[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.517948][ T27] audit: type=1800 audit(1576797041.632:25): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.546149][ T27] audit: type=1800 audit(1576797041.632:26): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.621600][ T27] audit: type=1800 audit(1576797041.642:27): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts. 2019/12/19 23:10:49 fuzzer started 2019/12/19 23:10:51 dialing manager at 10.128.0.26:40109 2019/12/19 23:10:51 syscalls: 2683 2019/12/19 23:10:51 code coverage: enabled 2019/12/19 23:10:51 comparison tracing: enabled 2019/12/19 23:10:51 extra coverage: enabled 2019/12/19 23:10:51 setuid sandbox: enabled 2019/12/19 23:10:51 namespace sandbox: enabled 2019/12/19 23:10:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/19 23:10:51 fault injection: enabled 2019/12/19 23:10:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/19 23:10:51 net packet injection: enabled 2019/12/19 23:10:51 net device setup: enabled 2019/12/19 23:10:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/19 23:10:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 23:13:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000001c0)=0x200040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syzkaller login: [ 221.338549][ T8992] IPVS: ftp: loaded support on port[0] = 21 23:13:21 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@nls={'nls', 0x3d, 'iso8859-1'}}, {@nls={'nls', 0x3d, 'koi8-ru'}}]}) [ 221.466845][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 221.549545][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.566125][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.573840][ T8992] device bridge_slave_0 entered promiscuous mode [ 221.597931][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.605064][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.613195][ T8992] device bridge_slave_1 entered promiscuous mode [ 221.627088][ T8995] IPVS: ftp: loaded support on port[0] = 21 23:13:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/147, 0x93}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x893f, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/98, 0x62}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r2, 0x0) [ 221.669627][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.695061][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.762128][ T8992] team0: Port device team_slave_0 added [ 221.815907][ T8992] team0: Port device team_slave_1 added [ 221.879811][ T8995] chnl_net:caif_netlink_parms(): no params data found [ 221.894307][ T8998] IPVS: ftp: loaded support on port[0] = 21 23:13:22 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='#\x00\x00\x00B', 0x5}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\xf6\xff\xff\xff\xff\xff\xff\xff\x00\xe9\xd5\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') socket$kcm(0x29, 0x0, 0x0) [ 221.958413][ T8992] device hsr_slave_0 entered promiscuous mode [ 221.996323][ T8992] device hsr_slave_1 entered promiscuous mode [ 222.111868][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.126088][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.134061][ T8995] device bridge_slave_0 entered promiscuous mode [ 222.158398][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.165473][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.186607][ T8995] device bridge_slave_1 entered promiscuous mode 23:13:22 executing program 4: socket$inet6(0xa, 0x80003, 0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000000000b2dfac3b00018e0000000000000000000000fe880000000000000084447d00010000000000000090be00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}, 0x8}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xe31, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x8}, 0x0) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r5) waitid(0x2, 0x0, &(0x7f00000002c0), 0x8, 0x0) [ 222.245771][ T8995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.260816][ T9000] IPVS: ftp: loaded support on port[0] = 21 [ 222.266983][ T8992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.344944][ T8995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.391809][ T8992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.461036][ T8992] netdevsim netdevsim0 netdevsim2: renamed from eth2 23:13:22 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x6, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000002c0)={r0, &(0x7f00000000c0), 0x713000}, 0x20) [ 222.516130][ T8995] team0: Port device team_slave_0 added [ 222.546858][ T8992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.590676][ T8995] team0: Port device team_slave_1 added [ 222.637502][ T9002] IPVS: ftp: loaded support on port[0] = 21 [ 222.779035][ T8995] device hsr_slave_0 entered promiscuous mode [ 222.817335][ T8995] device hsr_slave_1 entered promiscuous mode [ 222.856287][ T8995] debugfs: Directory 'hsr0' with parent '/' already present! [ 222.884555][ T8998] chnl_net:caif_netlink_parms(): no params data found [ 222.911862][ T9006] IPVS: ftp: loaded support on port[0] = 21 [ 222.970861][ T8995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.009607][ T8995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.057560][ T8995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.114205][ T8995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.211216][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.219079][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.226878][ T8998] device bridge_slave_0 entered promiscuous mode [ 223.248130][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.255186][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.263210][ T8998] device bridge_slave_1 entered promiscuous mode [ 223.313994][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.326254][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.350906][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 223.433450][ T8998] team0: Port device team_slave_0 added [ 223.468165][ T9000] chnl_net:caif_netlink_parms(): no params data found [ 223.486483][ T8998] team0: Port device team_slave_1 added [ 223.505409][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.513676][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.521710][ T9002] device bridge_slave_0 entered promiscuous mode [ 223.531962][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.539091][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.547114][ T9002] device bridge_slave_1 entered promiscuous mode [ 223.579565][ T9006] chnl_net:caif_netlink_parms(): no params data found [ 223.602980][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.623590][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.669412][ T8998] device hsr_slave_0 entered promiscuous mode [ 223.696312][ T8998] device hsr_slave_1 entered promiscuous mode [ 223.746310][ T8998] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.780025][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.797410][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.804587][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.813576][ T9006] device bridge_slave_0 entered promiscuous mode [ 223.823542][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.834759][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.842614][ T9000] device bridge_slave_0 entered promiscuous mode [ 223.877982][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.885049][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.893509][ T9006] device bridge_slave_1 entered promiscuous mode [ 223.900883][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.912631][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.920780][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.927969][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.935572][ T9000] device bridge_slave_1 entered promiscuous mode [ 223.959329][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.015386][ T9002] team0: Port device team_slave_0 added [ 224.026317][ T8998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.068424][ T8998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.116309][ T9000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.127160][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.137798][ T9002] team0: Port device team_slave_1 added [ 224.144717][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.154551][ T8998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.215890][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.226365][ T9000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.255413][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.264577][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.272939][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.280153][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.288570][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.297441][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.305716][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.312805][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.320401][ T8998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.382477][ T9000] team0: Port device team_slave_0 added [ 224.394513][ T9000] team0: Port device team_slave_1 added [ 224.405553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.418650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.426569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.445927][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.471860][ T9006] team0: Port device team_slave_0 added [ 224.480054][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.490189][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.498881][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.507670][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.516249][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.537672][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.546647][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.554937][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.563424][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.571746][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.580582][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.596218][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.604708][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.613482][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.620590][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.628509][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.638388][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.647941][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.654981][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.662630][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.671130][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.710569][ T9002] device hsr_slave_0 entered promiscuous mode [ 224.756279][ T9002] device hsr_slave_1 entered promiscuous mode [ 224.796266][ T9002] debugfs: Directory 'hsr0' with parent '/' already present! [ 224.809800][ T9006] team0: Port device team_slave_1 added [ 224.879510][ T9000] device hsr_slave_0 entered promiscuous mode [ 224.938435][ T9000] device hsr_slave_1 entered promiscuous mode [ 224.996129][ T9000] debugfs: Directory 'hsr0' with parent '/' already present! [ 225.006752][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.029326][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.037216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.045585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.054447][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.063040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.072385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.106967][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.115255][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.169353][ T9006] device hsr_slave_0 entered promiscuous mode [ 225.206360][ T9006] device hsr_slave_1 entered promiscuous mode [ 225.246243][ T9006] debugfs: Directory 'hsr0' with parent '/' already present! [ 225.277690][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.285963][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.330856][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.338725][ T9000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.369158][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.393083][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.401359][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.410706][ T9000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.479291][ T9000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.548544][ T9000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.627806][ T9002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.679313][ T9002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.740118][ T9006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.775404][ T8995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.789369][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.805143][ T9002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.847706][ T9006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.879123][ C0] hrtimer: interrupt took 45508 ns [ 225.898290][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.912250][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.933908][ T8998] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.953376][ T9002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.988276][ T9006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.048376][ T9006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.084081][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.095483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.160120][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.182180][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.211068][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.218261][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.241648][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.255277][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.271212][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.278391][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.294433][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.304709][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.327003][ T9019] hfsplus: unable to change nls mapping [ 226.332825][ T9019] hfsplus: unable to parse mount options [ 226.410709][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.421478][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.442342][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.458597][ T9019] hfsplus: unable to change nls mapping [ 226.477609][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.497290][ T9019] hfsplus: unable to parse mount options [ 226.514226][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.543217][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.562690][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.575926][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.591199][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.622266][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:13:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@nls={'nls', 0x3d, 'iso8859-1'}}, {@nls={'nls', 0x3d, 'koi8-ru'}}]}) [ 226.668244][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.738556][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0 23:13:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) accept4$netrom(r1, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000001c0)=0x200040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003440118bfa30000000000001702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff3d640200000000005502faff037202000404000001007d60b7030000001000006a0a00fe00000000850000002b000000cf000000000000009500000000000000a81bbfa3982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c45841e41f44ae7c5e84e6e3a94b574d2eb38a748355f0b886bd005362df1d4fdd860db580892243533e0f242a46b3009a54f4077db0d4968a384b0f59c7919b89bd9d5fdb68832e986440ff0a7edfa0cb231ccd00000000000000000000007777e2704653f620f5898a327a5ce13419b2272c3c7fea60493073807c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a02fa0892728807982d90e116bba29bb744af81a4cd8f3ad2d9582da7a9ba2ebdd0b424ac416e66af9ebcfea905d37cf226312cb81ec8439ced91f5c93f7f4d256c1d06e7fa69393596301460142f83b422dbe57dfdb06dcf91fd2464cb130033d649d2110cf2e1f4682c24a305447c5e0807af806f952e8df0b1766ec7ecbd061772daa52a38539295d3fea7a7e66944121ff041143edfa9f1bf98d0a38edc345415c42d3d2dd3339d32a4796cd7ce18b68bc37e061d33357d6a39d33c702576cc2a8881015c9e1842fbdf1bb75c663e3d76c7a37c5cd62e12102fd496bc1d54d444237bbf60c0a3bf07d55b3888418de2b2ad23000000004ccddf247dd2c712e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02d0a1c9dd5d9faa8c418f6a63fec7690a9b01737c8caaf78ba58f9eff2e1350cb70eae8f67e9c1774b59aacf705b4f2e1c61301437c794b487da74dc98a66fffe30c849b3759f767c920dbcf006fedbd6b4c5c675f23c6ac05c8cb52af8e2b6e40c1daa5bbe631be3ab1c0bf04c138f9ba5d9c8af1b59560726bed8003a26f8fc9d482f570d79a531d38e42123033d4d17980fefa13817441e93748cb52db364e98e63c30741852f4a649b5f70b83248cde181e35e0f3633ae883e289718847855270381a1b73581fee1bcc9932950c0d3ad38b369cdbb427b4d668fa952ef6770f543997b93c8c794a4fe443eea93d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 226.785490][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.806344][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.856590][ T9032] hfsplus: unable to change nls mapping [ 226.857311][ T8998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.869459][ T9032] hfsplus: unable to parse mount options [ 226.901951][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 23:13:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@nls={'nls', 0x3d, 'iso8859-1'}}, {@nls={'nls', 0x3d, 'koi8-ru'}}]}) [ 226.985014][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.010248][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.042851][ T9000] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.084537][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.126125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.133931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.182491][ T9039] hfsplus: unable to change nls mapping [ 227.218310][ T9039] hfsplus: unable to parse mount options [ 227.296839][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.312435][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 23:13:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@nls={'nls', 0x3d, 'iso8859-1'}}, {@nls={'nls', 0x3d, 'koi8-ru'}}]}) [ 227.383011][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.390179][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.470387][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.520118][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.549813][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.557005][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.571863][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.608460][ T9051] hfsplus: unable to change nls mapping 23:13:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000000000), 0x8, 0x0) [ 227.621713][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.631715][ T9051] hfsplus: unable to parse mount options [ 227.650727][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.657916][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.741777][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.767101][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.792303][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.827158][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.835201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 23:13:27 executing program 1: recvfrom$inet(0xffffffffffffffff, 0x0, 0x1fdc9673, 0x0, 0x0, 0x800e00439) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x323, 0x2002, 0x0, 0x800e00441) shutdown(r0, 0x0) 23:13:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffdb}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') [ 227.860131][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.873954][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.885439][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.892560][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.921294][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.940258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.949577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.958392][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.968916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.978444][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 23:13:28 executing program 0: semop(0x0, &(0x7f0000000100), 0x2d) semctl$SETVAL(0x0, 0x0, 0xf, 0x0) [ 228.017764][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.029622][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.041148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.050049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.067939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.090237][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.104860][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.113412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.127916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.135834][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.145716][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.156532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.164703][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.173046][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.181715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.190176][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.198579][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.209335][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.220655][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.244510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.254154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.263411][ T17] bridge0: port 1(bridge_slave_0) entered blocking state 23:13:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/211, 0xd3}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) shutdown(r2, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000100)=""/222, 0xde}, {0x0}], 0x2) shutdown(r1, 0x0) [ 228.270566][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.287811][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.298806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.307216][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.314275][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.349439][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.358155][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.365556][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.382249][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.391670][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.418177][ T9006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.429179][ T9006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.445025][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.454565][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.470102][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.480388][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.489256][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.497911][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.506644][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.515134][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.523477][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.531741][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.540406][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.550178][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.558309][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.568308][ T9000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.601018][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.609661][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.644619][ T9006] 8021q: adding VLAN 0 to HW filter on device batadv0 23:13:29 executing program 3: 23:13:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 23:13:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = eventfd(0xffffffea) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r5}) 23:13:29 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) clock_gettime(0x4, 0x0) 23:13:29 executing program 5: 23:13:29 executing program 3: 23:13:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000000000b2dfac3b00018e0000000000000000000000fe880000000000000084447d00010000000000000090be00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}, 0x8}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xe31, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x8}, 0x0) 23:13:29 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) clone(0x12102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00R\x06\x96\xd4\x94\xb5\x98\xae\x90\xd7C\xfb\x87\xd9\xddk{\xa4\x10KyfEX\x85\x01\xe0\xf4\x04\x10w\xa4\'\xfd\x11\xbe\xed\x8c\x0fN\x8eiJ\xe6\rZ\xffC\x90~Gu\xe7\xb9(\x9a\x8a\xee\xc1\x8f\xd5\xb3\x88\'\xeb-W\x7f\xfd\x10p\n\xf2c\xe3\xf3\xe1\xb5\xc1\x8e^L\a1\xe1\x98\x00\x00\x00\x00\x00\x00') fchdir(r3) exit(0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) [ 229.763472][ T9121] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:13:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:13:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="cb", 0x1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="ed", 0x1}], 0x1}, 0x0) 23:13:30 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:13:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) 23:13:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) [ 230.511464][ T3669] BUG: unable to handle page fault for address: fffff52002d80000 [ 230.519245][ T3669] #PF: supervisor read access in kernel mode [ 230.525207][ T3669] #PF: error_code(0x0000) - not-present page [ 230.531162][ T3669] PGD 21ffee067 P4D 21ffee067 PUD aa51c067 PMD 5c0cb067 PTE 0 [ 230.538615][ T3669] Oops: 0000 [#1] PREEMPT SMP KASAN [ 230.543899][ T3669] CPU: 1 PID: 3669 Comm: ion_system_heap Not tainted 5.5.0-rc2-syzkaller #0 [ 230.552545][ T3669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.562590][ T3669] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 230.568379][ T3669] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 230.587962][ T3669] RSP: 0018:ffffc9000c227ab8 EFLAGS: 00010216 [ 230.594007][ T3669] RAX: fffff52002d80000 RBX: fffff52002d84000 RCX: ffffffff85de6a29 [ 230.601959][ T3669] RDX: 0000000000000001 RSI: 0000000000020000 RDI: ffffc90016c00000 [ 230.609916][ T3669] RBP: ffffc9000c227ad0 R08: fffff52002d84000 R09: 0000000000004000 [ 230.617896][ T3669] R10: fffff52002d83fff R11: ffffc90016c1ffff R12: fffff52002d80000 [ 230.625850][ T3669] R13: 0000000000020000 R14: 0000000000000000 R15: ffffc9000c227d08 [ 230.633808][ T3669] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 230.642715][ T3669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.649403][ T3669] CR2: fffff52002d80000 CR3: 000000005e8a0000 CR4: 00000000001406e0 [ 230.657359][ T3669] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.665311][ T3669] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.673260][ T3669] Call Trace: [ 230.676535][ T3669] memset+0x24/0x40 [ 230.680329][ T3669] ion_heap_clear_pages+0x49/0x70 [ 230.685334][ T3669] ion_heap_sglist_zero+0x210/0x270 [ 230.690510][ T3669] ? ion_heap_deferred_free+0x630/0x630 [ 230.696041][ T3669] ? mark_lock+0xc2/0x1220 [ 230.700447][ T3669] ? pgprot_writecombine+0x5e/0xf0 [ 230.705540][ T3669] ? pagerange_is_ram_callback+0x130/0x130 [ 230.711322][ T3669] ? ion_heap_deferred_free+0x295/0x630 [ 230.716847][ T3669] ion_heap_buffer_zero+0xf5/0x150 [ 230.721940][ T3669] ion_system_heap_free+0x1eb/0x250 [ 230.727121][ T3669] ion_buffer_destroy+0x159/0x2d0 [ 230.732131][ T3669] ion_heap_deferred_free+0x29d/0x630 [ 230.737500][ T3669] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 230.742867][ T3669] ? trace_hardirqs_on+0x67/0x240 [ 230.747873][ T3669] ? finish_wait+0x260/0x260 [ 230.752668][ T3669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.758916][ T3669] ? __kthread_parkme+0x108/0x1c0 [ 230.763927][ T3669] ? __kasan_check_read+0x11/0x20 [ 230.768944][ T3669] kthread+0x361/0x430 [ 230.772998][ T3669] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 230.778351][ T3669] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 230.784054][ T3669] ret_from_fork+0x24/0x30 [ 230.788451][ T3669] Modules linked in: [ 230.792328][ T3669] CR2: fffff52002d80000 [ 230.796468][ T3669] ---[ end trace 6b87f7b4f26cba39 ]--- [ 230.801909][ T3669] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 230.807697][ T3669] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 230.827278][ T3669] RSP: 0018:ffffc9000c227ab8 EFLAGS: 00010216 [ 230.833326][ T3669] RAX: fffff52002d80000 RBX: fffff52002d84000 RCX: ffffffff85de6a29 [ 230.841277][ T3669] RDX: 0000000000000001 RSI: 0000000000020000 RDI: ffffc90016c00000 [ 230.849227][ T3669] RBP: ffffc9000c227ad0 R08: fffff52002d84000 R09: 0000000000004000 [ 230.857182][ T3669] R10: fffff52002d83fff R11: ffffc90016c1ffff R12: fffff52002d80000 [ 230.865135][ T3669] R13: 0000000000020000 R14: 0000000000000000 R15: ffffc9000c227d08 [ 230.873092][ T3669] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 230.881997][ T3669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.888558][ T3669] CR2: fffff52002d80000 CR3: 000000005e8a0000 CR4: 00000000001406e0 [ 230.896513][ T3669] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.904467][ T3669] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.912417][ T3669] Kernel panic - not syncing: Fatal exception [ 230.919818][ T3669] Kernel Offset: disabled [ 230.924139][ T3669] Rebooting in 86400 seconds..