[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 75.199919][ T27] audit: type=1800 audit(1576749368.692:25): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 75.232837][ T27] audit: type=1800 audit(1576749368.692:26): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 75.263880][ T27] audit: type=1800 audit(1576749368.692:27): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.79' (ECDSA) to the list of known hosts. 2019/12/19 09:56:19 fuzzer started 2019/12/19 09:56:21 dialing manager at 10.128.0.26:43141 2019/12/19 09:56:21 syscalls: 2683 2019/12/19 09:56:21 code coverage: enabled 2019/12/19 09:56:21 comparison tracing: enabled 2019/12/19 09:56:21 extra coverage: enabled 2019/12/19 09:56:21 setuid sandbox: enabled 2019/12/19 09:56:21 namespace sandbox: enabled 2019/12/19 09:56:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/19 09:56:21 fault injection: enabled 2019/12/19 09:56:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/19 09:56:21 net packet injection: enabled 2019/12/19 09:56:21 net device setup: enabled 2019/12/19 09:56:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/19 09:56:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:58:59 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, @perf_config_ext, 0x20020, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x6, 0x4) r5 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) close(0xffffffffffffffff) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 09:58:59 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000400)={0x1, 0xffffffff, 0xc0000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, @perf_config_ext, 0x20020, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000d52ff0), 0x0) socket(0x10, 0x6, 0x4) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r8, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) syzkaller login: [ 246.491404][ T9153] IPVS: ftp: loaded support on port[0] = 21 [ 246.573736][ T9155] IPVS: ftp: loaded support on port[0] = 21 09:59:00 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000400)={0x1, 0xffffffff, 0xc0000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, @perf_config_ext, 0x20020, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000d52ff0), 0x0) socket(0x10, 0x6, 0x4) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r8, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='sessionid\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 246.750378][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 246.873282][ T9155] chnl_net:caif_netlink_parms(): no params data found [ 246.898632][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.898978][ T9159] IPVS: ftp: loaded support on port[0] = 21 [ 246.907438][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.921394][ T9153] device bridge_slave_0 entered promiscuous mode [ 246.945651][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.952995][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.961069][ T9153] device bridge_slave_1 entered promiscuous mode [ 246.991323][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.998587][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.008849][ T9155] device bridge_slave_0 entered promiscuous mode 09:59:00 executing program 3: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xc, 0x0, 0x1f}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 247.035553][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.042617][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.065801][ T9155] device bridge_slave_1 entered promiscuous mode [ 247.091468][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.128786][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.154516][ T9155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.196540][ T9155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.232532][ T9153] team0: Port device team_slave_0 added [ 247.244703][ T9153] team0: Port device team_slave_1 added [ 247.270562][ T9155] team0: Port device team_slave_0 added [ 247.278746][ T9155] team0: Port device team_slave_1 added [ 247.309859][ T9161] IPVS: ftp: loaded support on port[0] = 21 09:59:00 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) open(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r1, 0xa, 0x12) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x16) [ 247.368281][ T9153] device hsr_slave_0 entered promiscuous mode [ 247.413228][ T9153] device hsr_slave_1 entered promiscuous mode 09:59:01 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000004c0)={0x6624}, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 247.576005][ T9155] device hsr_slave_0 entered promiscuous mode [ 247.654222][ T9155] device hsr_slave_1 entered promiscuous mode [ 247.693862][ T9155] debugfs: Directory 'hsr0' with parent '/' already present! [ 247.748319][ T9164] IPVS: ftp: loaded support on port[0] = 21 [ 247.809964][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 247.828949][ T9153] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.897443][ T9153] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.908158][ T9166] IPVS: ftp: loaded support on port[0] = 21 [ 247.966079][ T9153] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.042034][ T9153] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.106052][ T9155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.158311][ T9155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.206600][ T9155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.270916][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.278841][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.286801][ T9159] device bridge_slave_0 entered promiscuous mode [ 248.297157][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.304441][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.312005][ T9159] device bridge_slave_1 entered promiscuous mode [ 248.321922][ T9155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.389156][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.413886][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.465628][ T9159] team0: Port device team_slave_0 added [ 248.474739][ T9159] team0: Port device team_slave_1 added [ 248.604815][ T9159] device hsr_slave_0 entered promiscuous mode [ 248.663015][ T9159] device hsr_slave_1 entered promiscuous mode [ 248.702962][ T9159] debugfs: Directory 'hsr0' with parent '/' already present! [ 248.759423][ T9161] chnl_net:caif_netlink_parms(): no params data found [ 248.796410][ T9159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.863022][ T9159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.909362][ T9159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.968443][ T9159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.025283][ T9164] chnl_net:caif_netlink_parms(): no params data found [ 249.123426][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.130698][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.139481][ T9161] device bridge_slave_0 entered promiscuous mode [ 249.148906][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.156024][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.164249][ T9161] device bridge_slave_1 entered promiscuous mode [ 249.179290][ T9166] chnl_net:caif_netlink_parms(): no params data found [ 249.216451][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.223794][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.231647][ T9164] device bridge_slave_0 entered promiscuous mode [ 249.262335][ T9161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.274927][ T9161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.291549][ T9164] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.299598][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.307673][ T9164] device bridge_slave_1 entered promiscuous mode [ 249.315706][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.322934][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.330585][ T9166] device bridge_slave_0 entered promiscuous mode [ 249.338767][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.345889][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.354645][ T9166] device bridge_slave_1 entered promiscuous mode [ 249.363927][ T9155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.393406][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.424548][ T9161] team0: Port device team_slave_0 added [ 249.441391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.450899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.460959][ T9164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.473847][ T9166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.490042][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.498587][ T9161] team0: Port device team_slave_1 added [ 249.514826][ T9164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.538348][ T9166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.559152][ T9164] team0: Port device team_slave_0 added [ 249.569803][ T9164] team0: Port device team_slave_1 added [ 249.580532][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.589613][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.598341][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.605729][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.614349][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.623648][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.684949][ T9161] device hsr_slave_0 entered promiscuous mode [ 249.723008][ T9161] device hsr_slave_1 entered promiscuous mode [ 249.792892][ T9161] debugfs: Directory 'hsr0' with parent '/' already present! [ 249.820685][ T9166] team0: Port device team_slave_0 added [ 249.827995][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.837768][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.847733][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.856423][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.863701][ T9167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.882474][ T9155] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.901686][ T9166] team0: Port device team_slave_1 added [ 249.910857][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.964912][ T9164] device hsr_slave_0 entered promiscuous mode [ 250.013091][ T9164] device hsr_slave_1 entered promiscuous mode [ 250.052989][ T9164] debugfs: Directory 'hsr0' with parent '/' already present! [ 250.117924][ T9166] device hsr_slave_0 entered promiscuous mode [ 250.183114][ T9166] device hsr_slave_1 entered promiscuous mode [ 250.252803][ T9166] debugfs: Directory 'hsr0' with parent '/' already present! [ 250.260872][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.269478][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.277893][ T2732] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.284977][ T2732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.293173][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.301694][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.310617][ T2732] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.317697][ T2732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.325719][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.334761][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.346106][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.355035][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.394968][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.404254][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.412527][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.421587][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.430123][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.452052][ T9164] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.536104][ T9164] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.640255][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.650162][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.658932][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.667704][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.677295][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.685169][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.694148][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.703338][ T9164] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.775801][ T9164] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.827784][ T9161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.911899][ T9161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.964987][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.971944][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.980210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.989049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.997410][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.010664][ T9155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.022651][ T9155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.031029][ T9166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.064663][ T9161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.099641][ T9161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.146263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.154893][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.170949][ T9153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.179427][ T9166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.227283][ T9166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.303919][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.321255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.321799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.337934][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.345687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.353487][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.361928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.370573][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.377681][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.385259][ T9166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.443814][ T9155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.467006][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.474894][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.484550][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.495198][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.502230][ T9167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.510282][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.518977][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.537796][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.593811][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.603315][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.610803][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.619660][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.634298][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.653528][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.662138][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.676697][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.685537][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.694856][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.704363][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.741749][ T9159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.766782][ T9164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.795106][ T9161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.878573][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.886888][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.895268][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.902932][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.918409][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.939247][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.947167][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.956977][ T9161] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.978848][ T9164] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.022809][ C0] hrtimer: interrupt took 27706 ns 09:59:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x0, 0x0, 0xfffffffb, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x20}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x40}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) [ 252.044712][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.099764][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.118987][ T9187] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 252.135755][ T2732] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.142874][ T2732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.150976][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.159789][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.169788][ T2732] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.176918][ T2732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.184830][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.196926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.225014][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.235094][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.244226][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.269125][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.294231][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.312591][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.321395][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.330459][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.337567][ T9170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.345316][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.354046][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.363558][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.370618][ T9170] bridge0: port 2(bridge_slave_1) entered forwarding state 09:59:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) [ 252.399320][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.408246][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.416893][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.428036][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.439302][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.462054][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.493034][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.501356][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 09:59:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 252.515293][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.530288][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.539359][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.554491][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.589698][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.620729][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.632066][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 09:59:06 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, @perf_config_ext, 0x20020, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x6, 0x4) r5 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) close(0xffffffffffffffff) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) [ 252.717844][ T9166] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.761447][ T9164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 09:59:06 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffe2f}, 0x0) [ 252.810411][ T9164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.838096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.851127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 09:59:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/188, 0xbc}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000180)=""/233, 0xe9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00500) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r6, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 252.862104][ T9219] ptrace attach of "/root/syz-executor.2"[9159] was attempted by "/root/syz-executor.2"[9219] [ 252.880485][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.922116][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.934221][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.945259][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.953734][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 09:59:06 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 252.973191][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.981543][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.014290][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.050396][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.059140][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.066250][ T9190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.097513][ T9161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.120758][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.132323][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.141734][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.155974][ T2732] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.163130][ T2732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.203402][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.250325][ T9164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.272408][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.282013][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.291649][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.300488][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.308201][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.339459][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 09:59:06 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 253.379953][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.396825][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.454992][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 09:59:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102005ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 253.495171][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.541234][ T9166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.602646][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.627558][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.649869][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.734790][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.742312][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.771265][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0 09:59:07 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) 09:59:08 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000004c0)={0x6624}, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 09:59:08 executing program 0: clone(0x26100980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:59:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:08 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:08 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 09:59:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @pic={0x0, 0xfe, 0x1}}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 09:59:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) eventfd(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80000000000000000016c6c7b297300000000000000000000000000000000000000001000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x138}}, 0x0) 09:59:08 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3) fcntl$addseals(r0, 0x409, 0x6) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) 09:59:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:08 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000100000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_access\x006rJ!o-\x12\xb7?t\xd7\xee\x87\x18{l\xc8J\xe8\xcf\xcf\xbb|\xb8ERtv?t\x81\xcc\x9e\x03g\xe3\xd5\"\b\xd1\xb7', &(0x7f0000000680), 0x24, 0x0) [ 255.403075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 255.409171][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:59:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) [ 255.563366][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 255.569174][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:59:09 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$mouse(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xb, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:09 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) mount$9p_fd(0x0, 0x0, 0x0, 0xa726a, 0x0) 09:59:09 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:09 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) 09:59:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:59:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0xfe, @scatter={0x1, 0x200000, &(0x7f0000000180)=[{&(0x7f0000000200)=""/103, 0x67}]}, &(0x7f00000001c0)="a52769085663", 0x0, 0x0, 0x0, 0x0, 0x0}) 09:59:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:09 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) 09:59:09 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:09 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000003a40)={0xa, 0x0, 0x0, @rand_addr="43adae045ba425540566c44f7867f246"}, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) utime(&(0x7f0000000280)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0xffffffffffffff37) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) gettid() timer_create(0x0, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 09:59:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:10 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() tkill(r0, 0x0) perf_event_open(0x0, r0, 0x2, 0xffffffffffffffff, 0x0) ptrace(0x11, r0) socket$packet(0x11, 0x0, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) waitid(0x3, 0x0, &(0x7f0000000080), 0x1000000, &(0x7f0000000280)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) tkill(0x0, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0xa}}}}}}, 0x0) tkill(0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 09:59:10 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) 09:59:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0xfe, @scatter={0x1, 0x200000, &(0x7f0000000180)=[{&(0x7f0000000200)=""/103, 0x67}]}, &(0x7f00000001c0)="a52769085663", 0x0, 0x0, 0x0, 0x0, 0x0}) 09:59:10 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 09:59:10 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:10 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() tkill(r0, 0x0) perf_event_open(0x0, r0, 0x2, 0xffffffffffffffff, 0x0) ptrace(0x11, r0) socket$packet(0x11, 0x0, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) waitid(0x3, 0x0, &(0x7f0000000080), 0x1000000, &(0x7f0000000280)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) tkill(0x0, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0xa}}}}}}, 0x0) tkill(0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 09:59:10 executing program 0: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) 09:59:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:10 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) 09:59:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000004200053127d8010080000000000400000072e6c04000016ed7b2063c2e5df444b1d69598368135e22adfff66954ea956b60300000000000000dd7ea2921c1e3b35e6b8407c13389947b2ea420101dfee3122981b471b674ba2b8e6e58022891fb9b85a2216fccf0762a3d1bc29cff0bca99a238de20800000000000000bba6dd6509737d65b5e909451f20f3c68aaa68fe2553ef76e41f03abb15ca57dc93b4d70df35dd9116f8a8cba8bb3835ca4ab6cfbcad4a44fbb22821f5a2d706ffea6c7aa57bb236837541cb54c1eb28777d19638d9411195e1e4787775926ce432fe23b9ac29e5d87d253d74eca3f58048e26af3878788efe9c89c7c9e509b66243e6218907cba3bf34d571a3908bcaf3bdde23d10fc60a83903242de26a2ae2a0b55361e812200c1fd8f5e098a27affe44f6947420d8399066a4efd865a48174d5a7e8050ce5d625038ae7d9027be5fc27fac7282566055964bfcab74197503f2c02edb4b00cbf06000000e756df553f135660d6c9acf462b3da3fb544f9a631a35c34dd30f35b204d32aa389b46f29183ddcbbd87d9df162931b907e4c693a42204a98f1296c162e31b23f3c15bfd15e5dfb814fbe0b474d83e521118f018dc44a505ec46559cd841bfdd4a8063dc63392017e24624b89d8df25cbd86ac939229c2f1cbdce8df0fcb0000cdd6d83c981b0c31e707e45144c422eb41a1976599e6fad41d6a334d827c7feb88319bf7e269958501645a3e720b0f2fc465211f86c5c809ea8ec3f79f716031f2cbb56418aab49fbf0000000000000000009371000000000000000000aeb7ccdabd6cb900000000000000000000000000155970d26f1c51b1113306c5694256136a9191ac70e27a5790852ab54787d3094d109cb43a5c52f1e29e757be52db3329688ca46d32c0848ad2bcac924bb95a7c70c8a4d6993d213d955c82a2edadb7ed0cbc6e65eefe883e47da69c81b02dc8b95cda7eca4d696c00c3d0e4b1244d7d12cda0934a9a7144d37112cc30480cf4ab84ed891074b76500f6b4cdc0f9117402c389f53d2701831f38eff39b177ade2e3e9b2a9921bb4331e186a2cb10a8da0fb5b90504ce415a20113af86d146c99d056e36aaa73ff21505e971a434ef213454629a561ad9f0f983f482ac4707c22bcfc2c6fa7b26eb7fdce81006f2bd1c1929ac10e78933f6981ff8f251b4e239b4f6c5a6417276fdcdcc25d17120b70596bcbd4fcc1b8d714f7fed9bd00000000"], 0x14}}, 0x0) 09:59:11 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:11 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) 09:59:11 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) 09:59:11 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(r1, r2, 0x0, 0x320f) 09:59:11 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) socket$packet(0x11, 0x0, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) tkill(0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000180)=[{}]) tkill(r0, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689, 0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0xa}}}}}}, 0x0) r1 = getpid() tkill(r1, 0x0) perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 09:59:11 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:59:11 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:59:11 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x320f) 09:59:11 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) lseek(r3, 0x0, 0x4) 09:59:11 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x320f) 09:59:12 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 09:59:12 executing program 0: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 09:59:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) close(r0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 09:59:12 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:12 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x3ff, 0x2) write$evdev(r0, &(0x7f0000000280)=[{{}, 0x2, 0x7}], 0x18) 09:59:12 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x320f) 09:59:12 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) close(r0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 09:59:12 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:12 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x320f) 09:59:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/114, 0x72}, {0x0}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000400)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) r5 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 09:59:12 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:12 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) mount$9p_fd(0x0, 0x0, 0x0, 0x1810, 0x0) 09:59:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) sendmsg(r0, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 09:59:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:12 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x320f) 09:59:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b0f, &(0x7f0000000840)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\xbd\xf8\x04U\x04\x00\x00\x00\t\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19\xcc\x87\xb1\x9a\xc6D\xb4\xa7e\"\xfc$4EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa\xaeWPX9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\xcc\x96\xc3\xd6\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb3\xb0\xe8\xdb[\xc8\xa5\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99\x00\xb7\xd5\xd4\x9fm\xb4\xb0\xa0V3)\xa7\x005b+\xcamN\x8f}\x90/\xe9W?~\xc7W\xd2\xb1\xa6\xf7!\x16\x03D\xd0\xda/\xa7\xe20@\xe1\x8e\x1c\xa7\xb1\x85g\v\r\xd5/\xaf\xea\xedI\xbb\'[\xfc\xe7j\x81{\xcb9PW\x8daR\x01$\xac\xa0\xd7j&\xe0\x19\x9c\x13a\xca\x1c\x17') 09:59:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 09:59:13 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x0, 0x0, 0xfffffffb}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:13 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:13 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x320f) 09:59:13 executing program 0: poll(&(0x7f0000000040), 0x20d7, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x10101, 0x0, 0x0, 0x800e00586) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) 09:59:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @remote}}}}], 0x28}, 0x0) 09:59:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x0, 0x0, 0xfffffffb}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:13 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)='wlan0%-{,\x00', r1) socket(0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 09:59:13 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(r1, r2, 0x0, 0x320f) 09:59:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x0, 0x0, 0xfffffffb}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:13 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:13 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x4000841, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000200)="670f20db0f23bc6764f30fa6c8b805000000b9390000000f01c10f794aa966b854000f00d866baf80cb8437eb580ef66bafc0cecb805000000b90e0000000f01c1d0eb670f01c3", 0x47}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:59:13 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x8}) 09:59:13 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter6\x00') sendfile(r1, r2, 0x0, 0x320f) [ 260.545529][ T9658] encrypted_key: insufficient parameters specified 09:59:14 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3ac72db23c6de21a, 0x0, 0x0, 0x0, 0x0, [{}, {0x8}, {0x0, 0x3, 0x0, [], 0x6}, {}, {0x0, 0x0, 0x9, [], 0xff}, {0x4}, {0x0, 0x4a}, {0x0, 0x0, 0x7, [], 0x14}, {0x1f}, {}, {0x0, 0x0, 0x0, [], 0x40}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x9e}, {0x0, 0xb3, 0x3e}, {0x1, 0x0, 0x0, [], 0x80}]}}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x8}) [ 260.950747][ T3672] BUG: unable to handle page fault for address: fffff52002d00000 [ 260.950810][ T9658] encrypted_key: insufficient parameters specified [ 260.958505][ T3672] #PF: supervisor read access in kernel mode [ 260.958513][ T3672] #PF: error_code(0x0000) - not-present page [ 260.958518][ T3672] PGD 21ffee067 P4D 21ffee067 PUD aa51c067 PMD 5c8c9067 PTE 0 [ 260.958580][ T3672] Oops: 0000 [#1] PREEMPT SMP KASAN [ 260.958600][ T3672] CPU: 1 PID: 3672 Comm: ion_system_heap Not tainted 5.5.0-rc2-syzkaller #0 [ 260.998345][ T3672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.008621][ T3672] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 261.014425][ T3672] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 261.034130][ T3672] RSP: 0018:ffffc9000c66fab8 EFLAGS: 00010216 [ 261.040177][ T3672] RAX: fffff52002d00000 RBX: fffff52002d04000 RCX: ffffffff85de6999 [ 261.048131][ T3672] RDX: 0000000000000001 RSI: 0000000000020000 RDI: ffffc90016800000 [ 261.056094][ T3672] RBP: ffffc9000c66fad0 R08: fffff52002d04000 R09: 0000000000004000 [ 261.064049][ T3672] R10: fffff52002d03fff R11: ffffc9001681ffff R12: fffff52002d00000 [ 261.072106][ T3672] R13: 0000000000020000 R14: 0000000000000000 R15: ffffc9000c66fd08 [ 261.080074][ T3672] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 261.088995][ T3672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.095562][ T3672] CR2: fffff52002d00000 CR3: 000000008e09c000 CR4: 00000000001406e0 [ 261.103517][ T3672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.111467][ T3672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.119418][ T3672] Call Trace: [ 261.122695][ T3672] memset+0x24/0x40 [ 261.126531][ T3672] ion_heap_clear_pages+0x49/0x70 [ 261.131538][ T3672] ion_heap_sglist_zero+0x210/0x270 [ 261.136717][ T3672] ? ion_heap_deferred_free+0x630/0x630 [ 261.142269][ T3672] ? mark_lock+0xc2/0x1220 [ 261.146805][ T3672] ? pgprot_writecombine+0x5e/0xf0 [ 261.151911][ T3672] ? pagerange_is_ram_callback+0x130/0x130 [ 261.157696][ T3672] ? ion_heap_deferred_free+0x295/0x630 [ 261.163250][ T3672] ion_heap_buffer_zero+0xf5/0x150 [ 261.168343][ T3672] ion_system_heap_free+0x1eb/0x250 [ 261.173526][ T3672] ion_buffer_destroy+0x159/0x2d0 [ 261.178534][ T3672] ion_heap_deferred_free+0x29d/0x630 [ 261.183887][ T3672] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 261.189302][ T3672] ? trace_hardirqs_on+0x67/0x240 [ 261.194330][ T3672] ? finish_wait+0x260/0x260 [ 261.198968][ T3672] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 261.205234][ T3672] ? __kthread_parkme+0x108/0x1c0 [ 261.210241][ T3672] ? __kasan_check_read+0x11/0x20 [ 261.215249][ T3672] kthread+0x361/0x430 [ 261.219314][ T3672] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 261.224686][ T3672] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 261.230426][ T3672] ret_from_fork+0x24/0x30 [ 261.234835][ T3672] Modules linked in: [ 261.238713][ T3672] CR2: fffff52002d00000 [ 261.242855][ T3672] ---[ end trace 57019591c12a5b8b ]--- [ 261.248313][ T3672] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 261.254102][ T3672] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 261.273688][ T3672] RSP: 0018:ffffc9000c66fab8 EFLAGS: 00010216 [ 261.279749][ T3672] RAX: fffff52002d00000 RBX: fffff52002d04000 RCX: ffffffff85de6999 [ 261.287712][ T3672] RDX: 0000000000000001 RSI: 0000000000020000 RDI: ffffc90016800000 [ 261.295673][ T3672] RBP: ffffc9000c66fad0 R08: fffff52002d04000 R09: 0000000000004000 [ 261.303635][ T3672] R10: fffff52002d03fff R11: ffffc9001681ffff R12: fffff52002d00000 [ 261.311586][ T3672] R13: 0000000000020000 R14: 0000000000000000 R15: ffffc9000c66fd08 [ 261.319546][ T3672] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 261.328455][ T3672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.335025][ T3672] CR2: fffff52002d00000 CR3: 000000008e09c000 CR4: 00000000001406e0 [ 261.342982][ T3672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.350949][ T3672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.358903][ T3672] Kernel panic - not syncing: Fatal exception [ 261.366152][ T3672] Kernel Offset: disabled [ 261.370476][ T3672] Rebooting in 86400 seconds..