[info] Using makefile-style concurrent boot in runlevel 2. [ 41.500336][ T25] audit: type=1800 audit(1575439944.710:21): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 41.539696][ T25] audit: type=1800 audit(1575439944.720:22): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.45' (ECDSA) to the list of known hosts. 2019/12/04 06:12:35 fuzzer started 2019/12/04 06:12:37 dialing manager at 10.128.0.105:44523 2019/12/04 06:12:37 syscalls: 2684 2019/12/04 06:12:37 code coverage: enabled 2019/12/04 06:12:37 comparison tracing: enabled 2019/12/04 06:12:37 extra coverage: extra coverage is not supported by the kernel 2019/12/04 06:12:37 setuid sandbox: enabled 2019/12/04 06:12:37 namespace sandbox: enabled 2019/12/04 06:12:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 06:12:37 fault injection: enabled 2019/12/04 06:12:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 06:12:37 net packet injection: enabled 2019/12/04 06:12:37 net device setup: enabled 2019/12/04 06:12:37 concurrency sanitizer: enabled 2019/12/04 06:12:37 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 64.216195][ T7611] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/04 06:12:49 adding functions to KCSAN blacklist: 'blk_mq_dispatch_rq_list' 'do_signal_stop' 'ext4_mb_good_group' 'alloc_empty_file' 'ext4_free_inodes_count' 'ext4_mb_find_by_goal' 'n_tty_receive_buf_common' 'list_lru_count_one' 'process_srcu' 'dccp_fin' 'generic_write_end' 'ext4_nonda_switch' 'pipe_wait' 'xas_find_marked' 'sit_tunnel_xmit' '__mark_inode_dirty' 'wbt_done' 'blk_mq_get_request' 'mod_timer' 'wbt_issue' 'p9_poll_workfn' 'ktime_get_real_seconds' 'atime_needs_update' 'tick_sched_do_timer' 'rcu_gp_fqs_check_wake' 'echo_char' 'audit_log_start' 'ext4_mark_iloc_dirty' 'xas_clear_mark' 'copy_process' 'generic_fillattr' 'tcp_add_backlog' 'ep_poll' 'do_syslog' 'pcpu_alloc' 'tick_nohz_idle_stop_tick' 'lruvec_lru_size' 'rcu_gp_fqs_loop' 'mem_cgroup_select_victim_node' 'kernfs_refresh_inode' '__add_to_page_cache_locked' 'find_alive_thread' 'complete_signal' 'vm_area_dup' 'tomoyo_check_path_acl' 'ext4_has_free_clusters' 'ext4_free_inode' 'find_get_pages_range_tag' 'commit_echoes' '__snd_rawmidi_transmit_ack' 'blk_mq_run_hw_queue' 'do_nanosleep' 'tomoyo_supervisor' 'pipe_poll' 'find_next_bit' 'dd_has_work' 'taskstats_exit' 'mm_update_next_owner' 'skb_dequeue' 'kauditd_thread' '__ext4_new_inode' 'poll_schedule_timeout' 'futex_wait_queue_me' 'd_delete' 'icmp_global_allow' 'blk_stat_add' '__hrtimer_run_queues' 'blk_mq_sched_dispatch_requests' 'common_perm_cond' 'evict' 'ext4_da_write_end' '__get_user_pages' '__delete_from_page_cache' 'tick_do_update_jiffies64' 'add_timer' 'bio_endio' 'pid_update_inode' 'ip_finish_output2' 'run_timer_softirq' 'timer_clear_idle' 'do_exit' 'del_timer' 06:16:19 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 06:16:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x1c, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_ENCAP_LIMIT={0x8}], @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}]]]}}}]}, 0x4c}}, 0x0) [ 276.758443][ T7615] IPVS: ftp: loaded support on port[0] = 21 [ 276.902690][ T7618] IPVS: ftp: loaded support on port[0] = 21 [ 276.914944][ T7615] chnl_net:caif_netlink_parms(): no params data found [ 276.961571][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.970269][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.978725][ T7615] device bridge_slave_0 entered promiscuous mode [ 276.993286][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.000562][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state 06:16:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@commit={'commit', 0x3d, 0xa93}}]}) [ 277.008670][ T7615] device bridge_slave_1 entered promiscuous mode [ 277.049021][ T7615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.093885][ T7615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.112603][ T7618] chnl_net:caif_netlink_parms(): no params data found [ 277.156558][ T7615] team0: Port device team_slave_0 added [ 277.167761][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.193424][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.213475][ T7618] device bridge_slave_0 entered promiscuous mode [ 277.221156][ T7615] team0: Port device team_slave_1 added [ 277.227833][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.242682][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.250448][ T7618] device bridge_slave_1 entered promiscuous mode 06:16:20 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x40012021) [ 277.276623][ T7621] IPVS: ftp: loaded support on port[0] = 21 [ 277.334219][ T7615] device hsr_slave_0 entered promiscuous mode [ 277.392893][ T7615] device hsr_slave_1 entered promiscuous mode [ 277.474820][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.504556][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.507325][ T7623] IPVS: ftp: loaded support on port[0] = 21 06:16:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x40}}, 0x0) [ 277.593688][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.600966][ T7615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.610777][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.617950][ T7615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.724341][ T7618] team0: Port device team_slave_0 added [ 277.760266][ T7618] team0: Port device team_slave_1 added [ 277.974583][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.993647][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.065852][ T7618] device hsr_slave_0 entered promiscuous mode [ 278.103698][ T7618] device hsr_slave_1 entered promiscuous mode [ 278.123599][ T7618] debugfs: Directory 'hsr0' with parent '/' already present! [ 278.141723][ T7615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.205839][ T7621] chnl_net:caif_netlink_parms(): no params data found [ 278.237318][ T7615] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.250581][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.263427][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.325455][ T7651] IPVS: ftp: loaded support on port[0] = 21 [ 278.406650][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.434659][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.494506][ T2849] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.501665][ T2849] bridge0: port 1(bridge_slave_0) entered forwarding state 06:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003300)=ANY=[@ANYBLOB="140000000401190300"/20], 0x14}}, 0x0) [ 278.644325][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.655290][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.703217][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.710336][ T7638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.783057][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.834935][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.883534][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.934586][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.983334][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.034651][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.097536][ T7623] chnl_net:caif_netlink_parms(): no params data found [ 279.119224][ T7615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.182547][ T7615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.235162][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.242410][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.283375][ T7621] device bridge_slave_0 entered promiscuous mode [ 279.317044][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.333451][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.341789][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.414886][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.463055][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.546299][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.569383][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.604307][ T7623] device bridge_slave_0 entered promiscuous mode [ 279.623042][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.630188][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.663467][ T7621] device bridge_slave_1 entered promiscuous mode [ 279.701847][ T7676] IPVS: ftp: loaded support on port[0] = 21 [ 279.723253][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.745239][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.774448][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.781565][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.813659][ T7623] device bridge_slave_1 entered promiscuous mode [ 279.844026][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.882670][ T7621] team0: Port device team_slave_0 added [ 279.888664][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.912765][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.946568][ T7615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.980070][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.015855][ T7621] team0: Port device team_slave_1 added [ 280.089240][ T7623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.144686][ T7621] device hsr_slave_0 entered promiscuous mode [ 280.193071][ T7621] device hsr_slave_1 entered promiscuous mode [ 280.222701][ T7621] debugfs: Directory 'hsr0' with parent '/' already present! [ 280.240150][ T7618] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.250882][ T7623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.279657][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.293250][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.331769][ T7623] team0: Port device team_slave_0 added [ 280.341343][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.358912][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.384932][ T2849] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.392099][ T2849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.425257][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.443324][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.451748][ T2849] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.458870][ T2849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.493092][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.502266][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.533987][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.620876][ T7623] team0: Port device team_slave_1 added [ 280.651348][ T7618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.682556][ T7618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.790533][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.823124][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.831928][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.873246][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.882350][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.933631][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.942329][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.973200][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.998222][ T7651] chnl_net:caif_netlink_parms(): no params data found [ 281.028097][ T7676] chnl_net:caif_netlink_parms(): no params data found [ 281.050600][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.058390][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.073313][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.080924][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.100166][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.154843][ T7623] device hsr_slave_0 entered promiscuous mode [ 281.212924][ T7623] device hsr_slave_1 entered promiscuous mode [ 281.252596][ T7623] debugfs: Directory 'hsr0' with parent '/' already present! 06:16:24 executing program 0: perf_event_open(&(0x7f00000004c0)={0x4, 0x146, 0xb8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x2}, 0x1000, 0x2000000000, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffffe2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000004, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000030000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000380)="0f228766b9780900000f320fc7b00000f20f707c00aa260fdcd00f20d86635080000000f22d8660f5985e95b0f793c65260f0fbfd91e9766b90402000066b84672000066ba000000000f30", 0x4b}], 0x1, 0x4, &(0x7f00000001c0)=[@cr0={0x0, 0x80050004}, @flags={0x3, 0x80000}], 0x2) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xffffffffffffffc1) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x1b}, 0x1b, r4}) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket(0x10, 0x0, 0x0) socket(0xa, 0x803, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x65, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() tkill(r5, 0x9) mremap(&(0x7f000016f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000bd1000/0x4000)=nil) readlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)=""/93, 0x306) [ 281.365231][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.392831][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.399899][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.482823][ T7651] device bridge_slave_0 entered promiscuous mode [ 281.496352][ T7735] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 281.525550][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.545470][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.579343][ T7676] device bridge_slave_0 entered promiscuous mode [ 281.637742][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.667041][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.709833][ T7651] device bridge_slave_1 entered promiscuous mode 06:16:25 executing program 0: perf_event_open(&(0x7f00000004c0)={0x4, 0x146, 0xb8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x2}, 0x1000, 0x2000000000, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffffe2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000004, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000030000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000380)="0f228766b9780900000f320fc7b00000f20f707c00aa260fdcd00f20d86635080000000f22d8660f5985e95b0f793c65260f0fbfd91e9766b90402000066b84672000066ba000000000f30", 0x4b}], 0x1, 0x4, &(0x7f00000001c0)=[@cr0={0x0, 0x80050004}, @flags={0x3, 0x80000}], 0x2) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xffffffffffffffc1) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x1b}, 0x1b, r4}) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket(0x10, 0x0, 0x0) socket(0xa, 0x803, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x65, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() tkill(r5, 0x9) mremap(&(0x7f000016f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000bd1000/0x4000)=nil) readlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)=""/93, 0x306) [ 281.835521][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.863250][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.915448][ T7676] device bridge_slave_1 entered promiscuous mode [ 281.965736][ T7621] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.018276][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.028102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.068572][ T7651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.129914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.157453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.199086][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.206341][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.270235][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.301954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.340155][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.347326][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state 06:16:25 executing program 0: [ 282.421394][ T7651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.447173][ T7771] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 282.502579][ T7771] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 282.535406][ T7771] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 282.570066][ T7676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.594644][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.614276][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 06:16:25 executing program 0: 06:16:25 executing program 1: [ 282.656067][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.703565][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.743059][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.783336][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.792145][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 06:16:26 executing program 1: 06:16:26 executing program 0: [ 282.850585][ T7621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.952638][ T7621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 06:16:26 executing program 1: [ 283.053964][ T7676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.083130][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.103218][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.143145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.151653][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.203105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.251297][ T7621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.279485][ T7651] team0: Port device team_slave_0 added [ 283.293459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.317343][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.334066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.357333][ T7651] team0: Port device team_slave_1 added [ 283.376361][ T7676] team0: Port device team_slave_0 added [ 283.397975][ T7623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.422736][ T7676] team0: Port device team_slave_1 added [ 283.463507][ T7623] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.472836][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.480509][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.564649][ T7651] device hsr_slave_0 entered promiscuous mode [ 283.586075][ T7651] device hsr_slave_1 entered promiscuous mode [ 283.632557][ T7651] debugfs: Directory 'hsr0' with parent '/' already present! [ 283.653615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.665817][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.689119][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.696245][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.707625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.723577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.732160][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.739342][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.747650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.756557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.776392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.784723][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.794228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.803703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.812325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.821796][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.830569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.849088][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.858476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.869863][ T7623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.897023][ T7810] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000a93, [ 283.928401][ T7676] device hsr_slave_0 entered promiscuous mode [ 283.969167][ T7818] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000a93, [ 283.983011][ T7676] device hsr_slave_1 entered promiscuous mode [ 284.023221][ T7676] debugfs: Directory 'hsr0' with parent '/' already present! [ 284.052578][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 06:16:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, &(0x7f0000000240)=""/191, 0x32, 0xbf, 0x8}, 0x20) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) epoll_create(0x0) r0 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) [ 284.179450][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.203290][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.239004][ T7623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.353326][ T7651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.460470][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.557865][ T7651] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.609852][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.625904][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.680597][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.728704][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.745724][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.793206][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.826189][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.885750][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.892858][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.953076][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.002861][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.045884][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.052989][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.106473][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.166477][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.219556][ T7651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.302597][ T7651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.372307][ T7676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.433729][ T7676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.536711][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.544746][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.596186][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.643098][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.650178][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.719612][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.773376][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.813103][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.820254][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.893181][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.927944][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.973213][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.026650][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.053869][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.103555][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.146646][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.185993][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.213351][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.253000][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.293499][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.346107][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.380677][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.423384][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.475960][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.506292][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.553583][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.583003][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.652662][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.679982][ T7889] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 286.683166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 06:16:30 executing program 3: [ 286.787378][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.818081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.879797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.892648][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.900283][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.914192][ T7651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.925161][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.936857][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.948790][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv0 06:16:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 06:16:30 executing program 2: 06:16:30 executing program 1: 06:16:30 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, &(0x7f0000000240)=""/191, 0x32, 0xbf, 0x8}, 0x20) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) epoll_create(0x0) r0 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 06:16:30 executing program 3: 06:16:30 executing program 5: 06:16:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b45, 0x0) 06:16:30 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x0, {0xb}}) [ 287.250872][ C1] hrtimer: interrupt took 28690 ns 06:16:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x9, 0x0, 0x0) 06:16:30 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x109082, 0x0) 06:16:30 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_OPENQRY(r0, 0x5415, 0x0) 06:16:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 06:16:30 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000c00), 0x4) 06:16:30 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x9, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0x9, 0x0, [], "e2"}}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, 0x0) 06:16:30 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:30 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x0, {0xb}}) 06:16:30 executing program 1: sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/95) 06:16:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') r0 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000003c0), 0x4000000000000427) 06:16:30 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x44000, 0x0) 06:16:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x560c, 0x0) 06:16:31 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:31 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x44000, 0x0) 06:16:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/nvram\x00', 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/250, 0xfa}], 0x1, 0x0) 06:16:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x5606, 0x0) 06:16:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) dup2(r1, r0) r2 = dup(r0) read$FUSE(r2, 0x0, 0x0) 06:16:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x31cd232d3abc0863}, 0x14}}, 0x0) 06:16:31 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6d) 06:16:31 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:31 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x4000, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) 06:16:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "cf3977aaa7c2e7601dfac2c35cca015de7", [[], []]}, 0x289) 06:16:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b40, &(0x7f0000000200)) 06:16:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6d) 06:16:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b61, &(0x7f0000000200)) 06:16:31 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)) 06:16:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b36, 0x0) 06:16:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6611, 0x0) munlockall() 06:16:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x98) 06:16:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6d) 06:16:31 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)) 06:16:31 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 06:16:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000380)) 06:16:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x28, 0x829, 0x0, 0x0, {0x1, 0x1000000}}, 0x14}, 0x1, 0xfdffffff00000000}, 0x0) [ 288.860105][ T8051] 9pnet_virtio: no channels available for device syz [ 288.882752][ T8052] 9pnet_virtio: no channels available for device syz 06:16:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6d) 06:16:32 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)) 06:16:32 executing program 5: syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27d9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000140)={0xa8, 0x75, 0x2, {0x9d, "cbcec4b47ba73dd40490153a5f22d470d2e175083fedc01096452b5b2a5d7803f9da1d715c9b171f46e57550266810cc778d271f4b8b7673bac9e66908f6c363c0b22fb7372d4e20680ff5cd7cda1abd4d082e677ab9958f6de4924c3f754dff0152dd56aa1add9de9071f9be96192fa09ef9d058253c75d701bcdc3694ac3070896ff30f1923f8b9a382ec5be1d7090600f4014b5a88d1d97bd27e44c"}}, 0xa8) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f857874656e642c0092c7956e7fa0de931d56d8662ce3342a41b7a5e1ac78027745bdf9631919d2b1966bac42c2646a3a4e2335dd5f51af5e6f36832f9efeed05f5368625706b538164b705bfeb7d7aede71ae4261087887401a8fc5e668d59a022add8f360d76fa372af218403decc4df0bb66f2b2e8ca08833cde9c78eeefdcd0f452795a81c5c5eabea495aa2795a02222f1a7010dbbb885a32d8047e2528f6ace4a99e221da0b0e5ff6e9a058a64b54309d200b5ea4498fcd52c1c6dc84b79dd66b07173fbef62632dd92f938cb530b0af1ef10640ae4a55140a00930"]) 06:16:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000380)) 06:16:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x560e, &(0x7f0000000200)) 06:16:32 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 0xc7, 0x80003}) 06:16:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:32 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)) 06:16:32 executing program 3: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6d) 06:16:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85322, &(0x7f0000068f50)={{0x80}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}) 06:16:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b66, &(0x7f0000000200)) 06:16:32 executing program 3: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6d) 06:16:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "57612471408982025872100b70c10a02"}) 06:16:33 executing program 3: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6d) 06:16:33 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) 06:16:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x5429, 0x0) 06:16:33 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) 06:16:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6d) 06:16:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x2}, 0x90) 06:16:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x560e, 0x0) 06:16:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b30, &(0x7f0000000000)) 06:16:33 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6d) 06:16:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b70, &(0x7f0000000200)) 06:16:33 executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:33 executing program 5: 06:16:33 executing program 1: 06:16:33 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6d) 06:16:33 executing program 5: 06:16:33 executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:33 executing program 2: 06:16:33 executing program 4: 06:16:33 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6d) 06:16:33 executing program 1: 06:16:33 executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:33 executing program 5: 06:16:34 executing program 4: 06:16:34 executing program 2: 06:16:34 executing program 5: 06:16:34 executing program 4: 06:16:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 06:16:34 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:34 executing program 1: 06:16:34 executing program 2: 06:16:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 06:16:34 executing program 5: 06:16:34 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:34 executing program 4: 06:16:34 executing program 1: 06:16:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 06:16:34 executing program 2: 06:16:34 executing program 5: 06:16:34 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:34 executing program 1: 06:16:34 executing program 3: 06:16:34 executing program 4: 06:16:34 executing program 2: 06:16:34 executing program 3: 06:16:34 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:34 executing program 5: 06:16:35 executing program 3: 06:16:35 executing program 2: 06:16:35 executing program 1: 06:16:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:35 executing program 4: 06:16:35 executing program 5: 06:16:35 executing program 3: 06:16:35 executing program 2: 06:16:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:35 executing program 5: 06:16:35 executing program 4: 06:16:35 executing program 1: 06:16:35 executing program 3: 06:16:35 executing program 2: 06:16:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:35 executing program 5: 06:16:35 executing program 4: 06:16:35 executing program 1: 06:16:35 executing program 3: 06:16:35 executing program 2: 06:16:35 executing program 5: 06:16:35 executing program 4: 06:16:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:36 executing program 3: 06:16:36 executing program 2: 06:16:36 executing program 5: 06:16:36 executing program 4: 06:16:36 executing program 1: 06:16:36 executing program 2: 06:16:36 executing program 5: 06:16:36 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:36 executing program 3: 06:16:36 executing program 1: 06:16:36 executing program 4: 06:16:36 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, &(0x7f0000000200)) 06:16:36 executing program 3: 06:16:36 executing program 2: 06:16:36 executing program 5: 06:16:36 executing program 1: 06:16:36 executing program 4: 06:16:36 executing program 3: 06:16:36 executing program 5: 06:16:36 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)) 06:16:36 executing program 2: 06:16:36 executing program 1: 06:16:36 executing program 4: 06:16:37 executing program 3: 06:16:37 executing program 5: 06:16:37 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)) 06:16:37 executing program 2: 06:16:37 executing program 1: 06:16:37 executing program 4: 06:16:37 executing program 3: 06:16:37 executing program 2: 06:16:37 executing program 5: 06:16:37 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)) 06:16:37 executing program 1: 06:16:37 executing program 3: 06:16:37 executing program 2: 06:16:37 executing program 4: 06:16:37 executing program 5: 06:16:37 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, 0x0) 06:16:37 executing program 1: 06:16:37 executing program 2: 06:16:37 executing program 3: 06:16:37 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, 0x0) 06:16:37 executing program 4: 06:16:37 executing program 5: 06:16:37 executing program 1: 06:16:38 executing program 4: 06:16:38 executing program 2: 06:16:38 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 06:16:38 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b46, 0x0) 06:16:38 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r0, r2) 06:16:38 executing program 1: syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@quota='quota'}]}) 06:16:38 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040), 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 06:16:38 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x3f, 0x3}, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000000c0)={0xa14, 0xe93c, 0xe9e7e898, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='\xac\x1b\xb0\xd2\x00', 0xf2d138372113268e, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2010, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0xfffffffc}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 06:16:38 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) 06:16:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x15d4b87) ioctl$FS_IOC_FIEMAP(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1, [{}]}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000140)="409ee368ea76bb712d6eb4f1c42466d200d021f158e2e8175717159808dd57a6814e85d3a18a0a07b64d3583d11441d2378325d837b4135da3ea8cce49a0dfd6ce66ea6d203161cb575b93bb5ccc18b0457cf9eaac9a68bca4a019f90132f25e7072b438ea63079be0ab33b62e67b38b41f6e0c92adaa450c9f2") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x15d4b87) ioctl$FS_IOC_FIEMAP(r1, 0xc020662a, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000080)={0x3, 0x0, 0x3014, 0x8000001, 0xfffffff5, 0xe, 0xfffff449, 0x1}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:16:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gre0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000100)=0x54) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0200ffff", 0x5}], 0x2) 06:16:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0xfffffffffffffeb0, 0xfa00, {{0x2, 0x0, 0x0, @local}, {0x2, 0x0, 0x0, @loopback}}}, 0x48) 06:16:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550d, &(0x7f0000000000)) 06:16:38 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x800) 06:16:39 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 06:16:39 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 06:16:39 executing program 0: 06:16:39 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 06:16:39 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x1}}]}}, &(0x7f0000000240)=""/191, 0x32, 0xbf, 0x8}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 06:16:39 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@rand_addr="ef186357689031949cd15402f500", @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, 0xe8) close(r1) 06:16:39 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 06:16:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x4000000) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:16:39 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept(r1, 0x0, 0x0) 06:16:39 executing program 0: r0 = socket(0x1e, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000040)=0xf) 06:16:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:16:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) 06:16:40 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 06:16:40 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) listen(0xffffffffffffffff, 0x4d) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0}, 0x40000) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:16:40 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@rand_addr="ef186357689031949cd15402f500", @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, 0xe8) 06:16:40 executing program 5: 06:16:40 executing program 5: 06:16:40 executing program 2: 06:16:40 executing program 1: 06:16:40 executing program 4: 06:16:40 executing program 2: 06:16:40 executing program 5: 06:16:40 executing program 1: 06:16:40 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 06:16:40 executing program 5: 06:16:40 executing program 0: 06:16:40 executing program 4: 06:16:40 executing program 2: 06:16:40 executing program 1: 06:16:40 executing program 5: 06:16:41 executing program 5: 06:16:41 executing program 2: 06:16:41 executing program 0: 06:16:41 executing program 1: 06:16:41 executing program 4: 06:16:41 executing program 2: 06:16:41 executing program 5: 06:16:41 executing program 0: 06:16:41 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:16:41 executing program 4: 06:16:41 executing program 1: 06:16:41 executing program 5: 06:16:41 executing program 0: 06:16:41 executing program 2: 06:16:41 executing program 1: 06:16:41 executing program 4: 06:16:41 executing program 5: 06:16:41 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 06:16:42 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 06:16:42 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000080)) 06:16:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) 06:16:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) 06:16:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) 06:16:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x4, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x78, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 06:16:42 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x3}}, 0x24) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000440)="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", 0xffffffffffffff7f, 0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0805b5055e0bcfe8474071") 06:16:42 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x40001d0, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:16:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) 06:16:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x8, 0x209e1e, 0x3, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000340), &(0x7f0000000480)}, 0x20) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) 06:16:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:16:42 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x300, 0x0, &(0x7f0000000040)=0x2c1) 06:16:43 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 06:16:43 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) 06:16:43 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x40001d0, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:16:43 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x2c1) 06:16:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 06:16:43 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) [ 300.222543][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 300.228355][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:16:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae6a, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 06:16:43 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x2c1) 06:16:43 executing program 2: msgrcv(0x0, 0x0, 0x1ab, 0x0, 0x0) 06:16:43 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) 06:16:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) 06:16:43 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x2c1) 06:16:44 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 06:16:44 executing program 2: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x54) 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) 06:16:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004, 0x110400}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x5382, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x13c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:16:44 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x2c1) 06:16:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) 06:16:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4000000000002dd, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000002dd, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) 06:16:44 executing program 1: getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x2c1) 06:16:44 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x0, 0xe7, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xeb, 0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x0, "b0"}, 0x0) 06:16:44 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)=',\x10\xec]$R\xaf\xf18\'\x99\xfc\xa1\xef\xff3\xd5\x9f\x9d\xff;L\xde<\xb8\xe5\xc4\x8c\xba2A\xaa6\x1d\x97,\xa7t3\x14\x1f\x94\x1b\xebzGY\x83\xa8\x0e\xc3Q\xb81\xf4\xea\xa2D\xd3\xf4\'\xea29\x80\xd3\xd7\xc2L\x8a\xe52W$)\x0e,\xf1P\xd4\xb1|z\xe5R\xb5.\xe4\xa7\xad\xd1\xbfRB\xeduL\xa9k') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$team(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@remote, @in=@remote}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) [ 301.500415][ T8704] devpts: called with bogus options [ 301.502540][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 301.511442][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 301.568635][ T8686] ================================================================== [ 301.576806][ T8686] BUG: KCSAN: data-race in ipip_tunnel_xmit / ipip_tunnel_xmit [ 301.584345][ T8686] [ 301.586678][ T8686] read to 0xffff8880add83138 of 8 bytes by task 8691 on cpu 0: [ 301.594230][ T8686] ipip_tunnel_xmit+0x278/0x310 [ 301.599085][ T8686] dev_hard_start_xmit+0xef/0x430 [ 301.604124][ T8686] __dev_queue_xmit+0x14ab/0x1b40 [ 301.609201][ T8686] dev_queue_xmit+0x21/0x30 [ 301.613723][ T8686] neigh_direct_output+0x1f/0x30 [ 301.618676][ T8686] ip6_finish_output2+0x7a2/0xec0 [ 301.623709][ T8686] __ip6_finish_output+0x2d7/0x330 [ 301.628832][ T8686] ip6_finish_output+0x41/0x160 [ 301.633683][ T8686] ip6_output+0xf2/0x280 [ 301.637941][ T8686] ip6_local_out+0x74/0x90 [ 301.642363][ T8686] ip6_send_skb+0x53/0x110 [ 301.646778][ T8686] udp_v6_send_skb.isra.0+0x3ec/0xa70 [ 301.652150][ T8686] udpv6_sendmsg+0x1906/0x1c20 [ 301.656915][ T8686] inet6_sendmsg+0x6d/0x90 [ 301.661333][ T8686] sock_sendmsg+0x9f/0xc0 [ 301.665791][ T8686] ___sys_sendmsg+0x2b7/0x5d0 [ 301.670480][ T8686] __sys_sendmmsg+0x123/0x350 [ 301.675162][ T8686] __x64_sys_sendmmsg+0x64/0x80 [ 301.680059][ T8686] do_syscall_64+0xcc/0x370 [ 301.684569][ T8686] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 301.690450][ T8686] [ 301.692783][ T8686] write to 0xffff8880add83138 of 8 bytes by task 8686 on cpu 1: [ 301.700424][ T8686] ipip_tunnel_xmit+0x28b/0x310 [ 301.705279][ T8686] dev_hard_start_xmit+0xef/0x430 [ 301.710312][ T8686] __dev_queue_xmit+0x14ab/0x1b40 [ 301.715340][ T8686] dev_queue_xmit+0x21/0x30 [ 301.719849][ T8686] neigh_direct_output+0x1f/0x30 [ 301.724789][ T8686] ip6_finish_output2+0x7a2/0xec0 [ 301.729807][ T8686] __ip6_finish_output+0x2d7/0x330 [ 301.734921][ T8686] ip6_finish_output+0x41/0x160 [ 301.739767][ T8686] ip6_output+0xf2/0x280 [ 301.744012][ T8686] ip6_local_out+0x74/0x90 [ 301.748429][ T8686] ip6_send_skb+0x53/0x110 [ 301.752843][ T8686] udp_v6_send_skb.isra.0+0x3ec/0xa70 [ 301.758217][ T8686] udpv6_sendmsg+0x1906/0x1c20 [ 301.762983][ T8686] inet6_sendmsg+0x6d/0x90 [ 301.767404][ T8686] sock_sendmsg+0x9f/0xc0 [ 301.771736][ T8686] ___sys_sendmsg+0x2b7/0x5d0 [ 301.776421][ T8686] __sys_sendmmsg+0x123/0x350 [ 301.781111][ T8686] __x64_sys_sendmmsg+0x64/0x80 [ 301.785979][ T8686] do_syscall_64+0xcc/0x370 [ 301.790488][ T8686] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 301.796369][ T8686] [ 301.797345][ T8704] devpts: called with bogus options [ 301.798691][ T8686] Reported by Kernel Concurrency Sanitizer on: [ 301.798708][ T8686] CPU: 1 PID: 8686 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 [ 301.798715][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.798720][ T8686] ================================================================== [ 301.798728][ T8686] Kernel panic - not syncing: panic_on_warn set ... [ 301.798742][ T8686] CPU: 1 PID: 8686 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 [ 301.798750][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.798755][ T8686] Call Trace: [ 301.798779][ T8686] dump_stack+0x11d/0x181 [ 301.798807][ T8686] panic+0x210/0x640 [ 301.872894][ T8686] ? vprintk_func+0x8d/0x140 [ 301.877471][ T8686] kcsan_report.cold+0xc/0xd [ 301.882068][ T8686] kcsan_setup_watchpoint+0x3fe/0x460 [ 301.887466][ T8686] __tsan_unaligned_write8+0xc4/0x100 [ 301.892852][ T8686] ipip_tunnel_xmit+0x28b/0x310 [ 301.897710][ T8686] dev_hard_start_xmit+0xef/0x430 [ 301.902743][ T8686] __dev_queue_xmit+0x14ab/0x1b40 [ 301.907781][ T8686] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 301.914039][ T8686] dev_queue_xmit+0x21/0x30 [ 301.918551][ T8686] neigh_direct_output+0x1f/0x30 [ 301.923493][ T8686] ip6_finish_output2+0x7a2/0xec0 [ 301.928522][ T8686] ? __rcu_read_unlock+0x66/0x3c0 [ 301.933555][ T8686] __ip6_finish_output+0x2d7/0x330 [ 301.938667][ T8686] ip6_finish_output+0x41/0x160 [ 301.943521][ T8686] ip6_output+0xf2/0x280 [ 301.947775][ T8686] ? __ip6_finish_output+0x330/0x330 [ 301.953063][ T8686] ip6_local_out+0x74/0x90 [ 301.957477][ T8686] ip6_send_skb+0x53/0x110 [ 301.961896][ T8686] udp_v6_send_skb.isra.0+0x3ec/0xa70 [ 301.967300][ T8686] udpv6_sendmsg+0x1906/0x1c20 [ 301.972070][ T8686] ? ip_reply_glue_bits+0xb0/0xb0 [ 301.977108][ T8686] ? apic_timer_interrupt+0xa/0x20 [ 301.982232][ T8686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.988480][ T8686] ? debug_smp_processor_id+0x4c/0x172 [ 301.993964][ T8686] inet6_sendmsg+0x6d/0x90 [ 301.998385][ T8686] ? inet6_sendmsg+0x6d/0x90 [ 302.003079][ T8686] ? inet6_ioctl+0x140/0x140 [ 302.007652][ T8686] sock_sendmsg+0x9f/0xc0 [ 302.011977][ T8686] ___sys_sendmsg+0x2b7/0x5d0 [ 302.016650][ T8686] ? __rcu_read_unlock+0x66/0x3c0 [ 302.021662][ T8686] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 302.027551][ T8686] ? __fget+0xb8/0x1d0 [ 302.031616][ T8686] ? __fget_light+0xaf/0x190 [ 302.036201][ T8686] ? __fdget+0x2c/0x40 [ 302.040256][ T8686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 302.046486][ T8686] __sys_sendmmsg+0x123/0x350 [ 302.051153][ T8686] ? __read_once_size+0x5a/0xe0 [ 302.055988][ T8686] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 302.061702][ T8686] ? _copy_to_user+0x84/0xb0 [ 302.066318][ T8686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 302.072562][ T8686] ? put_timespec64+0x94/0xc0 [ 302.077232][ T8686] __x64_sys_sendmmsg+0x64/0x80 [ 302.082078][ T8686] do_syscall_64+0xcc/0x370 [ 302.086574][ T8686] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 302.092446][ T8686] RIP: 0033:0x45a679 [ 302.096343][ T8686] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.115939][ T8686] RSP: 002b:00007f2a3ad0ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.124336][ T8686] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 302.132377][ T8686] RDX: 04000000000002dd RSI: 00000000200092c0 RDI: 0000000000000005 [ 302.141286][ T8686] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.149289][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a3ad0b6d4 [ 302.157247][ T8686] R13: 00000000004c8f42 R14: 00000000004e0ab0 R15: 00000000ffffffff [ 302.166659][ T8686] Kernel Offset: disabled [ 302.170990][ T8686] Rebooting in 86400 seconds..