '__snd_rawmidi_transmit_ack' 'lruvec_lru_size' 'exit_signals' 'pipe_wait' 'generic_file_read_iter' 'tcp_add_backlog' '__ext4_new_inode' 'ext4_free_inode' '__tty_hangup' 'ext4_free_inodes_count' 'mem_cgroup_select_victim_node' 'dput' 'bio_endio' 22:30:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x8090ae81, &(0x7f0000000000)) 22:30:08 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0xb, r2, r1, 0x0) [ 288.567917][ T7662] IPVS: ftp: loaded support on port[0] = 21 [ 288.656632][ T7662] chnl_net:caif_netlink_parms(): no params data found [ 288.717755][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.740465][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.748223][ T7662] device bridge_slave_0 entered promiscuous mode [ 288.762303][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.769525][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.777771][ T7662] device bridge_slave_1 entered promiscuous mode [ 288.790601][ T7665] IPVS: ftp: loaded support on port[0] = 21 22:30:08 executing program 2: r0 = socket(0x11, 0x0, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, 0x0}]) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0xe8dd}}) dup2(0xffffffffffffffff, r3) [ 288.812453][ T7662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.833427][ T7662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.873138][ T7662] team0: Port device team_slave_0 added [ 288.886506][ T7662] team0: Port device team_slave_1 added 22:30:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) [ 289.093628][ T7662] device hsr_slave_0 entered promiscuous mode [ 289.140653][ T7662] device hsr_slave_1 entered promiscuous mode [ 289.223260][ T7670] IPVS: ftp: loaded support on port[0] = 21 [ 289.233907][ T7668] IPVS: ftp: loaded support on port[0] = 21 [ 289.238531][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 289.282918][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.290010][ T7662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.297316][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.304373][ T7662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.440258][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.456955][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.465502][ T7665] device bridge_slave_0 entered promiscuous mode [ 289.501370][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.508458][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.541578][ T7665] device bridge_slave_1 entered promiscuous mode [ 289.550771][ T7662] 8021q: adding VLAN 0 to HW filter on device bond0 22:30:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4620, @multicast2}, 0x10) [ 289.632249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.652796][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.732318][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.745769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 289.822618][ T7668] chnl_net:caif_netlink_parms(): no params data found [ 289.862643][ T7662] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.872945][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.885840][ T7670] chnl_net:caif_netlink_parms(): no params data found [ 289.952420][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.981318][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.990108][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.022754][ T2614] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.029911][ T2614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.082237][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.102504][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.131593][ T2614] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.138671][ T2614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.181968][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.212046][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.242974][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.271856][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.302434][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.331694][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.388075][ T7662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.389371][ T7699] IPVS: ftp: loaded support on port[0] = 21 [ 290.430403][ T7662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 22:30:10 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x81204101, 0x0) [ 290.487557][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.499028][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.515518][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.551318][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.578625][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.614009][ T7665] team0: Port device team_slave_0 added [ 290.628370][ T7662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.677668][ T7665] team0: Port device team_slave_1 added [ 290.684511][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.697823][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.713751][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.737002][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.745071][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.762771][ T7668] device bridge_slave_0 entered promiscuous mode [ 290.779047][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.786158][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.795125][ T7670] device bridge_slave_0 entered promiscuous mode [ 290.805141][ T7670] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.814048][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.821908][ T7670] device bridge_slave_1 entered promiscuous mode [ 290.834101][ T7709] IPVS: ftp: loaded support on port[0] = 21 [ 290.841386][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.848471][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.858381][ T7668] device bridge_slave_1 entered promiscuous mode [ 290.932899][ T7665] device hsr_slave_0 entered promiscuous mode [ 290.980685][ T7665] device hsr_slave_1 entered promiscuous mode [ 291.030498][ T7665] debugfs: Directory 'hsr0' with parent '/' already present! [ 291.057974][ T7668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.079572][ T7668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.101333][ T7670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.112643][ T7668] team0: Port device team_slave_0 added [ 291.137012][ T7670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.163596][ T7668] team0: Port device team_slave_1 added [ 291.207874][ T7719] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 291.292766][ T7668] device hsr_slave_0 entered promiscuous mode [ 291.320829][ T7668] device hsr_slave_1 entered promiscuous mode [ 291.360520][ T7668] debugfs: Directory 'hsr0' with parent '/' already present! [ 291.372087][ T7670] team0: Port device team_slave_0 added [ 291.445916][ T7670] team0: Port device team_slave_1 added [ 291.503917][ T7699] chnl_net:caif_netlink_parms(): no params data found [ 291.553180][ T7670] device hsr_slave_0 entered promiscuous mode [ 291.630853][ T7670] device hsr_slave_1 entered promiscuous mode [ 291.690489][ T7670] debugfs: Directory 'hsr0' with parent '/' already present! [ 291.739623][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 291.805563][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.936784][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.005159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.014255][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.108291][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.116332][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.201415][ T7699] device bridge_slave_0 entered promiscuous mode [ 292.320083][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.360909][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.369154][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.376229][ T7749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.525848][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.591047][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.663425][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.670538][ T7749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.769461][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.821423][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.891319][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.961286][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.041200][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.048276][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.096706][ T7699] device bridge_slave_1 entered promiscuous mode [ 293.150732][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.157793][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.196091][ T7709] device bridge_slave_0 entered promiscuous mode [ 293.248794][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.261348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.309908][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.360333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.392310][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.431529][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.474402][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.521230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.568570][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.581058][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.588431][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.629354][ T7709] device bridge_slave_1 entered promiscuous mode 22:30:13 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="580000000000000014a4386ad788ae2a00000300000000000000000000000000000000000000000000000000000000000000000000000000000000001c00"/88], 0x58}, 0x0) [ 293.691913][ T7668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.710990][ T7699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.727692][ T7709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.882044][ T7709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.956617][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.016969][ T7668] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.077998][ T7699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.221319][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.228811][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.290587][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.298322][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.407666][ T7670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.474094][ T7699] team0: Port device team_slave_0 added [ 294.520895][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.554890][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 22:30:14 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) recvmmsg(0xffffffffffffffff, &(0x7f000000a800)=[{{0x0, 0x0, &(0x7f0000005d80)=[{0x0}, {&(0x7f00000058c0)=""/121, 0x79}], 0x2}}], 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x281, &(0x7f0000003bc0)}}], 0x3a6, 0x0) [ 294.621824][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.628898][ T7749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.753977][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.814132][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.864352][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.871477][ T7749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.972029][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.034055][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.069195][ T7670] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.093938][ T7709] team0: Port device team_slave_0 added [ 295.100275][ T7699] team0: Port device team_slave_1 added [ 295.110947][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.140952][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.148711][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.203813][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.243009][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.281957][ T7709] team0: Port device team_slave_1 added [ 295.341001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.349175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 22:30:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40bc5311, &(0x7f0000000240)={{0x80}, 'port0\x00'}) [ 295.383683][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.415060][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.457376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.493781][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.500949][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 22:30:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="640f01c366b8ad008ed00f08c4417b2c020f3548b800000100000000000f23c00f21f835010008000f23f80fc778fc0f350fd8060f30", 0x36}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1000080002, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 295.540126][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.548926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.560880][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.576889][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.589398][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.596474][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.624452][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.633292][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.642396][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.650885][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.659501][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.668040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.676611][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.684917][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.693828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.702004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 22:30:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000340)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r0}) [ 295.773542][ T7699] device hsr_slave_0 entered promiscuous mode [ 295.820687][ T7699] device hsr_slave_1 entered promiscuous mode 22:30:15 executing program 1: open$dir(0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x0, 0x0) ppoll(&(0x7f0000000440)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 295.870540][ T7699] debugfs: Directory 'hsr0' with parent '/' already present! [ 295.887362][ T7670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.911845][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.923996][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.945899][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.955167][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.972076][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.002583][ T7709] device hsr_slave_0 entered promiscuous mode [ 296.060947][ T7709] device hsr_slave_1 entered promiscuous mode [ 296.100471][ T7709] debugfs: Directory 'hsr0' with parent '/' already present! [ 296.163390][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.186193][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:30:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) [ 296.206788][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.229027][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.278902][ T7670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.348190][ T7668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.434590][ T7699] 8021q: adding VLAN 0 to HW filter on device bond0 22:30:16 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010000000000000002", @ANYRES32, @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYBLOB], 0xb, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000280)={0x0}) [ 296.567924][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.604394][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.672994][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.726370][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.841687][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.870610][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.878971][ T2614] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.886053][ T2614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.047498][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.089308][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.133829][ T2614] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.140962][ T2614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.215252][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.266569][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.317416][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.364615][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.428287][ T7699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.488329][ T7699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.547753][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.576516][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.597530][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.638002][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.682641][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.727380][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.783006][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.824595][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.866465][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.916532][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.966139][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.025627][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.106232][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.157481][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 22:30:18 executing program 2: r0 = socket(0x11, 0x0, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, 0x0}]) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0xe8dd}}) dup2(0xffffffffffffffff, r3) [ 298.204729][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.211867][ T7678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.319278][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.359892][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 22:30:18 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x0, 0x0) ppoll(&(0x7f0000000440)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 298.432243][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.439493][ T7678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.526309][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.586501][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.624828][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.704078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.733541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.793298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.844171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.896561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.948297][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.000258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.026804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.061431][ T7709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.104080][ T7709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.134751][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.152807][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.164409][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.198887][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.244599][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.256810][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.278197][ T7709] 8021q: adding VLAN 0 to HW filter on device batadv0 22:30:19 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ppoll(&(0x7f0000000440)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 22:30:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close(r0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006d00), 0x400034b, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) getgid() accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000006d00), 0x400034b, 0x0) socket(0x0, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) 22:30:19 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010000000000000002", @ANYRES32, @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYBLOB], 0xb, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000280)={0x0}) 22:30:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x20000000001, 0x1) recvmmsg(r0, &(0x7f0000006cc0), 0xffffffffffffff5d, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75b782e4ad88b89d1fc31916080000000788ccfc7f660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a", 0x1}, 0x60) 22:30:19 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') preadv(r0, &(0x7f00000017c0), 0x179, 0x0) 22:30:19 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x704, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7ffc673bc09ec4e5", @ANYRES32=0x0, @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000600", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xf, r8, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000280)={0x0}) 22:30:19 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010000000000000002", @ANYRES32, @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="08000600", @ANYBLOB="080001", @ANYRES32, @ANYBLOB], 0xb, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000280)={0x0}) [ 299.606294][ C0] hrtimer: interrupt took 20855 ns 22:30:19 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ppoll(&(0x7f0000000440)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 22:30:19 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x704, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7ffc673bc09ec4e5", @ANYRES32=0x0, @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000600", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xf, r8, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000280)={0x0}) 22:30:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x20000000001, 0x1) recvmmsg(r0, &(0x7f0000006cc0), 0xffffffffffffff5d, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75b782e4ad88b89d1fc31916080000000788ccfc7f660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a", 0x1}, 0x60) 22:30:19 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x704, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7ffc673bc09ec4e5", @ANYRES32=0x0, @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000600", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xf, r8, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000280)={0x0}) 22:30:19 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x704, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7ffc673bc09ec4e5", @ANYRES32=0x0, @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000600", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xf, r8, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000280)={0x0}) 22:30:19 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r2, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x704, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7ffc673bc09ec4e5", @ANYRES32=0x0, @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000600", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xf, r8, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000280)={0x0}) [ 299.630626][ T7981] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 22:30:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close(r0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006d00), 0x400034b, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) getgid() accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000006d00), 0x400034b, 0x0) socket(0x0, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) 22:30:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2000003}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f0014f9f407000904000200000500000000000500000800020000000000", 0x24) 22:30:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5601) 22:30:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) 22:30:20 executing program 4: socket$inet(0x10, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0), 0x8) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000006d00), 0x400034b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 22:30:20 executing program 1: pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0), 0x8) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000006d00), 0x400034b, 0x0) 22:30:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4020}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat)?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x0, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[]}, 0x78) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@gettfilter={0x48, 0x2e, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x18}, {0xfff1, 0xfff2}, {0x8, 0xf}}, [{0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x1, 0x0) 22:30:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xe3c, 0x0, 0x0, 0xfffffffffffffe5b) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x1004cc], 0x12000}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000340)=""/123, &(0x7f0000000000)=0x7b) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:30:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}, @tcp={{0x0, 0x0, 0x41424344, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 300.003775][ T8018] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 300.668813][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.750251][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.797044][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:30:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xe3c, 0x0, 0x0, 0xfffffffffffffe5b) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x1004cc], 0x12000}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000340)=""/123, &(0x7f0000000000)=0x7b) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 300.920966][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.947167][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.970745][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:30:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2000003}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f0014f9f407000904000211010500000000000000000800020000000000", 0x24) 22:30:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4020}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat)?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x0, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[]}, 0x78) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@gettfilter={0x48, 0x2e, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x18}, {0xfff1, 0xfff2}, {0x8, 0xf}}, [{0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 301.126344][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006d data 0x4d00000000f [ 301.186747][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0x4d00000000f [ 301.230971][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 301.285706][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000041 data 0x4d00000000f [ 301.293764][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.320986][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000f data 0x4d00000000f [ 301.344682][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.376143][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000079 data 0x4d00000000f [ 301.395556][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.423452][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000047 data 0x4d00000000f 22:30:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close(r0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006d00), 0x400034b, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) getgid() accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000006d00), 0x400034b, 0x0) socket(0x0, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) 22:30:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) [ 301.453002][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000015 data 0x4d00000000f [ 301.509808][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007f data 0x4d00000000f [ 301.537865][ T8074] kvm [8073]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f 22:30:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:30:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)) 22:30:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup2(r0, r0) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1010) 22:30:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000001040)}, 0x20) 22:30:21 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4cc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b, 0x0, 0x3}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4620}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$IOC_PR_RELEASE(r9, 0x401070ca, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x009&', @ANYRES16=r8, @ANYBLOB="68002cbd7000ffdbdf25030000000c0008000d0b0000000000000c00060001000000000000001c00070008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYBLOB="087cbca194cfa52baf2a741e861285835e865d3ba0fa5a064b71a9aedb8308b496f571967a0d9ef13b4973ee8e1d116c99940ca856a4f09c9bb9556c583d3a59939c65a3433bd6fa2b9c8700e8a2748c95b1fb9f44bf08cc74fc27f83b683c5b8a24d73f2b4e7ecfa7af3e383ab40158a6708f9af8d25252d9ebc196c9d5a2992f8a993e73ad891ab014dbd9891da0937d7cd43de6a38d4ff7", @ANYBLOB='@', @ANYRES32, @ANYBLOB="0c00030009000000000000000c0008000200000000000000"], 0x9}, 0x1, 0x0, 0x0, 0x40}, 0xc080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r8, @ANYBLOB="00012cbd7000fedbdf25020000000c00030000f0ffffff0700000c000500300000000000000008000100000000000c0004000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x400) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) ioctl$RTC_PLL_GET(r11, 0x80207011, &(0x7f0000000140)) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140)) r12 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000040)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r12, 0x4010ae68, &(0x7f0000000080)={0x6000, 0x4000}) 22:30:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x7, &(0x7f0000000300)={@rand_addr="eeb0e7d5e69ec80783e5f8029e4425ac"}, 0x20) 22:30:21 executing program 1: pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0), 0x8) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000006d00), 0x400034b, 0x0) 22:30:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:30:22 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000040)=0x7e9d) 22:30:22 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4cc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b, 0x0, 0x3}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4620}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$IOC_PR_RELEASE(r9, 0x401070ca, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x009&', @ANYRES16=r8, @ANYBLOB="68002cbd7000ffdbdf25030000000c0008000d0b0000000000000c00060001000000000000001c00070008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYBLOB="087cbca194cfa52baf2a741e861285835e865d3ba0fa5a064b71a9aedb8308b496f571967a0d9ef13b4973ee8e1d116c99940ca856a4f09c9bb9556c583d3a59939c65a3433bd6fa2b9c8700e8a2748c95b1fb9f44bf08cc74fc27f83b683c5b8a24d73f2b4e7ecfa7af3e383ab40158a6708f9af8d25252d9ebc196c9d5a2992f8a993e73ad891ab014dbd9891da0937d7cd43de6a38d4ff7", @ANYBLOB='@', @ANYRES32, @ANYBLOB="0c00030009000000000000000c0008000200000000000000"], 0x9}, 0x1, 0x0, 0x0, 0x40}, 0xc080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r8, @ANYBLOB="00012cbd7000fedbdf25020000000c00030000f0ffffff0700000c000500300000000000000008000100000000000c0004000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x400) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) ioctl$RTC_PLL_GET(r11, 0x80207011, &(0x7f0000000140)) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140)) r12 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000040)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r12, 0x4010ae68, &(0x7f0000000080)={0x6000, 0x4000}) 22:30:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close(r0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006d00), 0x400034b, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) getgid() accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000006d00), 0x400034b, 0x0) socket(0x0, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) 22:30:22 executing program 3: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8002, 0x0) 22:30:22 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) faccessat(r0, 0x0, 0x9, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000200)={@random="a9248e6e42e2", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x13}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x2, @dev}, '\x00\x00'}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:30:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@check_normal='check=normal'}, {@fat=@showexec='showexec'}]}) 22:30:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)) [ 302.713604][ T8145] FAT-fs (loop0): bogus number of reserved sectors 22:30:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) io_setup(0xa4, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="37eb52e7f2a13eb7", 0x8}]) [ 302.772626][ T8145] FAT-fs (loop0): Can't find a valid FAT filesystem 22:30:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 302.830398][ T8145] FAT-fs (loop0): bogus number of reserved sectors [ 302.837045][ T8145] FAT-fs (loop0): Can't find a valid FAT filesystem [ 302.867844][ T8150] ================================================================== [ 302.876006][ T8150] BUG: KCSAN: data-race in __dev_queue_xmit / __dev_queue_xmit [ 302.883542][ T8150] [ 302.885873][ T8150] read to 0xffff8880a4dda084 of 4 bytes by task 8158 on cpu 0: [ 302.893406][ T8150] __dev_queue_xmit+0xc9e/0x1b40 [ 302.898415][ T8150] dev_queue_xmit+0x21/0x30 [ 302.902906][ T8150] neigh_direct_output+0x1f/0x30 [ 302.907837][ T8150] ip6_finish_output2+0x7a2/0xec0 [ 302.913016][ T8150] __ip6_finish_output+0x2d7/0x330 [ 302.918114][ T8150] ip6_finish_output+0x41/0x160 [ 302.922961][ T8150] ip6_output+0xf2/0x280 [ 302.927194][ T8150] ip6_local_out+0x74/0x90 [ 302.931608][ T8150] ip6_send_skb+0x53/0x110 [ 302.936026][ T8150] udp_v6_send_skb.isra.0+0x3ec/0xa70 [ 302.941390][ T8150] udpv6_sendmsg+0x1906/0x1c20 [ 302.946139][ T8150] inet6_sendmsg+0x6d/0x90 [ 302.950542][ T8150] sock_sendmsg+0x9f/0xc0 [ 302.954853][ T8150] ___sys_sendmsg+0x2b7/0x5d0 [ 302.959521][ T8150] __sys_sendmmsg+0x123/0x350 [ 302.964178][ T8150] __x64_sys_sendmmsg+0x64/0x80 [ 302.969058][ T8150] do_syscall_64+0xcc/0x370 [ 302.973585][ T8150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 302.979448][ T8150] [ 302.981762][ T8150] write to 0xffff8880a4dda084 of 4 bytes by task 8150 on cpu 1: [ 302.989383][ T8150] __dev_queue_xmit+0x1648/0x1b40 [ 302.994409][ T8150] dev_queue_xmit+0x21/0x30 [ 302.998904][ T8150] neigh_direct_output+0x1f/0x30 [ 303.003821][ T8150] ip6_finish_output2+0x7a2/0xec0 [ 303.008835][ T8150] __ip6_finish_output+0x2d7/0x330 [ 303.013925][ T8150] ip6_finish_output+0x41/0x160 [ 303.018765][ T8150] ip6_output+0xf2/0x280 [ 303.023007][ T8150] ip6_local_out+0x74/0x90 [ 303.027406][ T8150] ip6_send_skb+0x53/0x110 [ 303.031804][ T8150] udp_v6_send_skb.isra.0+0x3ec/0xa70 [ 303.037166][ T8150] udpv6_sendmsg+0x1906/0x1c20 [ 303.041909][ T8150] inet6_sendmsg+0x6d/0x90 [ 303.046319][ T8150] sock_sendmsg+0x9f/0xc0 [ 303.050633][ T8150] ___sys_sendmsg+0x2b7/0x5d0 [ 303.055293][ T8150] __sys_sendmmsg+0x123/0x350 [ 303.059947][ T8150] __x64_sys_sendmmsg+0x64/0x80 [ 303.064788][ T8150] do_syscall_64+0xcc/0x370 [ 303.069270][ T8150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 303.075132][ T8150] [ 303.077449][ T8150] Reported by Kernel Concurrency Sanitizer on: [ 303.083601][ T8150] CPU: 1 PID: 8150 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 303.091823][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.101869][ T8150] ================================================================== [ 303.109910][ T8150] Kernel panic - not syncing: panic_on_warn set ... [ 303.116480][ T8150] CPU: 1 PID: 8150 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 303.124689][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.134724][ T8150] Call Trace: [ 303.137998][ T8150] dump_stack+0x11d/0x181 [ 303.142325][ T8150] panic+0x210/0x640 [ 303.146318][ T8150] ? vprintk_func+0x8d/0x140 [ 303.151569][ T8150] kcsan_report.cold+0xc/0xd [ 303.156173][ T8150] kcsan_setup_watchpoint+0x3fe/0x460 [ 303.161549][ T8150] __tsan_unaligned_write4+0xc4/0x100 [ 303.166910][ T8150] __dev_queue_xmit+0x1648/0x1b40 [ 303.171927][ T8150] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 303.178157][ T8150] dev_queue_xmit+0x21/0x30 [ 303.182647][ T8150] neigh_direct_output+0x1f/0x30 [ 303.187597][ T8150] ip6_finish_output2+0x7a2/0xec0 [ 303.192618][ T8150] ? __rcu_read_unlock+0x66/0x3c0 [ 303.197652][ T8150] __ip6_finish_output+0x2d7/0x330 [ 303.202755][ T8150] ip6_finish_output+0x41/0x160 [ 303.207617][ T8150] ip6_output+0xf2/0x280 [ 303.211849][ T8150] ? __ip6_finish_output+0x330/0x330 [ 303.217171][ T8150] ip6_local_out+0x74/0x90 [ 303.221581][ T8150] ip6_send_skb+0x53/0x110 [ 303.225989][ T8150] udp_v6_send_skb.isra.0+0x3ec/0xa70 [ 303.231353][ T8150] udpv6_sendmsg+0x1906/0x1c20 [ 303.236164][ T8150] ? ip_reply_glue_bits+0xb0/0xb0 [ 303.241187][ T8150] ? __perf_event_task_sched_out+0x14d/0xaa0 [ 303.247250][ T8150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.253510][ T8150] inet6_sendmsg+0x6d/0x90 [ 303.257922][ T8150] ? inet6_sendmsg+0x6d/0x90 [ 303.262501][ T8150] ? inet6_ioctl+0x140/0x140 [ 303.267142][ T8150] sock_sendmsg+0x9f/0xc0 [ 303.271552][ T8150] ___sys_sendmsg+0x2b7/0x5d0 [ 303.276225][ T8150] ? __rcu_read_unlock+0x66/0x3c0 [ 303.281260][ T8150] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 303.287200][ T8150] ? __fget+0xb8/0x1d0 [ 303.291261][ T8150] ? __fget_light+0xaf/0x190 [ 303.295853][ T8150] ? __fdget+0x2c/0x40 [ 303.299908][ T8150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 303.306192][ T8150] __sys_sendmmsg+0x123/0x350 [ 303.310880][ T8150] ? __read_once_size+0x5a/0xe0 [ 303.315907][ T8150] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 303.321629][ T8150] ? _copy_to_user+0x84/0xb0 [ 303.326219][ T8150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 303.332563][ T8150] ? put_timespec64+0x94/0xc0 [ 303.337269][ T8150] __x64_sys_sendmmsg+0x64/0x80 [ 303.342122][ T8150] do_syscall_64+0xcc/0x370 [ 303.346635][ T8150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 303.352513][ T8150] RIP: 0033:0x45a679 [ 303.356404][ T8150] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.376199][ T8150] RSP: 002b:00007fa7a73c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 303.384637][ T8150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 303.392612][ T8150] RDX: 000000000400034b RSI: 0000000020006d00 RDI: 0000000000000004 [ 303.400592][ T8150] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 303.408570][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7a73c96d4 [ 303.416544][ T8150] R13: 00000000004c8f42 R14: 00000000004e0ab0 R15: 00000000ffffffff [ 303.426088][ T8150] Kernel Offset: disabled [ 303.430420][ T8150] Rebooting in 86400 seconds..