[ 61.997208][ T26] audit: type=1800 audit(1575083473.641:25): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.017492][ T26] audit: type=1800 audit(1575083473.641:26): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.071412][ T26] audit: type=1800 audit(1575083473.651:27): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 62.568640][ T8979] sshd (8979) used greatest stack depth: 23128 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.14' (ECDSA) to the list of known hosts. 2019/11/30 03:11:23 fuzzer started 2019/11/30 03:11:25 dialing manager at 10.128.0.26:36687 2019/11/30 03:11:25 syscalls: 2592 2019/11/30 03:11:25 code coverage: enabled 2019/11/30 03:11:25 comparison tracing: enabled 2019/11/30 03:11:25 extra coverage: enabled 2019/11/30 03:11:25 setuid sandbox: enabled 2019/11/30 03:11:25 namespace sandbox: enabled 2019/11/30 03:11:25 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/30 03:11:25 fault injection: enabled 2019/11/30 03:11:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/30 03:11:25 net packet injection: enabled 2019/11/30 03:11:25 net device setup: enabled 2019/11/30 03:11:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/30 03:11:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:12:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) 03:12:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syzkaller login: [ 155.667146][ T9080] IPVS: ftp: loaded support on port[0] = 21 [ 155.804936][ T9082] IPVS: ftp: loaded support on port[0] = 21 [ 155.862565][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 155.936883][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.944474][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.953171][ T9080] device bridge_slave_0 entered promiscuous mode [ 155.962869][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.970428][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.978749][ T9080] device bridge_slave_1 entered promiscuous mode 03:12:47 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6, &(0x7f0000000100)=0x80) [ 156.005017][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.019837][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.102144][ T9080] team0: Port device team_slave_0 added [ 156.141635][ T9080] team0: Port device team_slave_1 added [ 156.190034][ T9082] chnl_net:caif_netlink_parms(): no params data found 03:12:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x1c}}, 0x0) [ 156.248515][ T9080] device hsr_slave_0 entered promiscuous mode [ 156.285700][ T9080] device hsr_slave_1 entered promiscuous mode [ 156.375635][ T9086] IPVS: ftp: loaded support on port[0] = 21 [ 156.435320][ T9082] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.442487][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.457245][ T9082] device bridge_slave_0 entered promiscuous mode [ 156.476673][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.483766][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.504043][ T9082] device bridge_slave_1 entered promiscuous mode 03:12:48 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") read$alg(r0, &(0x7f0000000140)=""/39, 0x27) [ 156.571351][ T9082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.599434][ T9082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.617741][ T9080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.638140][ T9088] IPVS: ftp: loaded support on port[0] = 21 [ 156.701149][ T9080] netdevsim netdevsim0 netdevsim1: renamed from eth1 03:12:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00') semctl$GETPID(0x0, 0x0, 0xb, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), 0x4) [ 156.769854][ T9080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.889994][ T9082] team0: Port device team_slave_0 added [ 156.914333][ T9090] IPVS: ftp: loaded support on port[0] = 21 [ 156.933603][ T9080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.984170][ T9082] team0: Port device team_slave_1 added [ 157.024526][ T9093] IPVS: ftp: loaded support on port[0] = 21 [ 157.118075][ T9082] device hsr_slave_0 entered promiscuous mode [ 157.175672][ T9082] device hsr_slave_1 entered promiscuous mode [ 157.215423][ T9082] debugfs: Directory 'hsr0' with parent '/' already present! [ 157.392373][ T9082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.439296][ T9082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.539414][ T9088] chnl_net:caif_netlink_parms(): no params data found [ 157.553469][ T9082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.611500][ T9082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.673907][ T9086] chnl_net:caif_netlink_parms(): no params data found [ 157.781188][ T9093] chnl_net:caif_netlink_parms(): no params data found [ 157.810695][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.817894][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.826856][ T9086] device bridge_slave_0 entered promiscuous mode [ 157.839907][ T9090] chnl_net:caif_netlink_parms(): no params data found [ 157.876038][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.883095][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.891000][ T9086] device bridge_slave_1 entered promiscuous mode [ 157.898361][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.906237][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.913874][ T9088] device bridge_slave_0 entered promiscuous mode [ 157.952857][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.960741][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.968568][ T9090] device bridge_slave_0 entered promiscuous mode [ 157.979172][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.986664][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.994351][ T9088] device bridge_slave_1 entered promiscuous mode [ 158.010590][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.018028][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.026591][ T9093] device bridge_slave_0 entered promiscuous mode [ 158.039048][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.047055][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.054698][ T9093] device bridge_slave_1 entered promiscuous mode [ 158.062441][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.071964][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.079825][ T9090] device bridge_slave_1 entered promiscuous mode [ 158.103640][ T9086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.133612][ T9088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.147204][ T9086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.174851][ T9090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.186108][ T9088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.197610][ T9090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.209450][ T9093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.228697][ T9086] team0: Port device team_slave_0 added [ 158.236328][ T9086] team0: Port device team_slave_1 added [ 158.257668][ T9093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.275195][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.303770][ T9088] team0: Port device team_slave_0 added [ 158.334658][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.343292][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.358045][ T9088] team0: Port device team_slave_1 added [ 158.370828][ T9090] team0: Port device team_slave_0 added [ 158.384955][ T9090] team0: Port device team_slave_1 added [ 158.428613][ T9086] device hsr_slave_0 entered promiscuous mode [ 158.476029][ T9086] device hsr_slave_1 entered promiscuous mode [ 158.515627][ T9086] debugfs: Directory 'hsr0' with parent '/' already present! [ 158.525065][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.550902][ T9093] team0: Port device team_slave_0 added [ 158.598102][ T9090] device hsr_slave_0 entered promiscuous mode [ 158.645783][ T9090] device hsr_slave_1 entered promiscuous mode [ 158.685357][ T9090] debugfs: Directory 'hsr0' with parent '/' already present! [ 158.695810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.704350][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.712928][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.720202][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.734091][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.743321][ T9093] team0: Port device team_slave_1 added [ 158.790600][ T9088] device hsr_slave_0 entered promiscuous mode [ 158.835650][ T9088] device hsr_slave_1 entered promiscuous mode [ 158.875340][ T9088] debugfs: Directory 'hsr0' with parent '/' already present! [ 158.920007][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.931807][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.940759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.949348][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.956446][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.963985][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.998832][ T9090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.047847][ T9090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.097923][ T9090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.158875][ T9086] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.211261][ T9090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.269253][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.329164][ T9093] device hsr_slave_0 entered promiscuous mode [ 159.386235][ T9093] device hsr_slave_1 entered promiscuous mode [ 159.445510][ T9093] debugfs: Directory 'hsr0' with parent '/' already present! [ 159.453112][ T9086] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.523886][ T9088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.591849][ T9088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.647614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.658715][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.667320][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.675729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.683951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.692815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.702640][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.718471][ T9082] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.726368][ T9086] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.795584][ T9088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.839700][ T9088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.915309][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.915871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.931854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.942583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.951532][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.958631][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.971106][ T9080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.983752][ T9080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.991948][ T9086] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.070349][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.078476][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.087412][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.095743][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.104192][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.114114][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.121214][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.128772][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.182559][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.191316][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.202552][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.228789][ T9093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.267274][ T9093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.307694][ T9093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.354112][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.364517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.372607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.383426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.391240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.400317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.408994][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.417555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.426210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.434411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.457438][ T9093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.507342][ T9082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.549638][ T9090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.588179][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.596433][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.603837][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.611746][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.632546][ T9090] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.644770][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.677853][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.702221][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.730430][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.743954][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.751158][ T9098] bridge0: port 1(bridge_slave_0) entered forwarding state 03:12:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) [ 160.776817][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.786085][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.801807][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.808928][ T9098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.841424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.850920][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.860977][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.873475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.882200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:12:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) [ 160.892013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.902194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.928646][ T9088] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.987047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:12:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) [ 161.048778][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.059315][ C0] hrtimer: interrupt took 29916 ns [ 161.072070][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.081142][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.092654][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.105067][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.120431][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.130272][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.144374][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.153457][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.160600][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.169420][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.178280][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.187267][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state 03:12:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0c14fffffffffffff8070000000000000000000000080007000c000000", 0x24) [ 161.194358][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.238231][ T9090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 03:12:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 161.277349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.288145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.317530][ T9086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.356861][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.387561][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.396755][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 03:12:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0c14fffffffffffff8070000000000000000000000080007000c000000", 0x24) [ 161.411856][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.419456][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.433815][ T9093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.493316][ T9090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.506886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.515083][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.524431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.553700][ T9086] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.584978][ T9093] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.610186][ T9088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.637728][ T9088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 03:12:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0c14fffffffffffff8070000000000000000000000080007000c000000", 0x24) [ 161.674355][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.697891][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.723367][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.748169][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.756928][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.764914][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.773552][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.782694][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.863037][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.871923][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.889349][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.906437][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.913523][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.935990][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.944730][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.958789][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.965926][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.973659][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.982553][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.991048][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.998171][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.006056][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.014538][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.022054][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.031775][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.040437][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.056937][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.077693][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.086809][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.108513][ T9088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.131896][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.140614][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.155967][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.164495][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.171618][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.186593][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.195165][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.204015][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.212620][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.221411][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.230269][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.238946][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.247568][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.265916][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.274673][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.283379][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.292092][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.305104][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.328856][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.336723][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.345073][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.353474][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.362286][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.399682][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.457590][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.482560][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.508068][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.525893][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.533393][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.570670][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 03:12:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0c14fffffffffffff8070000000000000000000000080007000c000000", 0x24) 03:12:54 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6, &(0x7f0000000100)=0x80) 03:12:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:54 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") read$alg(r0, &(0x7f0000000140)=""/39, 0x27) 03:12:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x1c}}, 0x0) 03:12:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:54 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6, &(0x7f0000000100)=0x80) 03:12:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x1c}}, 0x0) 03:12:54 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") read$alg(r0, &(0x7f0000000140)=""/39, 0x27) 03:12:54 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6, &(0x7f0000000100)=0x80) 03:12:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x1c}}, 0x0) 03:12:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:55 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000000000)=""/1}, 0x18) 03:12:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d40)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/75) 03:12:55 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") read$alg(r0, &(0x7f0000000140)=""/39, 0x27) [ 163.720472][ T9223] ================================================================== [ 163.728811][ T9223] BUG: KASAN: vmalloc-out-of-bounds in kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 163.737414][ T9223] Write of size 4 at addr ffffc90002a6c050 by task syz-executor.3/9223 [ 163.745877][ T9223] [ 163.748227][ T9223] CPU: 0 PID: 9223 Comm: syz-executor.3 Not tainted 5.4.0-next-20191129-syzkaller #0 [ 163.757687][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.767748][ T9223] Call Trace: [ 163.767787][ T9223] dump_stack+0x197/0x210 [ 163.767809][ T9223] ? kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 163.767829][ T9223] print_address_description.constprop.0.cold+0x5/0x30b [ 163.767845][ T9223] ? kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 163.767859][ T9223] ? kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 163.767879][ T9223] __kasan_report.cold+0x1b/0x41 [ 163.775506][ T9223] ? kvm_dev_ioctl_get_cpuid+0xd1/0xb47 [ 163.775522][ T9223] ? kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 163.775538][ T9223] kasan_report+0x12/0x20 [ 163.775554][ T9223] __asan_report_store4_noabort+0x17/0x20 [ 163.775568][ T9223] kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 163.775590][ T9223] ? kvm_vcpu_ioctl_get_cpuid2+0x1c0/0x1c0 [ 163.775612][ T9223] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 163.775627][ T9223] ? _copy_from_user+0x12c/0x1a0 [ 163.775652][ T9223] kvm_arch_dev_ioctl+0x300/0x4b0 [ 163.853107][ T9223] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 163.859187][ T9223] ? tomoyo_path_number_perm+0x454/0x520 [ 163.864839][ T9223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 163.871103][ T9223] ? tomoyo_path_number_perm+0x25e/0x520 [ 163.876753][ T9223] kvm_dev_ioctl+0x127/0x17d0 [ 163.881456][ T9223] ? kvm_put_kvm+0xcc0/0xcc0 [ 163.886173][ T9223] ? kvm_put_kvm+0xcc0/0xcc0 [ 163.890780][ T9223] do_vfs_ioctl+0x977/0x14e0 [ 163.895388][ T9223] ? compat_ioctl_preallocate+0x220/0x220 [ 163.901130][ T9223] ? __fget+0x37f/0x550 [ 163.905319][ T9223] ? ksys_dup3+0x3e0/0x3e0 [ 163.905337][ T9223] ? ns_to_kernel_old_timeval+0x100/0x100 [ 163.905356][ T9223] ? tomoyo_file_ioctl+0x23/0x30 [ 163.905371][ T9223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.905386][ T9223] ? security_file_ioctl+0x8d/0xc0 [ 163.905401][ T9223] ksys_ioctl+0xab/0xd0 [ 163.905418][ T9223] __x64_sys_ioctl+0x73/0xb0 [ 163.905452][ T9223] do_syscall_64+0xfa/0x790 [ 163.905479][ T9223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.951080][ T9223] RIP: 0033:0x45a679 03:12:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:12:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e31, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) 03:12:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) symlinkat(0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 163.951100][ T9223] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 163.951108][ T9223] RSP: 002b:00007f6c72421c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.951121][ T9223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 163.951129][ T9223] RDX: 0000000020000080 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 163.951137][ T9223] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 163.951144][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c724226d4 [ 163.951158][ T9223] R13: 00000000004c3b7d R14: 00000000004d8510 R15: 00000000ffffffff [ 163.969319][ T9228] kobject: 'nbd0' (0000000014499f69): kobject_uevent_env [ 163.974757][ T9223] [ 163.974762][ T9223] [ 163.974766][ T9223] Memory state around the buggy address: [ 163.974780][ T9223] ffffc90002a6bf00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 163.974790][ T9223] ffffc90002a6bf80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 163.974800][ T9223] >ffffc90002a6c000: 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 [ 163.974807][ T9223] ^ [ 163.974817][ T9223] ffffc90002a6c080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 163.974827][ T9223] ffffc90002a6c100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 163.974833][ T9223] ================================================================== [ 163.974838][ T9223] Disabling lock debugging due to kernel taint [ 164.002975][ T9223] Kernel panic - not syncing: panic_on_warn set ... [ 164.026401][ T4093] kobject: 'loop5' (00000000427cadb3): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 164.030684][ T9223] CPU: 0 PID: 9223 Comm: syz-executor.3 Tainted: G B 5.4.0-next-20191129-syzkaller #0 [ 164.030691][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.030702][ T9223] Call Trace: [ 164.053520][ T4093] kobject: 'loop2' (000000007a31f2b0): kobject_uevent_env [ 164.057329][ T9223] dump_stack+0x197/0x210 [ 164.057345][ T9223] panic+0x2e3/0x75c [ 164.057356][ T9223] ? add_taint.cold+0x16/0x16 [ 164.057372][ T9223] ? kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 164.057385][ T9223] ? preempt_schedule+0x4b/0x60 [ 164.057397][ T9223] ? ___preempt_schedule+0x16/0x18 [ 164.057417][ T9223] ? trace_hardirqs_on+0x5e/0x240 [ 164.100850][ T9233] kobject: 'nbd5' (0000000026dc0f83): kobject_uevent_env [ 164.102543][ T9223] ? kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 164.102558][ T9223] end_report+0x47/0x4f [ 164.102577][ T9223] ? kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 164.122619][ T4093] kobject: 'loop2' (000000007a31f2b0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 164.130121][ T9223] __kasan_report.cold+0xe/0x41 [ 164.130138][ T9223] ? kvm_dev_ioctl_get_cpuid+0xd1/0xb47 [ 164.130150][ T9223] ? kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 164.130162][ T9223] kasan_report+0x12/0x20 [ 164.130175][ T9223] __asan_report_store4_noabort+0x17/0x20 [ 164.130188][ T9223] kvm_dev_ioctl_get_cpuid+0xacc/0xb47 [ 164.130204][ T9223] ? kvm_vcpu_ioctl_get_cpuid2+0x1c0/0x1c0 [ 164.130226][ T9223] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.148896][ T9233] kobject: 'nbd5' (0000000026dc0f83): fill_kobj_path: path = '/devices/virtual/block/nbd5' [ 164.150672][ T9223] ? _copy_from_user+0x12c/0x1a0 [ 164.150690][ T9223] kvm_arch_dev_ioctl+0x300/0x4b0 [ 164.150713][ T9223] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 164.228475][ T4093] kobject: 'loop4' (00000000a166fdfe): kobject_uevent_env [ 164.233378][ T9223] ? tomoyo_path_number_perm+0x454/0x520 [ 164.233396][ T9223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 164.233413][ T9223] ? tomoyo_path_number_perm+0x25e/0x520 [ 164.247242][ T9228] kobject: 'nbd0' (0000000014499f69): fill_kobj_path: path = '/devices/virtual/block/nbd0' [ 164.248898][ T9223] kvm_dev_ioctl+0x127/0x17d0 [ 164.248920][ T9223] ? kvm_put_kvm+0xcc0/0xcc0 [ 164.248935][ T9223] ? kvm_put_kvm+0xcc0/0xcc0 [ 164.248955][ T9223] do_vfs_ioctl+0x977/0x14e0 [ 164.293589][ T4093] kobject: 'loop4' (00000000a166fdfe): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 164.294075][ T9223] ? compat_ioctl_preallocate+0x220/0x220 [ 164.338545][ T4093] kobject: 'loop5' (00000000427cadb3): kobject_uevent_env [ 164.340034][ T9223] ? __fget+0x37f/0x550 [ 164.340053][ T9223] ? ksys_dup3+0x3e0/0x3e0 [ 164.371595][ T9223] ? ns_to_kernel_old_timeval+0x100/0x100 [ 164.377329][ T9223] ? tomoyo_file_ioctl+0x23/0x30 [ 164.382279][ T9223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 164.388533][ T9223] ? security_file_ioctl+0x8d/0xc0 [ 164.393652][ T9223] ksys_ioctl+0xab/0xd0 [ 164.397818][ T9223] __x64_sys_ioctl+0x73/0xb0 [ 164.402427][ T9223] do_syscall_64+0xfa/0x790 [ 164.402890][ T4093] kobject: 'loop5' (00000000427cadb3): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 164.406932][ T9223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.406944][ T9223] RIP: 0033:0x45a679 [ 164.406957][ T9223] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.406963][ T9223] RSP: 002b:00007f6c72421c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.406973][ T9223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 164.406979][ T9223] RDX: 0000000020000080 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 164.406985][ T9223] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 164.406991][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c724226d4 [ 164.406998][ T9223] R13: 00000000004c3b7d R14: 00000000004d8510 R15: 00000000ffffffff [ 164.418554][ T9223] Kernel Offset: disabled [ 164.500738][ T9223] Rebooting in 86400 seconds..