[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   34.423864][   T25] audit: type=1800 audit(1570247000.380:25): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   34.463859][   T25] audit: type=1800 audit(1570247000.380:26): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   34.485826][   T25] audit: type=1800 audit(1570247000.380:27): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts.
2019/10/05 03:43:32 fuzzer started
2019/10/05 03:43:33 dialing manager at 10.128.0.105:35709
2019/10/05 03:43:33 syscalls: 2523
2019/10/05 03:43:33 code coverage: enabled
2019/10/05 03:43:33 comparison tracing: enabled
2019/10/05 03:43:33 extra coverage: extra coverage is not supported by the kernel
2019/10/05 03:43:33 setuid sandbox: enabled
2019/10/05 03:43:33 namespace sandbox: enabled
2019/10/05 03:43:33 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/05 03:43:33 fault injection: enabled
2019/10/05 03:43:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/05 03:43:33 net packet injection: enabled
2019/10/05 03:43:33 net device setup: enabled
2019/10/05 03:43:33 concurrency sanitizer: enabled
03:43:36 executing program 0:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x40002)
ioctl$int_in(r0, 0x80006000005008, 0x0)

syzkaller login: [   50.838739][ T7261] IPVS: ftp: loaded support on port[0] = 21
03:43:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636271001804020010000500010000000000000005000000040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000605bd90aeb5bcfa76d709ae974bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000774900"/1084], 0x444}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xffffffffffffffc7, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x66, 0x30479e840602a76b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x28}}, 0x0)

[   50.921397][ T7261] chnl_net:caif_netlink_parms(): no params data found
[   50.966940][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.988143][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.003173][ T7261] device bridge_slave_0 entered promiscuous mode
[   51.031328][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.038433][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.046343][ T7261] device bridge_slave_1 entered promiscuous mode
[   51.093827][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.121693][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.163907][ T7261] team0: Port device team_slave_0 added
[   51.171668][ T7261] team0: Port device team_slave_1 added
03:43:37 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="530841549d6f3017276cbdd605b5868ed3df235614cd5ecf6c7ded0566c0784dc7a2372ac9d6c4818e9ea3e1719b3301a55cd9f2ec6c61e8d43b6f7a68bf22cc4c77beab52b2fa77afb37876df743482568ff1e69166f35d6be9578fbe96be43eec9006e2fddfdc75ac8b0c4022f897a5a448c7f4436eb2f5c7eb27ef66b35250a386ce24c8334f3ded16b70a8380e2ce2f0aeef", 0x94}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
llistxattr(0x0, &(0x7f00000001c0)=""/87, 0x57)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
pipe2$9p(0x0, 0x0)
r3 = dup(0xffffffffffffffff)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x200, 0x0)
write$FUSE_BMAP(r3, 0x0, 0x0)
r4 = dup(r0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

[   51.253139][ T7261] device hsr_slave_0 entered promiscuous mode
[   51.300509][ T7261] device hsr_slave_1 entered promiscuous mode
[   51.337353][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.344532][ T7261] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.351947][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.358989][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.376201][ T7264] IPVS: ftp: loaded support on port[0] = 21
[   51.439958][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.467108][ T7261] 8021q: adding VLAN 0 to HW filter on device team0
[   51.479086][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.488265][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.515956][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.532096][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   51.560039][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.568637][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.575824][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.625402][ T7267] IPVS: ftp: loaded support on port[0] = 21
[   51.637845][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.646636][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.653840][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
03:43:37 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

[   51.675589][ T7264] chnl_net:caif_netlink_parms(): no params data found
[   51.736621][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.762289][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.771460][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.817201][ T7261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   51.842646][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.854710][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.863272][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.892156][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.903969][ T7271] IPVS: ftp: loaded support on port[0] = 21
[   51.904749][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.917643][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.939007][ T7264] device bridge_slave_0 entered promiscuous mode
[   51.977998][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.985267][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.993219][ T7264] device bridge_slave_1 entered promiscuous mode
[   52.025444][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.066555][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.137785][ T7264] team0: Port device team_slave_0 added
03:43:38 executing program 4:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

[   52.187205][ T7267] chnl_net:caif_netlink_parms(): no params data found
[   52.203656][ T7264] team0: Port device team_slave_1 added
[   52.292629][ T7271] chnl_net:caif_netlink_parms(): no params data found
03:43:38 executing program 0:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x40002)
ioctl$int_in(r0, 0x80006000005008, 0x0)

[   52.392825][ T7264] device hsr_slave_0 entered promiscuous mode
[   52.437686][ T7264] device hsr_slave_1 entered promiscuous mode
[   52.510138][ T7264] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.518009][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.535273][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.550902][ T7267] device bridge_slave_0 entered promiscuous mode
03:43:38 executing program 0:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x40002)
ioctl$int_in(r0, 0x80006000005008, 0x0)

[   52.571186][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.578260][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.601168][ T7267] device bridge_slave_1 entered promiscuous mode
[   52.695121][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.699959][ T7286] IPVS: ftp: loaded support on port[0] = 21
[   52.715272][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.736170][ T7271] device bridge_slave_0 entered promiscuous mode
03:43:38 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x40002)
ioctl$int_in(r0, 0x80006000005008, 0x0)

03:43:38 executing program 0:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x40002)
ioctl$int_in(r0, 0x80006000005008, 0x0)

[   52.792788][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.799882][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.835458][ T7271] device bridge_slave_1 entered promiscuous mode
[   52.862615][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.891817][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.931568][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.967617][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   52.997650][ T7267] team0: Port device team_slave_0 added
[   53.006813][ T7267] team0: Port device team_slave_1 added
03:43:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x17}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$bt_hidp(0x1f, 0x3, 0x6)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="0000009700000000000000d4af208963a1fa2e09e9b756eff4e6124632cc6411bcfcf26c8033268125000000000000a21a23dfe945f5692ae8fc5af96719dd"], 0x4}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[   53.023288][ T7264] 8021q: adding VLAN 0 to HW filter on device team0
[   53.055300][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.073089][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.081576][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.128624][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.174899][    C1] hrtimer: interrupt took 24742 ns
[   53.202519][ T7267] device hsr_slave_0 entered promiscuous mode
[   53.240454][ T7267] device hsr_slave_1 entered promiscuous mode
[   53.280190][ T7267] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.289735][ T7271] team0: Port device team_slave_0 added
[   53.297006][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.305693][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.314038][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.321250][ T7270] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.328894][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.337667][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.346024][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.353096][ T7270] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.360905][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.383057][ T7297] bond0: (slave bond_slave_1): Releasing backup interface
[   53.602214][ T7294] IPVS: ftp: loaded support on port[0] = 21
[   53.612280][ T7271] team0: Port device team_slave_1 added
[   53.619117][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.648125][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.658593][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.668398][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.678020][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.686754][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.695828][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.704348][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.712885][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.721297][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.731832][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
03:43:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x17}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$bt_hidp(0x1f, 0x3, 0x6)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="0000009700000000000000d4af208963a1fa2e09e9b756eff4e6124632cc6411bcfcf26c8033268125000000000000a21a23dfe945f5692ae8fc5af96719dd"], 0x4}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[   53.786887][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.852297][ T7271] device hsr_slave_0 entered promiscuous mode
[   53.911086][ T7271] device hsr_slave_1 entered promiscuous mode
[   53.950155][ T7271] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.958223][ T7264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
03:43:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x17}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$bt_hidp(0x1f, 0x3, 0x6)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="0000009700000000000000d4af208963a1fa2e09e9b756eff4e6124632cc6411bcfcf26c8033268125000000000000a21a23dfe945f5692ae8fc5af96719dd"], 0x4}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[   54.005701][ T7267] 8021q: adding VLAN 0 to HW filter on device team0
[   54.018031][ T7286] chnl_net:caif_netlink_parms(): no params data found
[   54.035726][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.044094][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.072301][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.096757][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.109925][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.130841][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.137948][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.149339][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.180669][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   54.186663][    C0] protocol 88fb is buggy, dev hsr_slave_1
[   54.200299][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.208921][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.234105][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.241235][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.253338][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.263616][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.276320][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.286057][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.300200][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   54.305987][    C0] protocol 88fb is buggy, dev hsr_slave_1
[   54.315510][ T7267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.330444][    C1] protocol 88fb is buggy, dev hsr_slave_0
[   54.331628][ T7267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.336721][    C1] protocol 88fb is buggy, dev hsr_slave_1
[   54.397455][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.414859][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.423595][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   54.423639][    C0] protocol 88fb is buggy, dev hsr_slave_1
[   54.475458][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.501865][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.510624][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.519571][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.528276][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.547595][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0
03:43:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x17}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$bt_hidp(0x1f, 0x3, 0x6)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="0000009700000000000000d4af208963a1fa2e09e9b756eff4e6124632cc6411bcfcf26c8033268125000000000000a21a23dfe945f5692ae8fc5af96719dd"], 0x4}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[   54.569738][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.595628][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.604323][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.631147][ T7286] device bridge_slave_0 entered promiscuous mode
[   54.647839][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.655287][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.663808][ T7286] device bridge_slave_1 entered promiscuous mode
[   54.677137][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.688782][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   54.706452][ T7271] 8021q: adding VLAN 0 to HW filter on device team0
[   54.740000][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   54.763093][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.771300][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.789975][ T7271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.803831][ T7271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.817783][ T7286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
03:43:40 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636271001804020010000500010000000000000005000000040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000605bd90aeb5bcfa76d709ae974bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000774900"/1084], 0x444}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xffffffffffffffc7, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x66, 0x30479e840602a76b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x28}}, 0x0)

[   54.840957][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.849580][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.863076][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.870180][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.882516][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.892762][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.901721][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.909547][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.919644][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.938118][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.949098][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.957956][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.966938][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.975666][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.984443][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.992795][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.001569][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.009707][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.018034][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.026231][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.034468][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.051832][ T7286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.068047][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   55.126136][ T7271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.143680][ T7286] team0: Port device team_slave_0 added
[   55.188653][ T7294] chnl_net:caif_netlink_parms(): no params data found
[   55.204828][ T7286] team0: Port device team_slave_1 added
03:43:41 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="530841549d6f3017276cbdd605b5868ed3df235614cd5ecf6c7ded0566c0784dc7a2372ac9d6c4818e9ea3e1719b3301a55cd9f2ec6c61e8d43b6f7a68bf22cc4c77beab52b2fa77afb37876df743482568ff1e69166f35d6be9578fbe96be43eec9006e2fddfdc75ac8b0c4022f897a5a448c7f4436eb2f5c7eb27ef66b35250a386ce24c8334f3ded16b70a8380e2ce2f0aeef", 0x94}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
llistxattr(0x0, &(0x7f00000001c0)=""/87, 0x57)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
pipe2$9p(0x0, 0x0)
r3 = dup(0xffffffffffffffff)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x200, 0x0)
write$FUSE_BMAP(r3, 0x0, 0x0)
r4 = dup(r0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

[   55.374040][ T7286] device hsr_slave_0 entered promiscuous mode
[   55.385149][ T7347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   55.450703][ T7286] device hsr_slave_1 entered promiscuous mode
[   55.474047][ T7286] debugfs: Directory 'hsr0' with parent '/' already present!
[   55.521823][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.528942][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.551827][ T7294] device bridge_slave_0 entered promiscuous mode
[   55.564220][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.572274][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.580818][ T7294] device bridge_slave_1 entered promiscuous mode
03:43:41 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

[   55.633586][ T7294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.649114][ T7294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.713870][ T7294] team0: Port device team_slave_0 added
[   55.725401][ T7294] team0: Port device team_slave_1 added
[   55.735553][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.755846][ T7286] 8021q: adding VLAN 0 to HW filter on device team0
[   55.787710][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.816862][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.872709][ T7294] device hsr_slave_0 entered promiscuous mode
[   55.924810][ T7294] device hsr_slave_1 entered promiscuous mode
[   55.970173][ T7294] debugfs: Directory 'hsr0' with parent '/' already present!
[   55.987936][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.996584][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.005222][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.012295][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.030812][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.038586][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.047166][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.055669][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.062734][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.071608][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.080193][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.088977][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.097617][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.107412][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.121207][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.129526][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.138026][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.146296][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.156145][ T7286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.187755][ T7286] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.207718][ T7294] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.226575][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.235473][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.245333][ T7294] 8021q: adding VLAN 0 to HW filter on device team0
[   56.266315][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.275499][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.284406][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.291640][ T7270] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.300301][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.311770][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.320754][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.329143][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.336358][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.362199][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.372699][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.382264][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.391249][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.400661][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.409503][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.418578][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.427213][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.435862][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.444411][   T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.454468][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.462722][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.481393][ T7294] 8021q: adding VLAN 0 to HW filter on device batadv0
03:43:43 executing program 4:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x17}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$bt_hidp(0x1f, 0x3, 0x6)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="0000009700000000000000d4af208963a1fa2e09e9b756eff4e6124632cc6411bcfcf26c8033268125000000000000a21a23dfe945f5692ae8fc5af96719dd"], 0x4}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

03:43:43 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="530841549d6f3017276cbdd605b5868ed3df235614cd5ecf6c7ded0566c0784dc7a2372ac9d6c4818e9ea3e1719b3301a55cd9f2ec6c61e8d43b6f7a68bf22cc4c77beab52b2fa77afb37876df743482568ff1e69166f35d6be9578fbe96be43eec9006e2fddfdc75ac8b0c4022f897a5a448c7f4436eb2f5c7eb27ef66b35250a386ce24c8334f3ded16b70a8380e2ce2f0aeef", 0x94}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
llistxattr(0x0, &(0x7f00000001c0)=""/87, 0x57)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
pipe2$9p(0x0, 0x0)
r3 = dup(0xffffffffffffffff)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x200, 0x0)
write$FUSE_BMAP(r3, 0x0, 0x0)
r4 = dup(r0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

03:43:43 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636271001804020010000500010000000000000005000000040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000605bd90aeb5bcfa76d709ae974bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000774900"/1084], 0x444}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xffffffffffffffc7, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x66, 0x30479e840602a76b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x28}}, 0x0)

03:43:43 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:43 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x40002)
ioctl$int_in(r0, 0x80006000005008, 0x0)

[   57.304086][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:43:43 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636271001804020010000500010000000000000005000000040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000605bd90aeb5bcfa76d709ae974bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000774900"/1084], 0x444}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xffffffffffffffc7, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x66, 0x30479e840602a76b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x28}}, 0x0)

[   57.446154][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
03:43:43 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="530841549d6f3017276cbdd605b5868ed3df235614cd5ecf6c7ded0566c0784dc7a2372ac9d6c4818e9ea3e1719b3301a55cd9f2ec6c61e8d43b6f7a68bf22cc4c77beab52b2fa77afb37876df743482568ff1e69166f35d6be9578fbe96be43eec9006e2fddfdc75ac8b0c4022f897a5a448c7f4436eb2f5c7eb27ef66b35250a386ce24c8334f3ded16b70a8380e2ce2f0aeef", 0x94}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
llistxattr(0x0, &(0x7f00000001c0)=""/87, 0x57)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
pipe2$9p(0x0, 0x0)
r3 = dup(0xffffffffffffffff)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x200, 0x0)
write$FUSE_BMAP(r3, 0x0, 0x0)
r4 = dup(r0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

03:43:43 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x40002)
ioctl$int_in(r0, 0x80006000005008, 0x0)

[   57.520233][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   57.526050][    C0] protocol 88fb is buggy, dev hsr_slave_1
[   57.545245][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:43:43 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:43 executing program 1:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:43 executing program 5:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:44 executing program 4:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x17}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$bt_hidp(0x1f, 0x3, 0x6)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="0000009700000000000000d4af208963a1fa2e09e9b756eff4e6124632cc6411bcfcf26c8033268125000000000000a21a23dfe945f5692ae8fc5af96719dd"], 0x4}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

03:43:44 executing program 2:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:44 executing program 3:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

[   58.268640][ T7430] bond0: (slave bond_slave_1): Releasing backup interface
03:43:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x17}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$bt_hidp(0x1f, 0x3, 0x6)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="0000009700000000000000d4af208963a1fa2e09e9b756eff4e6124632cc6411bcfcf26c8033268125000000000000a21a23dfe945f5692ae8fc5af96719dd"], 0x4}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[   58.626174][ T7451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
03:43:44 executing program 1:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:44 executing program 0:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:44 executing program 5:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:44 executing program 2:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:45 executing program 4:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:45 executing program 3:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:45 executing program 1:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:45 executing program 0:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:45 executing program 5:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:45 executing program 2:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:46 executing program 3:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:46 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:46 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:46 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:46 executing program 0:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40bc5311, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

03:43:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:46 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:46 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:46 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

03:43:47 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(r0, r1, 0x0)
dup2(r1, r2)

[   61.994706][ T7349] ==================================================================
[   62.002914][ T7349] BUG: KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor
[   62.010628][ T7349] 
[   62.012957][ T7349] read to 0xffffffff860bff44 of 4 bytes by task 7227 on cpu 0:
[   62.021105][ T7349]  tomoyo_supervisor+0x1b0/0xd20
[   62.026046][ T7349]  tomoyo_path_permission+0x121/0x160
[   62.031418][ T7349]  tomoyo_path_perm+0x23e/0x390
[   62.036284][ T7349]  tomoyo_inode_getattr+0x26/0x40
[   62.041303][ T7349]  security_inode_getattr+0x9b/0xd0
[   62.046494][ T7349]  vfs_getattr+0x2e/0x70
[   62.050733][ T7349]  vfs_statx+0x102/0x190
[   62.054985][ T7349]  __do_sys_newlstat+0x51/0xb0
[   62.059742][ T7349]  __x64_sys_newlstat+0x3a/0x50
[   62.064583][ T7349]  do_syscall_64+0xcf/0x2f0
[   62.069083][ T7349]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.074963][ T7349] 
[   62.077282][ T7349] write to 0xffffffff860bff44 of 4 bytes by task 7349 on cpu 1:
[   62.084913][ T7349]  tomoyo_supervisor+0x1c9/0xd20
[   62.089836][ T7349]  tomoyo_path_permission+0x121/0x160
[   62.095194][ T7349]  tomoyo_check_open_permission+0x2fd/0x320
[   62.101073][ T7349]  tomoyo_file_open+0x75/0x90
[   62.105739][ T7349]  security_file_open+0x69/0x210
[   62.110661][ T7349]  do_dentry_open+0x20a/0x900
[   62.115323][ T7349]  vfs_open+0x62/0x80
[   62.119290][ T7349]  path_openat+0xf75/0x3530
[   62.123776][ T7349]  do_filp_open+0x11e/0x1b0
[   62.128441][ T7349]  do_sys_open+0x3b3/0x4f0
[   62.132846][ T7349]  __x64_sys_open+0x55/0x70
[   62.137345][ T7349]  do_syscall_64+0xcf/0x2f0
[   62.141838][ T7349]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.147706][ T7349] 
[   62.150021][ T7349] Reported by Kernel Concurrency Sanitizer on:
[   62.156168][ T7349] CPU: 1 PID: 7349 Comm: udevd Not tainted 5.3.0+ #0
[   62.162822][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   62.172863][ T7349] ==================================================================
[   62.180909][ T7349] Kernel panic - not syncing: panic_on_warn set ...
[   62.187483][ T7349] CPU: 1 PID: 7349 Comm: udevd Not tainted 5.3.0+ #0
[   62.194149][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   62.204194][ T7349] Call Trace:
[   62.207474][ T7349]  dump_stack+0xf5/0x159
[   62.211718][ T7349]  panic+0x209/0x639
[   62.215618][ T7349]  ? vprintk_func+0x8d/0x140
[   62.220199][ T7349]  kcsan_report.cold+0x57/0xeb
[   62.224956][ T7349]  __kcsan_setup_watchpoint+0x342/0x500
[   62.230493][ T7349]  __tsan_write4+0x32/0x40
[   62.234901][ T7349]  tomoyo_supervisor+0x1c9/0xd20
[   62.239830][ T7349]  ? tomoyo_path_matches_pattern+0xa1/0x160
[   62.245716][ T7349]  ? __tsan_write1+0x32/0x40
[   62.250295][ T7349]  ? tomoyo_compare_name_union+0xa0/0xa0
[   62.255927][ T7349]  tomoyo_path_permission+0x121/0x160
[   62.261289][ T7349]  tomoyo_check_open_permission+0x2fd/0x320
[   62.267271][ T7349]  tomoyo_file_open+0x75/0x90
[   62.271947][ T7349]  security_file_open+0x69/0x210
[   62.276883][ T7349]  do_dentry_open+0x20a/0x900
[   62.281562][ T7349]  ? security_inode_permission+0xa5/0xc0
[   62.287199][ T7349]  vfs_open+0x62/0x80
[   62.291184][ T7349]  path_openat+0xf75/0x3530
[   62.295695][ T7349]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   62.302021][ T7349]  ? delay_tsc+0x8f/0xc0
[   62.306281][ T7349]  ? __sanitizer_cov_trace_switch+0x49/0x80
[   62.312198][ T7349]  do_filp_open+0x11e/0x1b0
[   62.316703][ T7349]  ? __alloc_fd+0x316/0x4c0
[   62.321205][ T7349]  do_sys_open+0x3b3/0x4f0
[   62.325628][ T7349]  __x64_sys_open+0x55/0x70
[   62.330124][ T7349]  do_syscall_64+0xcf/0x2f0
[   62.334623][ T7349]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.340515][ T7349] RIP: 0033:0x7fbe6e3f9120
[   62.344926][ T7349] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24
[   62.364525][ T7349] RSP: 002b:00007ffc1bdb5cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   62.372922][ T7349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbe6e3f9120
[   62.380880][ T7349] RDX: 0000000000000124 RSI: 0000000000080000 RDI: 00007ffc1bdb5da0
[   62.388841][ T7349] RBP: 0000000001505744 R08: 0000000001505744 R09: 00007fbe6e44ec20
[   62.396823][ T7349] R10: 7269762f73656369 R11: 0000000000000246 R12: 00000000014eb960
[   62.404782][ T7349] R13: 00000000014eba50 R14: 00000000014eb250 R15: 00000000014f0e10
[   62.414080][ T7349] Kernel Offset: disabled
[   62.418420][ T7349] Rebooting in 86400 seconds..