Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. 2019/12/19 09:12:49 fuzzer started 2019/12/19 09:12:52 dialing manager at 10.128.0.26:41963 2019/12/19 09:12:52 syscalls: 2522 2019/12/19 09:12:52 code coverage: enabled 2019/12/19 09:12:52 comparison tracing: enabled 2019/12/19 09:12:52 extra coverage: enabled 2019/12/19 09:12:52 setuid sandbox: enabled 2019/12/19 09:12:52 namespace sandbox: enabled 2019/12/19 09:12:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/19 09:12:52 fault injection: enabled 2019/12/19 09:12:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/19 09:12:52 net packet injection: enabled 2019/12/19 09:12:52 net device setup: enabled 2019/12/19 09:12:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/19 09:12:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:14:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5428, 0x0) 09:14:46 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0xffffffffffffffc4, 0x2) syzkaller login: [ 198.972509][ T9417] IPVS: ftp: loaded support on port[0] = 21 [ 199.113122][ T9417] chnl_net:caif_netlink_parms(): no params data found [ 199.160287][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.168190][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.176546][ T9417] device bridge_slave_0 entered promiscuous mode [ 199.185497][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.188813][ T9419] IPVS: ftp: loaded support on port[0] = 21 [ 199.192745][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.206927][ T9417] device bridge_slave_1 entered promiscuous mode [ 199.231431][ T9417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.244131][ T9417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 09:14:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0, 0x1d9}, {&(0x7f0000000200)=ANY=[]}], 0x3}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x10b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffe9c}, {&(0x7f0000000140)=""/64, 0xfffffffffffffdbe}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 199.277680][ T9417] team0: Port device team_slave_0 added [ 199.285552][ T9417] team0: Port device team_slave_1 added [ 199.359280][ T9417] device hsr_slave_0 entered promiscuous mode [ 199.416349][ T9417] device hsr_slave_1 entered promiscuous mode [ 199.455427][ T9421] IPVS: ftp: loaded support on port[0] = 21 09:14:46 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f00000001c0)=""/163, 0xa3) [ 199.588387][ T9417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.631465][ T9417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.700684][ T9417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.754226][ T9424] IPVS: ftp: loaded support on port[0] = 21 [ 199.788539][ T9417] netdevsim netdevsim0 netdevsim3: renamed from eth3 09:14:46 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) [ 199.832471][ T9419] chnl_net:caif_netlink_parms(): no params data found [ 199.952458][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.978106][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.998661][ T9419] device bridge_slave_0 entered promiscuous mode [ 200.009863][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.038202][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.058108][ T9419] device bridge_slave_1 entered promiscuous mode [ 200.091807][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.099087][ T9417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.107054][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.114327][ T9417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.133522][ T9426] IPVS: ftp: loaded support on port[0] = 21 09:14:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00@z\x18Sb\xb0\x7f\x88\xa2\xf4V~\x81U\xea\xfb\x0e\xef\xb3\xf8\xf2\xb5\x98\xe5\x93~z\xa3\x17\xb2\xb0#]Z\xe4$\x8b\xcb\xc5F-\x80\xb0\xef\x84\xe3[\x05\xb5\xb9\x9c\xa7\x03\x91\xbbqy\x970\x8d\t\x93\'\x97x\xbflB\x00\x9e\xf2\xe5\xb5\x83\xa46\xc7lQ\xa5\x81\xd4\xd3z\xfex8\xf1Te\x9f\xcbL9\xcc\xdf\'\xfd$\xcdp\xb2\xb8\xb85\x85Y\xbbi\xc7\x137\\', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000010a000201) [ 200.185181][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.194780][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.228638][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.250602][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.387905][ T9419] team0: Port device team_slave_0 added [ 200.398524][ T9431] IPVS: ftp: loaded support on port[0] = 21 [ 200.405782][ T9419] team0: Port device team_slave_1 added [ 200.425744][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 200.499571][ T9419] device hsr_slave_0 entered promiscuous mode [ 200.538379][ T9419] device hsr_slave_1 entered promiscuous mode [ 200.596347][ T9419] debugfs: Directory 'hsr0' with parent '/' already present! [ 200.644065][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.651377][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.659669][ T9421] device bridge_slave_0 entered promiscuous mode [ 200.687420][ T9424] chnl_net:caif_netlink_parms(): no params data found [ 200.708656][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.716730][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.724396][ T9421] device bridge_slave_1 entered promiscuous mode [ 200.766332][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.794066][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.801430][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.810150][ T9424] device bridge_slave_0 entered promiscuous mode [ 200.821529][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.843490][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.851027][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.859466][ T9424] device bridge_slave_1 entered promiscuous mode [ 200.884307][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.938913][ T9419] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.010075][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.023936][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.039814][ T9426] chnl_net:caif_netlink_parms(): no params data found [ 201.050838][ T9421] team0: Port device team_slave_0 added [ 201.062659][ T9421] team0: Port device team_slave_1 added [ 201.068788][ T9419] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.107785][ T9419] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.173193][ T9419] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.228581][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.237447][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.248326][ T9417] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.319446][ T9421] device hsr_slave_0 entered promiscuous mode [ 201.376297][ T9421] device hsr_slave_1 entered promiscuous mode [ 201.416476][ T9421] debugfs: Directory 'hsr0' with parent '/' already present! [ 201.434641][ T9424] team0: Port device team_slave_0 added [ 201.482445][ T9424] team0: Port device team_slave_1 added [ 201.493211][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.501999][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.511877][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.519023][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.528506][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.537332][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.545779][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.552868][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.605153][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.612945][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.621083][ T9426] device bridge_slave_0 entered promiscuous mode [ 201.629215][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.636409][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.644398][ T9426] device bridge_slave_1 entered promiscuous mode [ 201.652299][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.664845][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.728598][ T9424] device hsr_slave_0 entered promiscuous mode [ 201.776565][ T9424] device hsr_slave_1 entered promiscuous mode [ 201.816577][ T9424] debugfs: Directory 'hsr0' with parent '/' already present! [ 201.843294][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.851986][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.860842][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.869749][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.903355][ T9421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.962463][ T9421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.007390][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.015296][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.024352][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.043646][ T9426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.061322][ T9417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.072559][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.085101][ T9421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.140232][ T9431] chnl_net:caif_netlink_parms(): no params data found [ 202.149754][ T9421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.219882][ T9426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.239989][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.248293][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.272155][ T9424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.332858][ T9424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.369820][ T9424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.449196][ T9424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.490708][ T9426] team0: Port device team_slave_0 added [ 202.499147][ T9426] team0: Port device team_slave_1 added [ 202.524165][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.533164][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.541586][ T9431] device bridge_slave_0 entered promiscuous mode [ 202.550890][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.558710][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.575556][ T9417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.587285][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.595568][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.604113][ T9431] device bridge_slave_1 entered promiscuous mode [ 202.633045][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.648367][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.728147][ T9426] device hsr_slave_0 entered promiscuous mode [ 202.746247][ T9426] device hsr_slave_1 entered promiscuous mode [ 202.786222][ T9426] debugfs: Directory 'hsr0' with parent '/' already present! [ 202.808180][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.881137][ T9431] team0: Port device team_slave_0 added [ 202.907862][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.915733][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:14:50 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002000)=[{&(0x7f0000000b00)}, {&(0x7f0000000c00)="4e532e9267b19e48e9e93b87c636be75a2618711a15a7db51f19eee9370bdece1c074ab78c21d1523a", 0x29}, {&(0x7f0000000c80)="c49610a438691c06b051b53a91dca3b924f0f09c0955b2a341ff9b6627fa131b6494fc6966d9814461e5e977793664919184fce68396645028a41017e0b874f389f146dddd8c16526127c8c077839b93d08cbfc410c5d9120e1cfbfb8317f585206f00d1c548fb66d6fd080b65644ea0059b85270a3245670294885f052019882e74906ffb9dd1044fbaf5fcea4fe98a41f73ee0d9b8ee6ca544048f29891231a55041c312a2c29bf39509eb1e7d8a10870b93caf410b6d3b314bf6b8a484800d2ceab76aac1f41d9549f1ad431f360d2663e154d63db68bebd4f5048a983565d1d088306c0a", 0xe6}, {&(0x7f0000000340)='/', 0x1}, {0x0}, {&(0x7f0000000f80)}], 0x6) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c, 0x800) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x55e) ftruncate(r1, 0x2008002) semget(0x2, 0x0, 0x601) sendfile(r0, r1, 0x0, 0x8482) r2 = open(0x0, 0x286000, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) bind$alg(r2, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x2, 0x2, 0x1000, 0x2000, &(0x7f000048c000/0x2000)=nil}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0xcfe61000) io_setup(0xffff, &(0x7f0000000000)) open(&(0x7f0000000780)='./bus\x00', 0x2, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0) [ 202.954382][ T9431] team0: Port device team_slave_1 added [ 202.974620][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.998031][ T9426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.042960][ T9426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.108724][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.117585][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.126035][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.133096][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.149052][ T9426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.208727][ T9426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.273028][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.281109][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.289958][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.298498][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.305530][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state 09:14:50 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0xbd2e9051965deeef, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xfffffffffffffef7) accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffe0e) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U+', 0x4}, 0x28, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/udplite\x00') lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f00000003c0)={0x0, 0x0, [0xf106, 0x0, 0x5, 0x8000], 0x5de}) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='security.ima\x00', 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 203.337315][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 09:14:50 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101141, 0x0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000180)=""/254) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2b3) splice(r0, 0x0, r5, 0x0, 0x10005, 0x0) [ 203.389880][ T9431] device hsr_slave_0 entered promiscuous mode [ 203.452508][ T9431] device hsr_slave_1 entered promiscuous mode [ 203.501202][ T9431] debugfs: Directory 'hsr0' with parent '/' already present! [ 203.508907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.517786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.526583][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.535040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.544037][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.552741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.561972][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.606124][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.614898][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.625051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.633838][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.660136][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.668435][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.697472][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.706895][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.726597][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.769399][ T9431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.798785][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.808308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.817686][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.824779][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.832810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.855090][ T9426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.868733][ T9431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.908928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.918073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.927752][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.934840][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.942734][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.952465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.963248][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.984499][ T9431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.035594][ T9431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.087959][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.097101][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.105680][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.114453][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.123306][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.133558][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.141075][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.149075][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.159599][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.180533][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.197797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.206920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.215111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.224112][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.236546][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.267507][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.275620][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.284537][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.301638][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.310842][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.317989][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.328949][ T9426] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.363296][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.373784][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.382726][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.391693][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.398813][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.407159][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.415720][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.424222][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.431282][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.439326][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.448500][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.457131][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.464191][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.472101][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.522924][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.532535][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.554475][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.575069][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.582772][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.592549][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 09:14:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000018c0)="23000000420081aee405e9a4000000000000c6ff07d8004003000000000000002814c96f84", 0x25}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 204.617824][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 09:14:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000007000100667100003400080008001400000040b1080009000000000008000300000200000800050000000000080001000000000008000700000000004c9fd92efb40c02c50c5af8eec939b0bba96de14ce758e1158d6c34e560ccd1f336ed81891f79dc1621c255faf05c9f3d17da76f237409f851933d00fe4b89000000000000000000"], 0x60}}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) [ 204.658036][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.679140][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.697110][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.739556][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.761732][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.771422][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.780001][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.788813][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.805018][ T9424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.818915][ T9424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 09:14:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000007000100667100003400080008001400000040b1080009000000000008000300000200000800050000000000080001000000000008000700000000004c9fd92efb40c02c50c5af8eec939b0bba96de14ce758e1158d6c34e560ccd1f336ed81891f79dc1621c255faf05c9f3d17da76f237409f851933d00fe4b89000000000000000000"], 0x60}}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) [ 204.847256][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.874081][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.882730][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.904389][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.919724][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.928971][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.937497][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.945827][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.954537][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.966171][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.974478][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 09:14:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6431) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/35, 0x3) socketpair(0x5, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/50, 0x32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x85, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xff, @loopback}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/50, 0x32) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x5, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8040fffffffd) 09:14:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) [ 205.016479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.023985][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.052221][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.132943][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.216699][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.298745][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.306354][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.313988][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.323589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.352935][ T9431] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.372088][ T9426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.397485][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.413473][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.422676][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.429818][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.439188][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.448552][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.457463][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.464562][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.497177][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.512203][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.521676][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.531331][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.541440][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.570881][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.589521][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.610785][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.620492][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.628846][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.667042][ T9431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.684162][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.696050][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.704804][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.741541][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.752067][ T9436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.763300][ T9436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 09:14:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) setgid(0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x8f6a5fa987233c99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:14:55 executing program 0: 09:14:55 executing program 4: socket(0x2, 0xc003, 0x0) socket(0x2, 0x4003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0xc003, 0x0) connect$unix(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/599], 0x10) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 09:14:55 executing program 1: 09:14:55 executing program 3: 09:14:55 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 09:14:55 executing program 1: 09:14:55 executing program 3: 09:14:55 executing program 0: [ 208.343448][ T9511] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 09:14:55 executing program 1: 09:14:55 executing program 4: 09:14:55 executing program 3: 09:14:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) setgid(0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x8f6a5fa987233c99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:14:55 executing program 0: 09:14:55 executing program 4: 09:14:55 executing program 5: 09:14:55 executing program 1: 09:14:55 executing program 3: 09:14:55 executing program 3: 09:14:55 executing program 0: 09:14:55 executing program 1: 09:14:55 executing program 4: 09:14:56 executing program 5: 09:14:56 executing program 4: 09:14:56 executing program 2: 09:14:56 executing program 1: 09:14:56 executing program 3: 09:14:56 executing program 5: 09:14:56 executing program 0: 09:14:56 executing program 1: 09:14:56 executing program 3: 09:14:56 executing program 5: 09:14:56 executing program 0: 09:14:56 executing program 2: 09:14:56 executing program 4: 09:14:56 executing program 1: 09:14:56 executing program 5: 09:14:56 executing program 2: 09:14:56 executing program 4: 09:14:56 executing program 0: 09:14:56 executing program 3: 09:14:56 executing program 1: 09:14:56 executing program 2: 09:14:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001240)={0xa0, 0x0, 0x2}, 0xa0) 09:14:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:14:56 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000100)={0xa0, 0x0, 0x2}, 0xa0) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x6}, 0x50) 09:14:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCSETAW(r0, 0x8924, &(0x7f00000000c0)) 09:14:56 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:14:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) 09:14:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc008551b, 0x0) 09:14:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:14:57 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@local, 0x0, 0x0, 0x0, 0x12, 0x0, 0x5}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:14:57 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 09:14:57 executing program 1: r0 = memfd_create(&(0x7f0000000300)='#&}wlan1:em1!\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\xee \x83\xd8\xc6\x93\xc4\x98\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x7}, 0x269) 09:14:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00@z\x18Sb\xb0\x7f\x88\xa2\xf4V~\x81U\xea\xfb\x0e\xef\xb3\xf8\xf2\xb5\x98\xe5\x93~z\xa3\x17\xb2\xb0#]Z\xe4$\x8b\xcb\xc5F-\x80\xb0\xef\x84\xe3[\x05\xb5\xb9\x9c\xa7\x03\x91\xbbqy\x970\x8d\t\x93\'\x97x\xbflB\x00\x9e\xf2\xe5\xb5\x83\xa46\xc7lQ\xa5\x81\xd4\xd3z\xfex8\xf1Te\x9f\xcbL9\xcc\xdf\'\xfd$\xcdp\xb2\xb8\xb85\x85Y\xbbi\xc7\x137\\', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000010a000201) 09:14:57 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:14:57 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1e}}, 0x24) io_uring_setup(0xd3e, &(0x7f0000000400)) r1 = io_uring_setup(0xd3e, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x2, 0x0, 0x4000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x1, 0x3, 0x2ee4, 0x8, 0x8001}) 09:14:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10) write(r0, &(0x7f0000000040)="2000000012005f0214f9f4070000a00000000009b31845000000000000000000", 0x20) [ 210.439560][ C0] hrtimer: interrupt took 30876 ns 09:14:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0405519, &(0x7f00000000c0)) 09:14:57 executing program 3: open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) uname(&(0x7f0000000180)=""/4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:14:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0x40405514, &(0x7f00000000c0)=0xb) 09:14:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0505510, &(0x7f00000000c0)) 09:14:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x800000008, 0x7fff, 0x8000000001}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") unshare(0x400) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x10000}) 09:14:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001a40)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x79, {0x2, 0x0, @empty}, 'vlan0\x00'}) 09:14:58 executing program 5: 09:14:58 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) sendmsg$inet6(r0, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0) 09:14:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) 09:14:58 executing program 4: 09:14:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10000, 0x20000000209}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1279, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 09:14:58 executing program 3: 09:14:58 executing program 0: 09:14:58 executing program 3: 09:14:58 executing program 5: 09:14:58 executing program 0: 09:14:58 executing program 2: [ 211.396388][ T3671] BUG: unable to handle page fault for address: fffff52002d00000 [ 211.404152][ T3671] #PF: supervisor read access in kernel mode [ 211.410168][ T3671] #PF: error_code(0x0000) - not-present page [ 211.416142][ T3671] PGD 21ffee067 P4D 21ffee067 PUD aa51c067 PMD 5bb0d067 PTE 0 [ 211.423626][ T3671] Oops: 0000 [#1] PREEMPT SMP KASAN [ 211.428835][ T3671] CPU: 0 PID: 3671 Comm: ion_system_heap Not tainted 5.5.0-rc2-syzkaller #0 09:14:58 executing program 3: [ 211.437605][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.447679][ T3671] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 211.453490][ T3671] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 211.473098][ T3671] RSP: 0018:ffffc9000c967ab8 EFLAGS: 00010216 [ 211.479165][ T3671] RAX: fffff52002d00000 RBX: fffff52002d02000 RCX: ffffffff85de6999 [ 211.487137][ T3671] RDX: 0000000000000001 RSI: 0000000000010000 RDI: ffffc90016800000 09:14:58 executing program 0: 09:14:58 executing program 2: [ 211.495107][ T3671] RBP: ffffc9000c967ad0 R08: fffff52002d02000 R09: 0000000000002000 [ 211.503165][ T3671] R10: fffff52002d01fff R11: ffffc9001680ffff R12: fffff52002d00000 [ 211.511134][ T3671] R13: 0000000000010000 R14: 0000000000000000 R15: ffffc9000c967d08 [ 211.519106][ T3671] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 211.528038][ T3671] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.534620][ T3671] CR2: fffff52002d00000 CR3: 0000000069ec2000 CR4: 00000000001406f0 [ 211.542604][ T3671] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.550575][ T3671] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.558643][ T3671] Call Trace: [ 211.561941][ T3671] memset+0x24/0x40 [ 211.565751][ T3671] ion_heap_clear_pages+0x49/0x70 [ 211.570777][ T3671] ion_heap_sglist_zero+0x245/0x270 [ 211.575981][ T3671] ? ion_heap_deferred_free+0x630/0x630 [ 211.581531][ T3671] ? mark_lock+0xc2/0x1220 [ 211.585960][ T3671] ? __lock_acquire+0x16f2/0x4a00 [ 211.590983][ T3671] ? finish_wait+0x18c/0x260 [ 211.595585][ T3671] ? find_held_lock+0x35/0x130 [ 211.600347][ T3671] ? ion_heap_deferred_free+0x295/0x630 [ 211.605892][ T3671] ? pgprot_writecombine+0x5e/0xf0 [ 211.611009][ T3671] ? pagerange_is_ram_callback+0x130/0x130 [ 211.616810][ T3671] ? ion_heap_deferred_free+0x295/0x630 [ 211.622359][ T3671] ion_heap_buffer_zero+0xf5/0x150 [ 211.627475][ T3671] ion_system_heap_free+0x1eb/0x250 [ 211.632679][ T3671] ion_buffer_destroy+0x159/0x2d0 [ 211.637706][ T3671] ion_heap_deferred_free+0x29d/0x630 [ 211.643080][ T3671] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 211.648455][ T3671] ? trace_hardirqs_on+0x67/0x240 [ 211.653489][ T3671] ? finish_wait+0x260/0x260 [ 211.658191][ T3671] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 211.664444][ T3671] ? __kthread_parkme+0x108/0x1c0 [ 211.669609][ T3671] ? __kasan_check_read+0x11/0x20 [ 211.674641][ T3671] kthread+0x361/0x430 [ 211.678712][ T3671] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 211.684086][ T3671] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 211.689811][ T3671] ret_from_fork+0x24/0x30 [ 211.694224][ T3671] Modules linked in: [ 211.698053][ T4085] kobject: 'loop0' (0000000074a4f594): kobject_uevent_env [ 211.698114][ T3671] CR2: fffff52002d00000 [ 211.705225][ T4085] kobject: 'loop0' (0000000074a4f594): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 211.709345][ T3671] ---[ end trace adc25a7b0de39884 ]--- [ 211.709364][ T3671] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 211.709376][ T3671] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 211.709383][ T3671] RSP: 0018:ffffc9000c967ab8 EFLAGS: 00010216 [ 211.709393][ T3671] RAX: fffff52002d00000 RBX: fffff52002d02000 RCX: ffffffff85de6999 [ 211.709400][ T3671] RDX: 0000000000000001 RSI: 0000000000010000 RDI: ffffc90016800000 [ 211.709408][ T3671] RBP: ffffc9000c967ad0 R08: fffff52002d02000 R09: 0000000000002000 [ 211.709416][ T3671] R10: fffff52002d01fff R11: ffffc9001680ffff R12: fffff52002d00000 [ 211.709424][ T3671] R13: 0000000000010000 R14: 0000000000000000 R15: ffffc9000c967d08 [ 211.709433][ T3671] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 211.709447][ T3671] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.812700][ T3671] CR2: fffff52002d00000 CR3: 0000000069ec2000 CR4: 00000000001406f0 [ 211.820666][ T3671] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.828621][ T3671] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.836575][ T3671] Kernel panic - not syncing: Fatal exception [ 211.844139][ T3671] Kernel Offset: disabled [ 211.848458][ T3671] Rebooting in 86400 seconds..