[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. 2020/06/26 21:26:07 fuzzer started 2020/06/26 21:26:07 dialing manager at 10.128.0.26:45395 2020/06/26 21:26:08 syscalls: 3118 2020/06/26 21:26:08 code coverage: enabled 2020/06/26 21:26:08 comparison tracing: enabled 2020/06/26 21:26:08 extra coverage: enabled 2020/06/26 21:26:08 setuid sandbox: enabled 2020/06/26 21:26:08 namespace sandbox: enabled 2020/06/26 21:26:08 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/26 21:26:08 fault injection: enabled 2020/06/26 21:26:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/26 21:26:08 net packet injection: enabled 2020/06/26 21:26:08 net device setup: enabled 2020/06/26 21:26:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/26 21:26:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/26 21:26:08 USB emulation: enabled 21:28:28 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) syzkaller login: [ 199.749434][ T6818] IPVS: ftp: loaded support on port[0] = 21 21:28:28 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xfd139274ce24f96d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) [ 199.901024][ T6818] chnl_net:caif_netlink_parms(): no params data found [ 200.012925][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.021799][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.032178][ T6818] device bridge_slave_0 entered promiscuous mode [ 200.044806][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.052547][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.062396][ T6818] device bridge_slave_1 entered promiscuous mode [ 200.102426][ T6818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.116587][ T6818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.166045][ T6818] team0: Port device team_slave_0 added [ 200.187208][ T6818] team0: Port device team_slave_1 added [ 200.195958][ T6956] IPVS: ftp: loaded support on port[0] = 21 21:28:29 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) [ 200.248094][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.255348][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.282063][ T6818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.311761][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.322187][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.349066][ T6818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.459545][ T6818] device hsr_slave_0 entered promiscuous mode [ 200.523498][ T6818] device hsr_slave_1 entered promiscuous mode 21:28:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) write$evdev(r0, &(0x7f0000000180)=[{{}, 0x4, 0xffff}], 0x18) [ 200.598180][ T7006] IPVS: ftp: loaded support on port[0] = 21 [ 200.835705][ T6956] chnl_net:caif_netlink_parms(): no params data found [ 200.882624][ T7100] IPVS: ftp: loaded support on port[0] = 21 21:28:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x2}, 0x10) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 201.143229][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.151348][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.174257][ T6956] device bridge_slave_0 entered promiscuous mode [ 201.223280][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.230602][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.251213][ T6956] device bridge_slave_1 entered promiscuous mode [ 201.334229][ T7006] chnl_net:caif_netlink_parms(): no params data found [ 201.358675][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.429007][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.451303][ T6818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.509103][ T6818] netdevsim netdevsim0 netdevsim1: renamed from eth1 21:28:30 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 201.680389][ T6818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.751642][ T6818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.821855][ T7296] IPVS: ftp: loaded support on port[0] = 21 [ 201.840446][ T7347] IPVS: ftp: loaded support on port[0] = 21 [ 201.847916][ T6956] team0: Port device team_slave_0 added [ 201.878543][ T6956] team0: Port device team_slave_1 added [ 201.942046][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.949483][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.977909][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.997202][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.005233][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.017791][ T7006] device bridge_slave_0 entered promiscuous mode [ 202.029559][ T7100] chnl_net:caif_netlink_parms(): no params data found [ 202.048700][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.057642][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.085923][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.105339][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.116566][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.125902][ T7006] device bridge_slave_1 entered promiscuous mode [ 202.188291][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.203477][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.297116][ T6956] device hsr_slave_0 entered promiscuous mode [ 202.353406][ T6956] device hsr_slave_1 entered promiscuous mode [ 202.393248][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.401145][ T6956] Cannot create hsr debugfs directory [ 202.418120][ T7006] team0: Port device team_slave_0 added [ 202.428844][ T7006] team0: Port device team_slave_1 added [ 202.482371][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.489693][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.517716][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.553647][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.560637][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.588791][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.688949][ T7006] device hsr_slave_0 entered promiscuous mode [ 202.733633][ T7006] device hsr_slave_1 entered promiscuous mode [ 202.773117][ T7006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.781460][ T7006] Cannot create hsr debugfs directory [ 202.798250][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.805948][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.815299][ T7100] device bridge_slave_0 entered promiscuous mode [ 202.836040][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.846997][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.856736][ T7100] device bridge_slave_1 entered promiscuous mode [ 202.991278][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.004552][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.101484][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 203.125815][ T7100] team0: Port device team_slave_0 added [ 203.160027][ T7100] team0: Port device team_slave_1 added [ 203.178356][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 203.305524][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.312535][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.339686][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.357320][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.364503][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.391184][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.483364][ T6956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.527993][ T6818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.559237][ T6956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.601913][ T6956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.670887][ T6956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.735091][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.742179][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.750944][ T7347] device bridge_slave_0 entered promiscuous mode [ 203.816326][ T7100] device hsr_slave_0 entered promiscuous mode [ 203.883599][ T7100] device hsr_slave_1 entered promiscuous mode [ 203.923184][ T7100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.930793][ T7100] Cannot create hsr debugfs directory [ 203.956417][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.967806][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.977596][ T7347] device bridge_slave_1 entered promiscuous mode [ 203.999414][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.008191][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.017590][ T7296] device bridge_slave_0 entered promiscuous mode [ 204.045651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.055931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.087599][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.095183][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.103816][ T7296] device bridge_slave_1 entered promiscuous mode [ 204.131849][ T6818] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.159446][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.199460][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.219521][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.238901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.248265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.258363][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.265879][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.277695][ T7006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.331375][ T7006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.396502][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.420118][ T7347] team0: Port device team_slave_0 added [ 204.427405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.447502][ T7006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.515137][ T7006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.569705][ T7347] team0: Port device team_slave_1 added [ 204.621903][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.629793][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.660732][ T7347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.685376][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.700235][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.716517][ T2578] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.726605][ T2578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.760452][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.768487][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.804477][ T7347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.822577][ T7296] team0: Port device team_slave_0 added [ 204.830542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.841967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.892508][ T7296] team0: Port device team_slave_1 added [ 204.919345][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.927383][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.956948][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.977562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.989775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.998978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.008288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.019435][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.042669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.051444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.095690][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.110538][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.144910][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.158482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.168463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.186021][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.236832][ T7347] device hsr_slave_0 entered promiscuous mode [ 205.284154][ T7347] device hsr_slave_1 entered promiscuous mode [ 205.326851][ T7347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.334662][ T7347] Cannot create hsr debugfs directory [ 205.471579][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.516009][ T7296] device hsr_slave_0 entered promiscuous mode [ 205.553410][ T7296] device hsr_slave_1 entered promiscuous mode [ 205.604125][ T7296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.612001][ T7296] Cannot create hsr debugfs directory [ 205.655364][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.664106][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.671665][ T7100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.731087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.741262][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.750698][ T7100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.818491][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.832609][ T6818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.849746][ T7100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.891922][ T7100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.990987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.002635][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.013053][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.020160][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.030914][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.045372][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.090408][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.100048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.109524][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.116799][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.156033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.165384][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.175554][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.185261][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.195320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.203951][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.229087][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.250360][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.264615][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.274640][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.287632][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.298103][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.324775][ T6956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.336662][ T6956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.350952][ T7347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.415362][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.424613][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.435785][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.444346][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.470742][ T6818] device veth0_vlan entered promiscuous mode [ 206.479631][ T7347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.516886][ T7347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.581602][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.599764][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.609231][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.618563][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.625851][ T2476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.634453][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.642763][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.680543][ T7347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.716215][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.726623][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.735428][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.744147][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.751607][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.760639][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.769676][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.778699][ T2485] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.786055][ T2485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.794197][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.804809][ T6818] device veth1_vlan entered promiscuous mode [ 206.837289][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.895428][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.909067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.918250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.933092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.942137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.979184][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.012043][ T7296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.085875][ T7296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.154599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.162647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.174013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.182499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.192064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.207574][ T7006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.222765][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.252647][ T6818] device veth0_macvtap entered promiscuous mode [ 207.266030][ T7296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.315933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.325694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.336156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.347726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.370674][ T6818] device veth1_macvtap entered promiscuous mode [ 207.382492][ T7296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.456001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.465209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.515414][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.527568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.537825][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.546430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.554725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.562492][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.596390][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.611774][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.635211][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.661139][ T6956] device veth0_vlan entered promiscuous mode [ 207.672077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.681753][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.691169][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.700251][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.716035][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.754945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.763212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.771248][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.781524][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.790616][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.797887][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.805818][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.815645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.826997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.856179][ T6956] device veth1_vlan entered promiscuous mode [ 207.917986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.927712][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.938403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.948124][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.956596][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.965580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.978025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.059543][ T7006] device veth0_vlan entered promiscuous mode [ 208.160953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.170991][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.181642][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.192387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.203693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.219604][ T7347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.243686][ T7006] device veth1_vlan entered promiscuous mode [ 208.252265][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.280209][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.290377][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.315616][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 21:28:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) [ 208.339269][ T6956] device veth0_macvtap entered promiscuous mode [ 208.403987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.412208][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.423316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.432061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.441993][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.459932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.480316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.491016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.500264][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 21:28:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) [ 208.514200][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.522585][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.535757][ T6956] device veth1_macvtap entered promiscuous mode [ 208.591293][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.606659][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.620985][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.633656][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.642072][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.677547][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.688354][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.702021][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.731941][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 21:28:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) [ 208.751180][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.770663][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.787940][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.802651][ T7347] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.812394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 21:28:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) [ 208.843726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.852644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.868473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.888748][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.911149][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.940643][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.952549][ T7006] device veth0_macvtap entered promiscuous mode [ 209.003694][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.024807][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.041452][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 21:28:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000080000000) [ 209.061049][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.070097][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.086948][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.094328][ T3411] bridge0: port 1(bridge_slave_0) entered forwarding state 21:28:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000080000000) [ 209.111371][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.121112][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.138292][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.145583][ T3411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.217397][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.232527][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.250016][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 21:28:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000080000000) [ 209.260735][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.277282][ T2578] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.284487][ T2578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.308629][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.327720][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.353425][ T2578] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.360539][ T2578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.382449][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.416415][ T7006] device veth1_macvtap entered promiscuous mode [ 209.466675][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.483823][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.494281][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.505089][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.514313][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.522692][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.532076][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.613065][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.621952][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.649890][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.660805][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.671640][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.682582][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.695666][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.772688][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.791829][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.801694][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.811780][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.820254][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.836793][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.846120][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.855836][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.874625][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.900467][ T7347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 21:28:38 executing program 1: [ 209.924926][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.960375][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.993203][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.002366][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.014485][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.024849][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.052401][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.066104][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.076411][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.087588][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.100254][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.141879][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.163538][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.172382][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.194917][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.221170][ T7296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.239588][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.257437][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.272107][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.283534][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.291703][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.365961][ T7347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.456868][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.469045][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.486123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.498697][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.573688][ T7100] device veth0_vlan entered promiscuous mode [ 210.584756][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.600934][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.610519][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.628036][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.651219][ T7100] device veth1_vlan entered promiscuous mode [ 210.669308][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.745525][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.765427][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.782544][ T7100] device veth0_macvtap entered promiscuous mode [ 210.830510][ T7100] device veth1_macvtap entered promiscuous mode [ 210.856282][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.866607][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.877637][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.887648][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.929237][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.949076][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.962408][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.978731][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.989172][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.000199][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.011961][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.036723][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.046300][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.060629][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.071809][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.082762][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.096727][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.107347][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.118776][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.130810][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.147702][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.158446][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.168383][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.180028][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.190461][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.199929][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.227422][ T7347] device veth0_vlan entered promiscuous mode [ 211.251336][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.262605][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.347028][ T7347] device veth1_vlan entered promiscuous mode [ 211.411376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.425336][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.434948][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.445239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 21:28:40 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) [ 211.461279][ T7296] device veth0_vlan entered promiscuous mode [ 211.530392][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.554167][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.575830][ T7296] device veth1_vlan entered promiscuous mode [ 211.635242][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.645084][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.657084][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.670749][ T7347] device veth0_macvtap entered promiscuous mode [ 211.719862][ T7347] device veth1_macvtap entered promiscuous mode 21:28:40 executing program 3: [ 211.806427][ T7347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.839959][ T7347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.861447][ T7347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.874216][ T7347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.902779][ T7347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.913408][ T7347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.923994][ T7347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.940289][ T7347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.960281][ T7347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.969640][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.986303][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.001021][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.011754][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.025443][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.041066][ T7296] device veth0_macvtap entered promiscuous mode [ 212.055974][ T7347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.067212][ T7347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.078327][ T7347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.088972][ T7347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.099363][ T7347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.110958][ T7347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.122615][ T7347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.135258][ T7347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.147920][ T7347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.161280][ T7296] device veth1_macvtap entered promiscuous mode [ 212.175769][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.185086][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.196498][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.206398][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.266668][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.277800][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.288939][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.300672][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.310717][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.321718][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.332390][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.343896][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.372750][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.400889][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.420845][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.524447][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.533700][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.545501][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.560861][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.572215][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.583190][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.593351][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.603923][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.614726][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.625726][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.636823][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.647676][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.666179][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.756020][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.768602][ T2578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.033460][ C1] hrtimer: interrupt took 31384 ns 21:28:42 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000031000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000002000109500000000000000e3a333a0daf2f73451c0e17a606fe53014886d2a403918da02ba18ad181867514fe6007790123d3ee7cf43548ee858e085fbdfd43307c529a4ce6be614c2e31789e70233bfd8115efd90c8c48238f8dbe82e16cf8db95f5b068a9e000000000000000008d1301200000000000000e707fa8bd5054b2b2bfe8912c340ad7f83cecb1100000000000000000000000000800018287b87d8807c2877cc420efca65f5deb269dff9198560276c69e4403266b08506e1a39cd4bacb4b8eece9e0a49b72dfcf359d16b1c153e7a5c9df18367809c71dc79c2b2832d167bb643ad70ee492468e584e464fb521a0b5a39f28cea1c96cb879a61f8f10051495538776b9747540400000000000000872b7a73d91c95f501460642f3f482f334366c1f23367fb30d8fbcfde1114429bcf86f1e8b838fea0800dcf3dccc5383ae84e562c00608196cdff76a43bd5db9de77760955586134ecdeafb4481dcb742fa461e981560b4cad0ab9629ccd563bfa351c02661677f01950eccf9fef425a144645c1b612c1df70"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x4000a0, 0x23, 0x5ac484bb51fa106a, &(0x7f00000008c0)="4d50b441e692763513ef8745650200070001123d3dc16cc4eea7c1dbaac327199dbd19bbf3469fd0880f892fd398e4000c00001375bc847d142d1523389037a1d4f5631813cf7037fd584b4af7507a849ce80deea1a57733a5e3730fbef42ab9bedd390775bf809fbcf2a71f32d41a1f7ff3b5483107766a8bd0033d44e6ef7b526c8c67aa9847e283c6cdccbd627ad1094342b1840b506814cb319132533f6d740d9643d0c6dc8481d0c9643dd3e0aa6e1be581aca3ea9377136ce8dd480207fba7af225672c63802beb9", 0x0, 0x23, 0x3f000000, 0x22d, 0x1000000, &(0x7f0000000800)="855e1f503509da63907a16ab30e2697fb350f6505e9c855a88848a245402246265e2b0372e4ed0844be3f7ab613a81d0546c4dfcecddcb8d694566df503bcd3276771c04dafc9c31cc0737014a0d481e9d96ab5e046a3509b8db0ba5f84ce35b3c08db23756435cc56020092587083ca9bf243a70b83c54f518a32803f5f0375fb"}, 0x28) 21:28:42 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000080000000) 21:28:42 executing program 3: 21:28:42 executing program 1: 21:28:42 executing program 2: 21:28:42 executing program 5: 21:28:42 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000200000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x68) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) 21:28:42 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x1}, 0x6d) 21:28:42 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b47", 0xc}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x54e7547e02afa628, @hyper}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 21:28:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0x5}, 0x41800, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) getgid() 21:28:42 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000080000000) 21:28:42 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x1}, 0x6d) [ 213.388273][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.397928][ T8175] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 213.522228][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.712607][ T8179] ------------[ cut here ]------------ [ 213.718485][ T8179] kernel BUG at arch/x86/kvm/mmu/mmu.c:3719! [ 213.758433][ T8179] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 213.764893][ T8179] CPU: 0 PID: 8179 Comm: syz-executor.5 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 213.774694][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.786498][ T8179] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 213.791914][ T8179] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 213.811521][ T8179] RSP: 0018:ffffc90007cf7b30 EFLAGS: 00010212 [ 213.817708][ T8179] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90013efd000 [ 213.825901][ T8179] RDX: 0000000000009b8b RSI: ffffffff8118e14a RDI: 0000000000000001 [ 213.834275][ T8179] RBP: ffff8880581e0040 R08: ffff888058676580 R09: ffffed1015ce719c [ 213.842250][ T8179] R10: ffff8880ae738cdb R11: ffffed1015ce719b R12: 0000000000000000 [ 213.850349][ T8179] R13: 0000000000000001 R14: ffff8880581e0458 R15: 0000000000000000 [ 213.859547][ T8179] FS: 00007efe26e66700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 213.868649][ T8179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.875238][ T8179] CR2: 000000000073f914 CR3: 000000008af99000 CR4: 00000000001426f0 [ 213.883217][ T8179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.891380][ T8179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.899515][ T8179] Call Trace: [ 213.902821][ T8179] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 213.908919][ T8179] kvm_arch_vcpu_ioctl_run+0x4016/0x68d0 [ 213.914591][ T8179] ? kvm_arch_vcpu_runnable+0x6c0/0x6c0 [ 213.920157][ T8179] ? lock_downgrade+0x840/0x840 [ 213.925042][ T8179] ? rcu_read_lock_held_common+0xa0/0xa0 [ 213.931303][ T8179] ? check_preemption_disabled+0x38/0x220 [ 213.937163][ T8179] ? kvm_vcpu_ioctl+0x467/0xe10 [ 213.942023][ T8179] kvm_vcpu_ioctl+0x467/0xe10 [ 213.946713][ T8179] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 213.953143][ T8179] ? ioctl_file_clone+0x180/0x180 [ 213.958340][ T8179] ? check_preemption_disabled+0x38/0x220 [ 213.964487][ T8179] ? __fget_files+0x299/0x400 [ 213.969179][ T8179] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 213.976439][ T8179] ksys_ioctl+0x11a/0x180 [ 213.981187][ T8179] __x64_sys_ioctl+0x6f/0xb0 [ 213.985890][ T8179] do_syscall_64+0x60/0xe0 [ 213.990332][ T8179] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 213.996317][ T8179] RIP: 0033:0x45cb19 [ 214.000322][ T8179] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 214.021231][ T8179] RSP: 002b:00007efe26e65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.030454][ T8179] RAX: ffffffffffffffda RBX: 00000000004e8a00 RCX: 000000000045cb19 [ 214.038552][ T8179] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 214.046825][ T8179] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 21:28:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000537287bb000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x28}}], 0x1, 0x0) 21:28:43 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000080000000) 21:28:43 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x1}, 0x6d) 21:28:43 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 214.054952][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 214.062936][ T8179] R13: 00000000000003d0 R14: 00000000004c68ae R15: 00007efe26e666d4 [ 214.071033][ T8179] Modules linked in: 21:28:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b47", 0xc}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x54e7547e02afa628, @hyper}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 21:28:43 executing program 0: pipe(&(0x7f0000000080)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x100000080000000) 21:28:43 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x1}, 0x6d) [ 214.138834][ T8179] ---[ end trace 2fae8de6e7178cfa ]--- [ 214.145164][ T8179] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 214.151292][ T8179] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 21:28:43 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) [ 214.237198][ T8179] RSP: 0018:ffffc90007cf7b30 EFLAGS: 00010212 [ 214.252380][ T8179] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90013efd000 21:28:43 executing program 0: pipe(&(0x7f0000000080)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x100000080000000) [ 214.313525][ T8179] RDX: 0000000000009b8b RSI: ffffffff8118e14a RDI: 0000000000000001 [ 214.376261][ T8179] RBP: ffff8880581e0040 R08: ffff888058676580 R09: ffffed1015ce719c [ 214.417970][ T8179] R10: ffff8880ae738cdb R11: ffffed1015ce719b R12: 0000000000000000 [ 214.478204][ T8179] R13: 0000000000000001 R14: ffff8880581e0458 R15: 0000000000000000 [ 214.507081][ T8179] FS: 00007efe26e66700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 214.519812][ T8179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.528387][ T8179] CR2: 0000001b2c027000 CR3: 000000008af99000 CR4: 00000000001426f0 [ 214.537299][ T8179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.546188][ T8179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.555387][ T8179] Kernel panic - not syncing: Fatal exception [ 214.563112][ T8179] Kernel Offset: disabled [ 214.567444][ T8179] Rebooting in 86400 seconds..