Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts.
2019/12/19 09:12:49 fuzzer started
2019/12/19 09:12:52 dialing manager at 10.128.0.26:41963
2019/12/19 09:12:52 syscalls: 2522
2019/12/19 09:12:52 code coverage: enabled
2019/12/19 09:12:52 comparison tracing: enabled
2019/12/19 09:12:52 extra coverage: enabled
2019/12/19 09:12:52 setuid sandbox: enabled
2019/12/19 09:12:52 namespace sandbox: enabled
2019/12/19 09:12:52 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/19 09:12:52 fault injection: enabled
2019/12/19 09:12:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/19 09:12:52 net packet injection: enabled
2019/12/19 09:12:52 net device setup: enabled
2019/12/19 09:12:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/19 09:12:52 devlink PCI setup: PCI device 0000:00:10.0 is not available
09:14:45 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x5428, 0x0)

09:14:46 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0xffffffffffffffc4, 0x2)

syzkaller login: [  198.972509][ T9417] IPVS: ftp: loaded support on port[0] = 21
[  199.113122][ T9417] chnl_net:caif_netlink_parms(): no params data found
[  199.160287][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.168190][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.176546][ T9417] device bridge_slave_0 entered promiscuous mode
[  199.185497][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.188813][ T9419] IPVS: ftp: loaded support on port[0] = 21
[  199.192745][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.206927][ T9417] device bridge_slave_1 entered promiscuous mode
[  199.231431][ T9417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.244131][ T9417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
09:14:46 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0, 0x1d9}, {&(0x7f0000000200)=ANY=[]}], 0x3}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x10b})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffe9c}, {&(0x7f0000000140)=""/64, 0xfffffffffffffdbe}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  199.277680][ T9417] team0: Port device team_slave_0 added
[  199.285552][ T9417] team0: Port device team_slave_1 added
[  199.359280][ T9417] device hsr_slave_0 entered promiscuous mode
[  199.416349][ T9417] device hsr_slave_1 entered promiscuous mode
[  199.455427][ T9421] IPVS: ftp: loaded support on port[0] = 21
09:14:46 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
getdents(r0, &(0x7f00000001c0)=""/163, 0xa3)

[  199.588387][ T9417] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  199.631465][ T9417] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  199.700684][ T9417] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  199.754226][ T9424] IPVS: ftp: loaded support on port[0] = 21
[  199.788539][ T9417] netdevsim netdevsim0 netdevsim3: renamed from eth3
09:14:46 executing program 4:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)

[  199.832471][ T9419] chnl_net:caif_netlink_parms(): no params data found
[  199.952458][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.978106][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.998661][ T9419] device bridge_slave_0 entered promiscuous mode
[  200.009863][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.038202][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.058108][ T9419] device bridge_slave_1 entered promiscuous mode
[  200.091807][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.099087][ T9417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.107054][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.114327][ T9417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.133522][ T9426] IPVS: ftp: loaded support on port[0] = 21
09:14:47 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00@z\x18Sb\xb0\x7f\x88\xa2\xf4V~\x81U\xea\xfb\x0e\xef\xb3\xf8\xf2\xb5\x98\xe5\x93~z\xa3\x17\xb2\xb0#]Z\xe4$\x8b\xcb\xc5F-\x80\xb0\xef\x84\xe3[\x05\xb5\xb9\x9c\xa7\x03\x91\xbbq<T\xddb\xa8\xe0m\xd9\v\xbf\x17\xb4\x0f\xd5\x01\xd3_\xdb\xac\xfa\x88`^\xdd\xe4\x93e\xa7\xa6\b\xca\xac\xc8\x15\xa3\xd8\xcdAd\x13\xcc2\xe8\xeaR\x18\x8eH\xb2@-\xddHf)\x95c\xc20g\xbaN4,\x90\xa4\xd3:\xc1D\xa5*nQ\b\xbe\x01E\xca\x0fYx\x1b,\xf9\xf8\x9d\xef\xe1|\a\xacZ\xcf\xd9\xa5\xa2$)>y\x970\x8d\t\x93\'\x97x\xbflB\x00\x9e\xf2\xe5\xb5\x83\xa46\xc7lQ\xa5\x81\xd4\xd3z\xfex8\xf1Te\x9f\xcbL9\xcc\xdf\'\xfd$\xcdp\xb2\xb8\xb85\x85Y\xbbi\xc7\x137\\', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r3, r1, 0x0, 0x100000010a000201)

[  200.185181][   T17] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.194780][   T17] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.228638][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.250602][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.387905][ T9419] team0: Port device team_slave_0 added
[  200.398524][ T9431] IPVS: ftp: loaded support on port[0] = 21
[  200.405782][ T9419] team0: Port device team_slave_1 added
[  200.425744][ T9421] chnl_net:caif_netlink_parms(): no params data found
[  200.499571][ T9419] device hsr_slave_0 entered promiscuous mode
[  200.538379][ T9419] device hsr_slave_1 entered promiscuous mode
[  200.596347][ T9419] debugfs: Directory 'hsr0' with parent '/' already present!
[  200.644065][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.651377][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.659669][ T9421] device bridge_slave_0 entered promiscuous mode
[  200.687420][ T9424] chnl_net:caif_netlink_parms(): no params data found
[  200.708656][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.716730][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.724396][ T9421] device bridge_slave_1 entered promiscuous mode
[  200.766332][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.794066][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.801430][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.810150][ T9424] device bridge_slave_0 entered promiscuous mode
[  200.821529][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.843490][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.851027][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.859466][ T9424] device bridge_slave_1 entered promiscuous mode
[  200.884307][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.938913][ T9419] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  201.010075][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.023936][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.039814][ T9426] chnl_net:caif_netlink_parms(): no params data found
[  201.050838][ T9421] team0: Port device team_slave_0 added
[  201.062659][ T9421] team0: Port device team_slave_1 added
[  201.068788][ T9419] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  201.107785][ T9419] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  201.173193][ T9419] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  201.228581][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  201.237447][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.248326][ T9417] 8021q: adding VLAN 0 to HW filter on device team0
[  201.319446][ T9421] device hsr_slave_0 entered promiscuous mode
[  201.376297][ T9421] device hsr_slave_1 entered promiscuous mode
[  201.416476][ T9421] debugfs: Directory 'hsr0' with parent '/' already present!
[  201.434641][ T9424] team0: Port device team_slave_0 added
[  201.482445][ T9424] team0: Port device team_slave_1 added
[  201.493211][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.501999][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.511877][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.519023][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.528506][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.537332][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.545779][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.552868][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.605153][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.612945][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.621083][ T9426] device bridge_slave_0 entered promiscuous mode
[  201.629215][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.636409][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.644398][ T9426] device bridge_slave_1 entered promiscuous mode
[  201.652299][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  201.664845][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  201.728598][ T9424] device hsr_slave_0 entered promiscuous mode
[  201.776565][ T9424] device hsr_slave_1 entered promiscuous mode
[  201.816577][ T9424] debugfs: Directory 'hsr0' with parent '/' already present!
[  201.843294][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  201.851986][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  201.860842][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  201.869749][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  201.903355][ T9421] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  201.962463][ T9421] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  202.007390][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.015296][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  202.024352][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.043646][ T9426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.061322][ T9417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  202.072559][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.085101][ T9421] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  202.140232][ T9431] chnl_net:caif_netlink_parms(): no params data found
[  202.149754][ T9421] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  202.219882][ T9426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.239989][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  202.248293][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.272155][ T9424] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  202.332858][ T9424] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  202.369820][ T9424] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  202.449196][ T9424] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  202.490708][ T9426] team0: Port device team_slave_0 added
[  202.499147][ T9426] team0: Port device team_slave_1 added
[  202.524165][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.533164][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.541586][ T9431] device bridge_slave_0 entered promiscuous mode
[  202.550890][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.558710][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.575556][ T9417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.587285][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.595568][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.604113][ T9431] device bridge_slave_1 entered promiscuous mode
[  202.633045][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.648367][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.728147][ T9426] device hsr_slave_0 entered promiscuous mode
[  202.746247][ T9426] device hsr_slave_1 entered promiscuous mode
[  202.786222][ T9426] debugfs: Directory 'hsr0' with parent '/' already present!
[  202.808180][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.881137][ T9431] team0: Port device team_slave_0 added
[  202.907862][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.915733][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
09:14:50 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000002000)=[{&(0x7f0000000b00)}, {&(0x7f0000000c00)="4e532e9267b19e48e9e93b87c636be75a2618711a15a7db51f19eee9370bdece1c074ab78c21d1523a", 0x29}, {&(0x7f0000000c80)="c49610a438691c06b051b53a91dca3b924f0f09c0955b2a341ff9b6627fa131b6494fc6966d9814461e5e977793664919184fce68396645028a41017e0b874f389f146dddd8c16526127c8c077839b93d08cbfc410c5d9120e1cfbfb8317f585206f00d1c548fb66d6fd080b65644ea0059b85270a3245670294885f052019882e74906ffb9dd1044fbaf5fcea4fe98a41f73ee0d9b8ee6ca544048f29891231a55041c312a2c29bf39509eb1e7d8a10870b93caf410b6d3b314bf6b8a484800d2ceab76aac1f41d9549f1ad431f360d2663e154d63db68bebd4f5048a983565d1d088306c0a", 0xe6}, {&(0x7f0000000340)='/', 0x1}, {0x0}, {&(0x7f0000000f80)}], 0x6)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c, 0x800)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x55e)
ftruncate(r1, 0x2008002)
semget(0x2, 0x0, 0x601)
sendfile(r0, r1, 0x0, 0x8482)
r2 = open(0x0, 0x286000, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0)
bind$alg(r2, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x2, 0x2, 0x1000, 0x2000, &(0x7f000048c000/0x2000)=nil})
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0xcfe61000)
io_setup(0xffff, &(0x7f0000000000))
open(&(0x7f0000000780)='./bus\x00', 0x2, 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0)

[  202.954382][ T9431] team0: Port device team_slave_1 added
[  202.974620][ T9419] 8021q: adding VLAN 0 to HW filter on device team0
[  202.998031][ T9426] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  203.042960][ T9426] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  203.108724][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.117585][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.126035][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.133096][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.149052][ T9426] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  203.208727][ T9426] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  203.273028][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.281109][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.289958][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.298498][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.305530][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state
09:14:50 executing program 0:
openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0xbd2e9051965deeef, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xfffffffffffffef7)
accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffe0e)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000)
setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U+', 0x4}, 0x28, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udplite\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f00000003c0)={0x0, 0x0, [0xf106, 0x0, 0x5, 0x8000], 0x5de})
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000400))
socket$nl_route(0x10, 0x3, 0x0)
lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='security.ima\x00', 0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

[  203.337315][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0
09:14:50 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101141, 0x0)
ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000180)=""/254)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2b3)
splice(r0, 0x0, r5, 0x0, 0x10005, 0x0)

[  203.389880][ T9431] device hsr_slave_0 entered promiscuous mode
[  203.452508][ T9431] device hsr_slave_1 entered promiscuous mode
[  203.501202][ T9431] debugfs: Directory 'hsr0' with parent '/' already present!
[  203.508907][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.517786][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.526583][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.535040][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.544037][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.552741][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.561972][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.606124][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.614898][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.625051][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.633838][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.660136][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  203.668435][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  203.697472][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.706895][ T9421] 8021q: adding VLAN 0 to HW filter on device team0
[  203.726597][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.769399][ T9431] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  203.798785][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.808308][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.817686][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.824779][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.832810][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.855090][ T9426] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.868733][ T9431] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  203.908928][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.918073][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.927752][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.934840][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.942734][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.952465][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  203.963248][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  203.984499][ T9431] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  204.035594][ T9431] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  204.087959][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  204.097101][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  204.105680][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  204.114453][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  204.123306][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  204.133558][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.141075][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.149075][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.159599][ T9424] 8021q: adding VLAN 0 to HW filter on device team0
[  204.180533][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.197797][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.206920][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.215111][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.224112][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.236546][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.267507][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  204.275620][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  204.284537][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  204.301638][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  204.310842][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.317989][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.328949][ T9426] 8021q: adding VLAN 0 to HW filter on device team0
[  204.363296][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  204.373784][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  204.382726][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  204.391693][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.398813][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.407159][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  204.415720][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  204.424222][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.431282][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.439326][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  204.448500][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  204.457131][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.464191][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.472101][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  204.522924][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  204.532535][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  204.554475][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.575069][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.582772][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  204.592549][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
09:14:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000018c0)="23000000420081aee405e9a4000000000000c6ff07d8004003000000000000002814c96f84", 0x25}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[  204.617824][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0
09:14:51 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000007000100667100003400080008001400000040b1080009000000000008000300000200000800050000000000080001000000000008000700000000004c9fd92efb40c02c50c5af8eec939b0bba96de14ce758e1158d6c34e560ccd1f336ed81891f79dc1621c255faf05c9f3d17da76f237409f851933d00fe4b89000000000000000000"], 0x60}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  204.658036][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  204.679140][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  204.697110][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  204.739556][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  204.761732][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  204.771422][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  204.780001][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  204.788813][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  204.805018][ T9424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  204.818915][ T9424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
09:14:51 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000007000100667100003400080008001400000040b1080009000000000008000300000200000800050000000000080001000000000008000700000000004c9fd92efb40c02c50c5af8eec939b0bba96de14ce758e1158d6c34e560ccd1f336ed81891f79dc1621c255faf05c9f3d17da76f237409f851933d00fe4b89000000000000000000"], 0x60}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  204.847256][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.874081][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.882730][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.904389][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.919724][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.928971][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.937497][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.945827][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.954537][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.966171][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.974478][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
09:14:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6431)
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000080)=""/35, 0x3)
socketpair(0x5, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(0xffffffffffffffff)
getdents(0xffffffffffffffff, &(0x7f0000000080)=""/50, 0x32)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x85, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xff, @loopback}, 0x1c)
getdents(0xffffffffffffffff, &(0x7f0000000080)=""/50, 0x32)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x5, 0x100)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8040fffffffd)

09:14:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080))

[  205.016479][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  205.023985][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.052221][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  205.132943][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.216699][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.298745][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  205.306354][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.313988][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  205.323589][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  205.352935][ T9431] 8021q: adding VLAN 0 to HW filter on device team0
[  205.372088][ T9426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.397485][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  205.413473][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  205.422676][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.429818][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.439188][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  205.448552][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  205.457463][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.464562][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.497177][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  205.512203][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  205.521676][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  205.531331][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  205.541440][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  205.570881][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  205.589521][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  205.610785][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  205.620492][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  205.628846][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  205.667042][ T9431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.684162][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  205.696050][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  205.704804][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  205.741541][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.752067][ T9436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  205.763300][ T9436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
09:14:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
setgid(0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0), 0x4)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x8f6a5fa987233c99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

09:14:55 executing program 0:

09:14:55 executing program 4:
socket(0x2, 0xc003, 0x0)
socket(0x2, 0x4003, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket(0x2, 0xc003, 0x0)
connect$unix(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="8202adfdffffffffffff3f7b238bf46854d78a2a197a3862de109d83008295952e32c87910bf093f68c117002845cd7ead4bcb777fa69dfceac2a84e6abca64896819f507d0000000000002951b15801360bcd4c0a162b58fd4237b8fa4d012a48c02f6ac41e6bf3bf554799000000ed52beb85a85f8b2fd57d60f13ad30525e8f5300a4aeef9d612f871f4385f041570600a4a5c5fe659fa202361cd8cac7dfbc5b65c6593d2870b41200003500000000d28418ac1b00000000000000000000000000df28d208000000000000006b47b8d7da4333ac0f994166518bed2e1977bd035f5ea1b1009e5a319d54401cb92f77420eea4173d5b6913eef9e8b0fb636710000d2df0ac87e0d7b61b7240cf97d03126da536ef61ee9aac417e2ab04fd8a9c98e958ff55d36d8224d791038ff07d11b2434c929b34b0587cf25dd9e1e49f931a4193897b0a33ed3cbf637786819bf7e26863a11a274bd1ba119a76d85eac8a829bf8aa0562ae50c88910a9f37f502de8d7ff9f49d884ee2cf3725b1a0581adf2ea95d0000000000f9547bdfe68bfa8bfccf6a2c9ce08a146ee556cff99645d300682b4e970f01b899f51da0ff8237ed6b5ad30d7b696378a27e4e6b47e3f7dc2a8bcc1f01cf13fdf0db339bb94791509e760000000000000043d3bca3b4e1c30227c41a28a0889e6f5833f97d1ac1063bb7ca96bed29b7948908298218d7a030000003641a83ce2be3293f224de29927319bbf44fe4924121afb7af4e864b1837ab860e02346315e8f936d30fab852a13df8c7f5c7c16e05daecc54ab06f0adeefa647cf429d76b3b1d00"/599], 0x10)
dup2(r1, r0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4)
r2 = dup(r0)
sendto$inet6(r2, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0)

09:14:55 executing program 1:

09:14:55 executing program 3:

09:14:55 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)

09:14:55 executing program 1:

09:14:55 executing program 3:

09:14:55 executing program 0:

[  208.343448][ T9511] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
09:14:55 executing program 1:

09:14:55 executing program 4:

09:14:55 executing program 3:

09:14:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
setgid(0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0), 0x4)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x8f6a5fa987233c99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

09:14:55 executing program 0:

09:14:55 executing program 4:

09:14:55 executing program 5:

09:14:55 executing program 1:

09:14:55 executing program 3:

09:14:55 executing program 3:

09:14:55 executing program 0:

09:14:55 executing program 1:

09:14:55 executing program 4:

09:14:56 executing program 5:

09:14:56 executing program 4:

09:14:56 executing program 2:

09:14:56 executing program 1:

09:14:56 executing program 3:

09:14:56 executing program 5:

09:14:56 executing program 0:

09:14:56 executing program 1:

09:14:56 executing program 3:

09:14:56 executing program 5:

09:14:56 executing program 0:

09:14:56 executing program 2:

09:14:56 executing program 4:

09:14:56 executing program 1:

09:14:56 executing program 5:

09:14:56 executing program 2:

09:14:56 executing program 4:

09:14:56 executing program 0:

09:14:56 executing program 3:

09:14:56 executing program 1:

09:14:56 executing program 2:

09:14:56 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000001240)={0xa0, 0x0, 0x2}, 0xa0)

09:14:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)

09:14:56 executing program 3:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000100)={0xa0, 0x0, 0x2}, 0xa0)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x6}, 0x50)

09:14:56 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7)
ioctl$TCSETAW(r0, 0x8924, &(0x7f00000000c0))

09:14:56 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

09:14:57 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7)

09:14:57 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc008551b, 0x0)

09:14:57 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)

09:14:57 executing program 0:
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@local, 0x0, 0x0, 0x0, 0x12, 0x0, 0x5}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde9)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:14:57 executing program 5:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0)
ftruncate(r0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)

09:14:57 executing program 1:
r0 = memfd_create(&(0x7f0000000300)='#&}wlan1:em1!\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\xee \x83\xd8\xc6\x93\xc4\x98\x00'})
write$P9_RLINK(r4, &(0x7f0000000280)={0x7}, 0x269)

09:14:57 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00@z\x18Sb\xb0\x7f\x88\xa2\xf4V~\x81U\xea\xfb\x0e\xef\xb3\xf8\xf2\xb5\x98\xe5\x93~z\xa3\x17\xb2\xb0#]Z\xe4$\x8b\xcb\xc5F-\x80\xb0\xef\x84\xe3[\x05\xb5\xb9\x9c\xa7\x03\x91\xbbq<T\xddb\xa8\xe0m\xd9\v\xbf\x17\xb4\x0f\xd5\x01\xd3_\xdb\xac\xfa\x88`^\xdd\xe4\x93e\xa7\xa6\b\xca\xac\xc8\x15\xa3\xd8\xcdAd\x13\xcc2\xe8\xeaR\x18\x8eH\xb2@-\xddHf)\x95c\xc20g\xbaN4,\x90\xa4\xd3:\xc1D\xa5*nQ\b\xbe\x01E\xca\x0fYx\x1b,\xf9\xf8\x9d\xef\xe1|\a\xacZ\xcf\xd9\xa5\xa2$)>y\x970\x8d\t\x93\'\x97x\xbflB\x00\x9e\xf2\xe5\xb5\x83\xa46\xc7lQ\xa5\x81\xd4\xd3z\xfex8\xf1Te\x9f\xcbL9\xcc\xdf\'\xfd$\xcdp\xb2\xb8\xb85\x85Y\xbbi\xc7\x137\\', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000000)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r3, r1, 0x0, 0x100000010a000201)

09:14:57 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

09:14:57 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1e}}, 0x24)
io_uring_setup(0xd3e, &(0x7f0000000400))
r1 = io_uring_setup(0xd3e, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x2, 0x0, 0x4000)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x1, 0x3, 0x2ee4, 0x8, 0x8001})

09:14:57 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10)
write(r0, &(0x7f0000000040)="2000000012005f0214f9f4070000a00000000009b31845000000000000000000", 0x20)

[  210.439560][    C0] hrtimer: interrupt took 30876 ns
09:14:57 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0405519, &(0x7f00000000c0))

09:14:57 executing program 3:
open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
uname(&(0x7f0000000180)=""/4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:14:57 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0x40405514, &(0x7f00000000c0)=0xb)

09:14:57 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0505510, &(0x7f00000000c0))

09:14:57 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x800000008, 0x7fff, 0x8000000001}, 0x2c)
r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
r1 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071")
unshare(0x400)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x10000})

09:14:58 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001a40)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x79, {0x2, 0x0, @empty}, 'vlan0\x00'})

09:14:58 executing program 5:

09:14:58 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0xff)
sendmsg$inet6(r0, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0)

09:14:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10)

09:14:58 executing program 4:

09:14:58 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10000, 0x20000000209})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

09:14:58 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x1279, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})

09:14:58 executing program 3:

09:14:58 executing program 0:

09:14:58 executing program 3:

09:14:58 executing program 5:

09:14:58 executing program 0:

09:14:58 executing program 2:

[  211.396388][ T3671] BUG: unable to handle page fault for address: fffff52002d00000
[  211.404152][ T3671] #PF: supervisor read access in kernel mode
[  211.410168][ T3671] #PF: error_code(0x0000) - not-present page
[  211.416142][ T3671] PGD 21ffee067 P4D 21ffee067 PUD aa51c067 PMD 5bb0d067 PTE 0
[  211.423626][ T3671] Oops: 0000 [#1] PREEMPT SMP KASAN
[  211.428835][ T3671] CPU: 0 PID: 3671 Comm: ion_system_heap Not tainted 5.5.0-rc2-syzkaller #0
09:14:58 executing program 3:

[  211.437605][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  211.447679][ T3671] RIP: 0010:check_memory_region+0x9c/0x1a0
[  211.453490][ T3671] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80
[  211.473098][ T3671] RSP: 0018:ffffc9000c967ab8 EFLAGS: 00010216
[  211.479165][ T3671] RAX: fffff52002d00000 RBX: fffff52002d02000 RCX: ffffffff85de6999
[  211.487137][ T3671] RDX: 0000000000000001 RSI: 0000000000010000 RDI: ffffc90016800000
09:14:58 executing program 0:

09:14:58 executing program 2:

[  211.495107][ T3671] RBP: ffffc9000c967ad0 R08: fffff52002d02000 R09: 0000000000002000
[  211.503165][ T3671] R10: fffff52002d01fff R11: ffffc9001680ffff R12: fffff52002d00000
[  211.511134][ T3671] R13: 0000000000010000 R14: 0000000000000000 R15: ffffc9000c967d08
[  211.519106][ T3671] FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  211.528038][ T3671] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.534620][ T3671] CR2: fffff52002d00000 CR3: 0000000069ec2000 CR4: 00000000001406f0
[  211.542604][ T3671] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  211.550575][ T3671] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  211.558643][ T3671] Call Trace:
[  211.561941][ T3671]  memset+0x24/0x40
[  211.565751][ T3671]  ion_heap_clear_pages+0x49/0x70
[  211.570777][ T3671]  ion_heap_sglist_zero+0x245/0x270
[  211.575981][ T3671]  ? ion_heap_deferred_free+0x630/0x630
[  211.581531][ T3671]  ? mark_lock+0xc2/0x1220
[  211.585960][ T3671]  ? __lock_acquire+0x16f2/0x4a00
[  211.590983][ T3671]  ? finish_wait+0x18c/0x260
[  211.595585][ T3671]  ? find_held_lock+0x35/0x130
[  211.600347][ T3671]  ? ion_heap_deferred_free+0x295/0x630
[  211.605892][ T3671]  ? pgprot_writecombine+0x5e/0xf0
[  211.611009][ T3671]  ? pagerange_is_ram_callback+0x130/0x130
[  211.616810][ T3671]  ? ion_heap_deferred_free+0x295/0x630
[  211.622359][ T3671]  ion_heap_buffer_zero+0xf5/0x150
[  211.627475][ T3671]  ion_system_heap_free+0x1eb/0x250
[  211.632679][ T3671]  ion_buffer_destroy+0x159/0x2d0
[  211.637706][ T3671]  ion_heap_deferred_free+0x29d/0x630
[  211.643080][ T3671]  ? ion_heap_shrink_scan+0x1d0/0x1d0
[  211.648455][ T3671]  ? trace_hardirqs_on+0x67/0x240
[  211.653489][ T3671]  ? finish_wait+0x260/0x260
[  211.658191][ T3671]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  211.664444][ T3671]  ? __kthread_parkme+0x108/0x1c0
[  211.669609][ T3671]  ? __kasan_check_read+0x11/0x20
[  211.674641][ T3671]  kthread+0x361/0x430
[  211.678712][ T3671]  ? ion_heap_shrink_scan+0x1d0/0x1d0
[  211.684086][ T3671]  ? kthread_mod_delayed_work+0x1f0/0x1f0
[  211.689811][ T3671]  ret_from_fork+0x24/0x30
[  211.694224][ T3671] Modules linked in:
[  211.698053][ T4085] kobject: 'loop0' (0000000074a4f594): kobject_uevent_env
[  211.698114][ T3671] CR2: fffff52002d00000
[  211.705225][ T4085] kobject: 'loop0' (0000000074a4f594): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  211.709345][ T3671] ---[ end trace adc25a7b0de39884 ]---
[  211.709364][ T3671] RIP: 0010:check_memory_region+0x9c/0x1a0
[  211.709376][ T3671] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80
[  211.709383][ T3671] RSP: 0018:ffffc9000c967ab8 EFLAGS: 00010216
[  211.709393][ T3671] RAX: fffff52002d00000 RBX: fffff52002d02000 RCX: ffffffff85de6999
[  211.709400][ T3671] RDX: 0000000000000001 RSI: 0000000000010000 RDI: ffffc90016800000
[  211.709408][ T3671] RBP: ffffc9000c967ad0 R08: fffff52002d02000 R09: 0000000000002000
[  211.709416][ T3671] R10: fffff52002d01fff R11: ffffc9001680ffff R12: fffff52002d00000
[  211.709424][ T3671] R13: 0000000000010000 R14: 0000000000000000 R15: ffffc9000c967d08
[  211.709433][ T3671] FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  211.709447][ T3671] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.812700][ T3671] CR2: fffff52002d00000 CR3: 0000000069ec2000 CR4: 00000000001406f0
[  211.820666][ T3671] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  211.828621][ T3671] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  211.836575][ T3671] Kernel panic - not syncing: Fatal exception
[  211.844139][ T3671] Kernel Offset: disabled
[  211.848458][ T3671] Rebooting in 86400 seconds..