[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.197' (ECDSA) to the list of known hosts. 2020/05/29 09:11:17 fuzzer started 2020/05/29 09:11:17 dialing manager at 10.128.0.26:35105 2020/05/29 09:11:17 syscalls: 3085 2020/05/29 09:11:17 code coverage: enabled 2020/05/29 09:11:17 comparison tracing: enabled 2020/05/29 09:11:17 extra coverage: enabled 2020/05/29 09:11:17 setuid sandbox: enabled 2020/05/29 09:11:17 namespace sandbox: enabled 2020/05/29 09:11:17 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/29 09:11:17 fault injection: enabled 2020/05/29 09:11:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/29 09:11:17 net packet injection: enabled 2020/05/29 09:11:17 net device setup: enabled 2020/05/29 09:11:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/29 09:11:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/29 09:11:17 USB emulation: enabled 09:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syzkaller login: [ 139.196120][ T7061] IPVS: ftp: loaded support on port[0] = 21 09:12:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000d40), 0x0, &(0x7f0000002880)=""/4096, 0x1000}, 0x2}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x18400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0xa0) [ 139.315588][ T7061] chnl_net:caif_netlink_parms(): no params data found [ 139.416883][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.450122][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.457865][ T7061] device bridge_slave_0 entered promiscuous mode [ 139.483992][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.491832][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.499816][ T7061] device bridge_slave_1 entered promiscuous mode [ 139.523542][ T7191] IPVS: ftp: loaded support on port[0] = 21 [ 139.529854][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.542878][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.583550][ T7061] team0: Port device team_slave_0 added [ 139.606932][ T7061] team0: Port device team_slave_1 added 09:12:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) clock_gettime(0x7, &(0x7f0000000180)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r4}, {r2}], 0x2, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0, 0x0) [ 139.654373][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.663982][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.694970][ T7061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.722761][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.729720][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.761077][ T7061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.903378][ T7061] device hsr_slave_0 entered promiscuous mode 09:12:55 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(0x0) openat$cgroup_procs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000700)) [ 139.970554][ T7061] device hsr_slave_1 entered promiscuous mode [ 140.026006][ T7273] IPVS: ftp: loaded support on port[0] = 21 [ 140.119779][ T7191] chnl_net:caif_netlink_parms(): no params data found [ 140.211521][ T7350] IPVS: ftp: loaded support on port[0] = 21 09:12:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000240)=""/85) [ 140.389192][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.397406][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.406941][ T7191] device bridge_slave_0 entered promiscuous mode [ 140.444073][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.462456][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.480852][ T7191] device bridge_slave_1 entered promiscuous mode [ 140.526962][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 140.577185][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.587082][ T7061] netdevsim netdevsim0 netdevsim0: renamed from eth0 09:12:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x6e, &(0x7f0000003b80)={@random="8b474fc30be2", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "dcc400", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "017938", 0x0, 0x11, 0x0, @mcast1, @mcast1, [@dstopts]}}}}}}}, 0x0) [ 140.711146][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.725006][ T7061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.778700][ T7061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.842560][ T7061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.855171][ T7524] IPVS: ftp: loaded support on port[0] = 21 [ 140.944846][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 140.966218][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.974255][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.982234][ T7273] device bridge_slave_0 entered promiscuous mode [ 140.992502][ T7191] team0: Port device team_slave_0 added [ 141.002018][ T7191] team0: Port device team_slave_1 added [ 141.018768][ T7584] IPVS: ftp: loaded support on port[0] = 21 [ 141.029216][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.042946][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.053109][ T7273] device bridge_slave_1 entered promiscuous mode [ 141.101464][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.111279][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.118226][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.145287][ T7191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.161293][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.168243][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.195479][ T7191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.217765][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.259784][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.268034][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.277647][ T7350] device bridge_slave_0 entered promiscuous mode [ 141.322613][ T7273] team0: Port device team_slave_0 added [ 141.328553][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.336937][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.345846][ T7350] device bridge_slave_1 entered promiscuous mode [ 141.403211][ T7191] device hsr_slave_0 entered promiscuous mode [ 141.440402][ T7191] device hsr_slave_1 entered promiscuous mode [ 141.480153][ T7191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.488093][ T7191] Cannot create hsr debugfs directory [ 141.509125][ T7273] team0: Port device team_slave_1 added [ 141.556555][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.568129][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.660972][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.667948][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.695110][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.709626][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.718097][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.744781][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.758094][ T7350] team0: Port device team_slave_0 added [ 141.768150][ T7350] team0: Port device team_slave_1 added [ 141.858035][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.865248][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.892712][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.907357][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.914414][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.941661][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.023755][ T7273] device hsr_slave_0 entered promiscuous mode [ 142.090307][ T7273] device hsr_slave_1 entered promiscuous mode [ 142.140020][ T7273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.147654][ T7273] Cannot create hsr debugfs directory [ 142.166867][ T7584] chnl_net:caif_netlink_parms(): no params data found [ 142.184518][ T7524] chnl_net:caif_netlink_parms(): no params data found [ 142.221126][ T7061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.303259][ T7350] device hsr_slave_0 entered promiscuous mode [ 142.320465][ T7350] device hsr_slave_1 entered promiscuous mode [ 142.360066][ T7350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.360101][ T7350] Cannot create hsr debugfs directory [ 142.484598][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.492023][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.499797][ T7524] device bridge_slave_0 entered promiscuous mode [ 142.512516][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.519599][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.527976][ T7524] device bridge_slave_1 entered promiscuous mode [ 142.555021][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.565312][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.585677][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.593583][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.602808][ T7584] device bridge_slave_0 entered promiscuous mode [ 142.614630][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.622451][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.631784][ T7584] device bridge_slave_1 entered promiscuous mode [ 142.654935][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.676977][ T7524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.697691][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.721815][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.733689][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.742904][ T2804] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.750124][ T2804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.758846][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.768272][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.776844][ T2804] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.784019][ T2804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.791799][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.804643][ T7524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.830410][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.857881][ T7584] team0: Port device team_slave_0 added [ 142.869086][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.881651][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.908709][ T7584] team0: Port device team_slave_1 added [ 142.958995][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.968181][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.978463][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.987645][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.001257][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.008198][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.034179][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.047593][ T7524] team0: Port device team_slave_0 added [ 143.053728][ T7191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.126326][ T7191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.186824][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.198175][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.206715][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.234162][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.248037][ T7524] team0: Port device team_slave_1 added [ 143.260236][ T7191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.315860][ T7191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.374794][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.383611][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.417252][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.425244][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.452612][ T7524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.493278][ T7584] device hsr_slave_0 entered promiscuous mode [ 143.550569][ T7584] device hsr_slave_1 entered promiscuous mode [ 143.599983][ T7584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.607655][ T7584] Cannot create hsr debugfs directory [ 143.614086][ T7350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.683091][ T7061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.694193][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.703058][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.711050][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.738076][ T7524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.751584][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.763520][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.787714][ T7350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.823453][ T7350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.885925][ T7350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.022440][ T7524] device hsr_slave_0 entered promiscuous mode [ 144.070415][ T7524] device hsr_slave_1 entered promiscuous mode [ 144.110459][ T7524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.118052][ T7524] Cannot create hsr debugfs directory [ 144.123975][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.131862][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.144658][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.157488][ T7273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.259047][ T7273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.302096][ T7273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.358268][ T7273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.553991][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.566478][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.587065][ T7061] device veth0_vlan entered promiscuous mode [ 144.622944][ T7584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.662016][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.671738][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.690370][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.699282][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.717489][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.726277][ T7584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.794014][ T7584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.866133][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.880131][ T7061] device veth1_vlan entered promiscuous mode [ 144.890195][ T7584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.995185][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.010888][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.018615][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.041751][ T7524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.084031][ T7524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.136858][ T7524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.177399][ T7191] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.184931][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.193268][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.211496][ T7524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.270272][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.278972][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.291641][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.298811][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.308682][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.319525][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.332955][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.340267][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.348112][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.357857][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.366829][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.373945][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.383105][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.391170][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.418598][ T7061] device veth0_macvtap entered promiscuous mode [ 145.442703][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.452108][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.460862][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.469502][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.482912][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.492806][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.503993][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.513732][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.524715][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.535631][ T2800] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.542855][ T2800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.553472][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.563422][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.579984][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.587982][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.606159][ T7061] device veth1_macvtap entered promiscuous mode [ 145.621217][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.629662][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.640231][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.670839][ T7350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.685140][ T7350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.705124][ T7191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.716804][ T7191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.729497][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.738635][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.750992][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.759451][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.771822][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.783816][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.794074][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.803130][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.811756][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.820351][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.828512][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.840446][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.856836][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.890079][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.897699][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.914540][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.922735][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.930873][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.958595][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.980660][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.992042][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.003736][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.012624][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.019764][ T2799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.027741][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.037081][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.045556][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.052779][ T2799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.060918][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.069427][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.078124][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.087033][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.094941][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.106761][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.138540][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.146689][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.155873][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.164868][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.175623][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.183833][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.200226][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.208812][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.218609][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.227729][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.238323][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.250452][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.279443][ T7273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.291240][ T7273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.308090][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.318245][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.327452][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.336113][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.344993][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.355199][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.372270][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.393466][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.457904][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.466145][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.475130][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.483457][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.500281][ T7350] device veth0_vlan entered promiscuous mode [ 146.572971][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.580269][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.587944][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.596970][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.606137][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.615125][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.623172][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.696629][ T7350] device veth1_vlan entered promiscuous mode [ 146.714066][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.740910][ T8315] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 146.749928][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.782341][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.808152][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 09:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 146.836501][ T2800] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.843865][ T2800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.874695][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.950771][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.959090][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 09:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 147.008410][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.034723][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.048160][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.056542][ T2799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.075174][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.085965][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.094897][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.112311][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.146385][ T7350] device veth0_macvtap entered promiscuous mode 09:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 147.183757][ T7191] device veth0_vlan entered promiscuous mode [ 147.203232][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.215663][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.245659][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.260369][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.280149][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 09:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 147.304566][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.322405][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.335485][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.348213][ T7524] 8021q: adding VLAN 0 to HW filter on device team0 09:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 147.410290][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.418429][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.440394][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.448882][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.499029][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.523456][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.540982][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 09:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 147.550247][ T7350] device veth1_macvtap entered promiscuous mode [ 147.568421][ T7273] device veth0_vlan entered promiscuous mode [ 147.607608][ T7191] device veth1_vlan entered promiscuous mode [ 147.635110][ T7584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 09:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 147.660648][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.672693][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.687574][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.707262][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.717936][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.745593][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.757923][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.769214][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.782868][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.792807][ T2795] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.799966][ T2795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.818357][ T7273] device veth1_vlan entered promiscuous mode [ 147.843199][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.855247][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.867136][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.889767][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.897787][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.907905][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.916693][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.925050][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.934223][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.943385][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.953072][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.962749][ T2795] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.970231][ T2795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.995559][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.006115][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.017646][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.026435][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.038529][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.048854][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.060730][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.069243][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.081014][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.104362][ T7273] device veth0_macvtap entered promiscuous mode [ 148.113913][ T7191] device veth0_macvtap entered promiscuous mode [ 148.138795][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.148705][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.157056][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.166624][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.176156][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.184232][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.192480][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.205351][ T7273] device veth1_macvtap entered promiscuous mode [ 148.219308][ T7191] device veth1_macvtap entered promiscuous mode [ 148.246351][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.254395][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.328760][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.337995][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.352048][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.361861][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.370829][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.379084][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.392970][ T7524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.405206][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.443861][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.457392][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.468368][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.478987][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.490882][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.500287][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.514786][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.526402][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.541591][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.554041][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.564601][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.575746][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.583228][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.591936][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.600941][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.609108][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.617787][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.626442][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.635294][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.703514][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.720977][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.736398][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.753883][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.772418][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.784110][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.803371][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.815698][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.836119][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.854430][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.865582][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.881263][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.916792][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.940973][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.965146][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.974280][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.015566][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.023710][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.062422][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.072088][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.088358][ T7584] device veth0_vlan entered promiscuous mode [ 149.142960][ T7524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.201288][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.210349][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.218899][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.228192][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.374632][ T7584] device veth1_vlan entered promiscuous mode [ 149.502375][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.514173][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.538169][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.554316][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.567709][ T7584] device veth0_macvtap entered promiscuous mode [ 149.578958][ T29] audit: type=1804 audit(1590743585.336:2): pid=8411 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702875362/syzkaller.xrkmV6/0/bus" dev="sda1" ino=15755 res=1 [ 149.622322][ T7584] device veth1_macvtap entered promiscuous mode [ 149.640020][ T29] audit: type=1804 audit(1590743585.396:3): pid=8412 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir702875362/syzkaller.xrkmV6/0/bus" dev="sda1" ino=15755 res=1 [ 150.375853][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.388631][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.401962][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.412526][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.439964][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.452018][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.463785][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.475430][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.485718][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.496696][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.507072][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.517799][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.537224][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0 09:13:06 executing program 1: 09:13:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:06 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee01}) [ 150.579563][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.588372][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.622082][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.645762][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.664084][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.685627][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.703666][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.717545][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.733926][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.745868][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.779328][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.797341][ T7524] device veth0_vlan entered promiscuous mode [ 150.815392][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.836792][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.866053][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.890215][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.899023][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.920930][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.944322][ T7524] device veth1_vlan entered promiscuous mode [ 151.080309][ T0] NOHZ: local_softirq_pending 08 [ 151.130128][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.138118][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.170223][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.178889][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.192175][ T7524] device veth0_macvtap entered promiscuous mode [ 151.210712][ T7524] device veth1_macvtap entered promiscuous mode [ 151.248162][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.265111][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.276424][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.294361][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.305169][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.316515][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.327161][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.338272][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.348443][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.359169][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.371357][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.379900][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.387960][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.396560][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.405947][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.423925][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.434771][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.446247][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.456868][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.466777][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.477426][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.487573][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.498278][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.508171][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.518722][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.530832][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.539226][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.548743][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:13:07 executing program 4: 09:13:07 executing program 2: 09:13:07 executing program 3: 09:13:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:07 executing program 1: 09:13:07 executing program 5: 09:13:07 executing program 1: 09:13:07 executing program 5: 09:13:07 executing program 2: 09:13:07 executing program 3: 09:13:07 executing program 4: 09:13:07 executing program 2: 09:13:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:13:07 executing program 1: 09:13:07 executing program 4: 09:13:07 executing program 5: 09:13:07 executing program 3: 09:13:08 executing program 1: 09:13:08 executing program 2: 09:13:08 executing program 4: 09:13:08 executing program 3: 09:13:08 executing program 5: 09:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:13:08 executing program 2: 09:13:08 executing program 1: 09:13:08 executing program 4: 09:13:08 executing program 3: 09:13:08 executing program 5: 09:13:08 executing program 2: 09:13:08 executing program 1: 09:13:08 executing program 3: 09:13:08 executing program 4: 09:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:13:08 executing program 5: 09:13:08 executing program 2: 09:13:08 executing program 1: 09:13:08 executing program 3: 09:13:08 executing program 4: 09:13:08 executing program 5: 09:13:08 executing program 2: 09:13:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:13:08 executing program 3: 09:13:08 executing program 4: 09:13:08 executing program 1: 09:13:08 executing program 5: 09:13:08 executing program 2: 09:13:08 executing program 4: 09:13:08 executing program 3: 09:13:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:13:08 executing program 1: 09:13:08 executing program 5: 09:13:08 executing program 2: 09:13:08 executing program 3: 09:13:08 executing program 4: 09:13:08 executing program 1: 09:13:08 executing program 5: 09:13:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:13:08 executing program 3: 09:13:08 executing program 2: 09:13:08 executing program 1: 09:13:08 executing program 4: 09:13:08 executing program 5: 09:13:08 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:13:08 executing program 3: 09:13:08 executing program 2: 09:13:08 executing program 5: 09:13:09 executing program 1: 09:13:09 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:13:09 executing program 4: 09:13:09 executing program 3: 09:13:09 executing program 5: 09:13:09 executing program 2: 09:13:09 executing program 1: 09:13:09 executing program 4: 09:13:09 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:13:09 executing program 3: 09:13:09 executing program 5: 09:13:09 executing program 2: 09:13:09 executing program 4: 09:13:09 executing program 1: 09:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:09 executing program 3: 09:13:09 executing program 5: 09:13:09 executing program 2: 09:13:09 executing program 1: 09:13:09 executing program 5: 09:13:09 executing program 4: 09:13:09 executing program 3: 09:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:09 executing program 2: 09:13:09 executing program 1: 09:13:09 executing program 5: 09:13:09 executing program 4: 09:13:09 executing program 3: 09:13:09 executing program 2: 09:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:09 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='#A \n'], 0x46) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 09:13:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @dev}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 09:13:09 executing program 3: gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000044) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r3 = dup(r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)) 09:13:09 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x103002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 09:13:09 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) 09:13:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:13:09 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, 0x0, 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x103002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 09:13:09 executing program 1: gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)) [ 153.959376][ C0] hrtimer: interrupt took 47430 ns 09:13:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:13:09 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xd4602, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1df}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x4, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = open(0x0, 0x149842, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="cc0000000000000000000000000000000000000000000000000000000000000022f36edab7e6328f32299d31e77ce84758accefc7efba87a25f54f8bce22a2b6c099f6ea4ee5bfa52e83cb89bf7e7625a53fe6a90d544692b70e174aef0b13529343701a9bc803c3"], 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000380)="929c703fb6f79e24e6fcaa3537d3d99d1ef82de4ec9abe10585627287784505d905035dbb743bc99b416d950181f69e608e1b643c308d02d20cb28875c10fec641b28c0592b65c5c768e5216f4e119d501278a81680629f60abbd8915148f3cec83bea18a22ea69af786d8ed694abe6e502fb9e227cbeac08852f572c7d31ab1c62c5c338d2049ac", 0x88, 0x1}) setpgid(0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000002c0)={r2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0}, 0x0) 09:13:09 executing program 3: gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000044) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r3 = dup(r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)) 09:13:09 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = open(&(0x7f0000000780)='./bus\x00', 0x103002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 09:13:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:10 executing program 3: gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000044) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r3 = dup(r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)) [ 154.508768][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.632563][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.686819][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.773989][ T8617] device bridge_slave_0 left promiscuous mode [ 154.792671][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.823003][ T29] audit: type=1800 audit(1590743590.586:4): pid=8598 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15790 res=0 09:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 154.954998][ T8617] device bridge_slave_1 left promiscuous mode [ 154.975369][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state 09:13:10 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0xd4602, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1df}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x4, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = open(0x0, 0x149842, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="cc0000000000000000000000000000000000000000000000000000000000000022f36edab7e6328f32299d31e77ce84758accefc7efba87a25f54f8bce22a2b6c099f6ea4ee5bfa52e83cb89bf7e7625a53fe6a90d544692b70e174aef0b13529343701a9bc803c3"], 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000380)="929c703fb6f79e24e6fcaa3537d3d99d1ef82de4ec9abe10585627287784505d905035dbb743bc99b416d950181f69e608e1b643c308d02d20cb28875c10fec641b28c0592b65c5c768e5216f4e119d501278a81680629f60abbd8915148f3cec83bea18a22ea69af786d8ed694abe6e502fb9e227cbeac08852f572c7d31ab1c62c5c338d2049ac", 0x88, 0x1}) setpgid(0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000002c0)={r2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0}, 0x0) 09:13:10 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = open(&(0x7f0000000780)='./bus\x00', 0x103002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 09:13:10 executing program 3: gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000044) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r3 = dup(r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)) 09:13:10 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x103002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 09:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 155.099219][ T8617] bond0: (slave bond_slave_0): Releasing backup interface [ 155.593918][ T8617] bond0: (slave bond_slave_1): Releasing backup interface [ 156.082822][ T29] audit: type=1800 audit(1590743591.846:5): pid=8674 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15806 res=0 [ 156.204871][ T8617] team0: Port device team_slave_0 removed [ 156.451323][ T8617] team0: Port device team_slave_1 removed [ 156.520057][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.527513][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.569818][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.577319][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_1 09:13:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xd4602, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1df}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x4, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = open(0x0, 0x149842, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="cc0000000000000000000000000000000000000000000000000000000000000022f36edab7e6328f32299d31e77ce84758accefc7efba87a25f54f8bce22a2b6c099f6ea4ee5bfa52e83cb89bf7e7625a53fe6a90d544692b70e174aef0b13529343701a9bc803c3"], 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000380)="929c703fb6f79e24e6fcaa3537d3d99d1ef82de4ec9abe10585627287784505d905035dbb743bc99b416d950181f69e608e1b643c308d02d20cb28875c10fec641b28c0592b65c5c768e5216f4e119d501278a81680629f60abbd8915148f3cec83bea18a22ea69af786d8ed694abe6e502fb9e227cbeac08852f572c7d31ab1c62c5c338d2049ac", 0x88, 0x1}) setpgid(0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000002c0)={r2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0}, 0x0) 09:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:12 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={{0x2, 0x0, @reserved="89ce035f74eaa8b026e857d3eab8c0b29fd05ec75de39ba6782c84e946c69a34"}}) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 09:13:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000a00)=ANY=[], 0xbd) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) fstatfs(r0, 0x0) 09:13:12 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = open(&(0x7f0000000780)='./bus\x00', 0x103002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) [ 156.659414][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.664803][ T8617] syz-executor.1 (8617) used greatest stack depth: 24208 bytes left [ 156.668508][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.713672][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.753311][ T8665] device bridge_slave_0 left promiscuous mode [ 156.790648][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.822052][ T8691] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 156.832581][ T8691] FAT-fs (loop5): Filesystem has been set read-only 09:13:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000a00)=ANY=[], 0xbd) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) fstatfs(r0, 0x0) [ 156.842264][ T8691] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 17) 09:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 156.970419][ T8665] device bridge_slave_1 left promiscuous mode [ 156.983681][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.138480][ T8665] bond0: (slave bond_slave_0): Releasing backup interface [ 157.210221][ T8714] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 157.250323][ T8714] FAT-fs (loop5): Filesystem has been set read-only [ 157.294144][ T8714] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 17) [ 157.568232][ T8665] bond0: (slave bond_slave_1): Releasing backup interface [ 157.575632][ T29] audit: type=1804 audit(1590743593.336:6): pid=8703 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir098605016/syzkaller.C2tYCN/23/bus" dev="sda1" ino=15809 res=1 [ 157.638788][ T29] audit: type=1800 audit(1590743593.336:7): pid=8703 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15809 res=0 [ 157.697637][ T29] audit: type=1804 audit(1590743593.336:8): pid=8709 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir098605016/syzkaller.C2tYCN/23/bus" dev="sda1" ino=15809 res=1 [ 157.760826][ T29] audit: type=1804 audit(1590743593.366:9): pid=8730 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir098605016/syzkaller.C2tYCN/23/bus" dev="sda1" ino=15809 res=1 [ 157.995978][ T8665] team0: Port device team_slave_0 removed [ 158.111128][ T8665] team0: Port device team_slave_1 removed [ 158.170712][ T8665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.178335][ T8665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.232040][ T8665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.239593][ T8665] batman_adv: batadv0: Removing interface: batadv_slave_1 09:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000a00)=ANY=[], 0xbd) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) fstatfs(r0, 0x0) 09:13:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000a00)=ANY=[], 0xbd) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) fstatfs(r0, 0x0) 09:13:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x82) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x13) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r4, r3, 0x0, 0xa198) 09:13:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) [ 158.299419][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.310549][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.330977][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:13:14 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 158.553727][ T8742] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) 09:13:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000200)=""/174) 09:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) [ 158.677414][ T8742] FAT-fs (loop5): Filesystem has been set read-only [ 158.710853][ T8742] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 17) 09:13:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000a00)=ANY=[], 0xbd) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) fstatfs(r0, 0x0) 09:13:14 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 09:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) [ 159.014264][ T29] audit: type=1804 audit(1590743594.776:10): pid=8786 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir821546186/syzkaller.iCMbBc/23/file0/file0" dev="loop4" ino=27 res=1 [ 159.192873][ T29] audit: type=1804 audit(1590743594.776:11): pid=8779 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir821546186/syzkaller.iCMbBc/23/file0/file0" dev="loop4" ino=27 res=1 [ 159.245907][ T8791] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 159.257853][ T8791] FAT-fs (loop5): Filesystem has been set read-only 09:13:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') [ 159.297497][ T8791] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 17) [ 159.328659][ T29] audit: type=1804 audit(1590743594.916:12): pid=8741 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir098605016/syzkaller.C2tYCN/24/file0/file0" dev="loop3" ino=25 res=1 09:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x82) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x13) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r4, r3, 0x0, 0xa198) [ 159.466868][ T8741] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 159.475783][ T29] audit: type=1804 audit(1590743594.976:13): pid=8741 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir098605016/syzkaller.C2tYCN/24/file0/file0" dev="loop3" ino=25 res=1 [ 159.487318][ T8741] FAT-fs (loop3): Filesystem has been set read-only 09:13:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000a00)=ANY=[], 0xbd) fstatfs(r0, 0x0) 09:13:15 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000180)=""/197, 0xffffff6d}, {&(0x7f0000000300)=""/87, 0x34}, {&(0x7f0000000700)=""/236, 0xd8}], 0x4) 09:13:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0x300) 09:13:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fstatfs(r0, 0x0) 09:13:15 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f90000082505a8a40700000000010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_out(r1, 0xc0045878, 0x0) 09:13:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) fstatfs(r0, 0x0) 09:13:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) [ 160.309332][ T2701] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 160.559202][ T2701] usb 3-1: Using ep0 maxpacket: 8 09:13:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fbaeaffffff0000000040030000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x28}}, 0x0) 09:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/235, 0xeb}}, {{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) sync() 09:13:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 160.682349][ T2701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 160.713529][ T2701] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 160.802663][ T2701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 09:13:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 160.858115][ T2701] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 09:13:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) [ 160.912629][ T2701] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.935131][ T2701] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 160.978352][ T2701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.002373][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.011678][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.019451][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.080544][ T8858] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 161.334918][ T8858] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 161.608094][ T2701] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 161.646967][ T2701] usb 3-1: USB disconnect, device number 2 [ 161.710602][ T2701] usblp0: removed [ 162.369707][ T2795] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 162.639351][ T2795] usb 3-1: Using ep0 maxpacket: 8 [ 162.759781][ T2795] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 162.770924][ T2795] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 162.782469][ T2795] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.793464][ T2795] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 162.804016][ T2795] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.817074][ T2795] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 162.826265][ T2795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.850589][ T8858] raw-gadget gadget: fail, usb_ep_enable returned -22 09:13:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/235, 0xeb}}, {{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) sync() 09:13:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/144, 0x90}, {0x0}, {0x0}], 0x3, &(0x7f0000001880)=""/235, 0xeb}}, {{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x7}, 0x0) r4 = socket(0x1e, 0x2, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x100}, 0x10) tee(0xffffffffffffffff, r4, 0x5, 0x8) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f0000007900), 0x4000099, 0x101d0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8c) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 09:13:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 163.019224][ T2795] usblp: can't set desired altsetting 0 on interface 0 [ 163.035196][ T2795] usb 3-1: USB disconnect, device number 3 09:13:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:19 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) 09:13:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:19 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) 09:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:13:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = io_uring_setup(0xf1, &(0x7f0000000580)={0x0, 0x0, 0x7}) close(r2) 09:13:19 executing program 3: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/kvm\x00') rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x8001}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 09:13:19 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) 09:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:13:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r3, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) 09:13:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4100b2ed0f23c0bcb02e23d69123d691640f09f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b801000000b80101590043004300d9b9800000c00f3235008000000f30", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:13:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x13) pwritev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) [ 164.267433][ T9055] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, and O_DIRECT support! 09:13:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) [ 164.355370][ T9055] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 164.399070][ T9055] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 164.474396][ T9055] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 164.494074][ T9055] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=e002c01c, mo2=0002] [ 164.516558][ T9055] System zones: 0-7 [ 164.535277][ T9055] EXT4-fs (loop3): mounting with "discard" option, but the device does not support discard [ 164.650409][ T9055] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 09:13:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = io_uring_setup(0xf1, &(0x7f0000000580)={0x0, 0x0, 0x7}) close(r2) 09:13:20 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) 09:13:20 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x13) pwritev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/144, 0x90}, {0x0}, {0x0}], 0x3, &(0x7f0000001880)=""/235, 0xeb}}, {{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x7}, 0x0) r4 = socket(0x1e, 0x2, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x100}, 0x10) tee(0xffffffffffffffff, r4, 0x5, 0x8) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f0000007900), 0x4000099, 0x101d0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8c) 09:13:20 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x13) pwritev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:20 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:20 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405c576cd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602437bb2e9b66ff1246c93e5c0289644e334432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf89b394807474b3c3156630d3c563ad9c4372975e40a7a1b5005084f485b5188167968e78cc40d2ce2a61821d9b918ff28101373eb3e27a55809a1b4fd25fad93a3895811c01d087796fb714628b0bbe6998867033d2f3f11f144655a602008097e47b222bf1e1b7f5601ca2b07a0cc4cd4f6640b705a4d48242093f79204b", 0xe8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xee01, 0x0, 0xfffffffd}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 09:13:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) 09:13:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1114b5f871f76563beed3ec800836274c2b90aefeb463a818a434c306b397af3dd1e0d354934ee28358b901147bc3bb3d466bfada427"], 0x8, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="ff"], 0x1, 0x0) r2 = gettid() setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) tkill(r2, 0x33) [ 165.199470][ T9148] ptrace attach of "/root/syz-executor.3"[9147] was attempted by "/root/syz-executor.3"[9148] 09:13:21 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = io_uring_setup(0xf1, &(0x7f0000000580)={0x0, 0x0, 0x7}) close(r2) 09:13:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) 09:13:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:21 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:21 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x44a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) setresuid(0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000240)=[{0x0, 0x100, 0x1800}, {0x0, 0x2fe4, 0x1800}, {0x1, 0x6, 0x800}, {0x4, 0x101, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x8a8f, 0x800}, {0x3, 0xf001, 0x1000}, {0x1, 0x0, 0x2000}], 0x8, &(0x7f00000003c0)={r2, r3+10000000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000000060bc7d94004c2c00fe8000000000001f0000000000000032ff0200000000000000000000000000012f00000000000000042065580000000000000800000086dd080088734a4eecbed8c0790022eb0000000020000000020000000000000000267e84e8006558000002004ada80ca1e2a410cd944c3c567c44f0ed89eff695b0b13d1cb6a9252c8a569f186b200f1e6a3c443df27d601b9ff7bf2a412b9842d8fde2b3c7f963016e5de6ef2130c29ed76e4eaafa880c697d46a3c082ad3d6634d44787e878bd15c558182eddd4c621b820100000000000000c05430c99c3223e705d90d54eac5d40b6b83d6348ecef63090b1564f57ed2605eca105f2a4c03b06abcc6ba964d8136cb00a5cf7b2c2259047d00183d6cd3669c6073bc337494dec46f9dd9bb6bf913df35aa7cbade148fc60f8442061e1d5fedc41952695a3564bcac135f29da8733f28c93d5b6d4a5ecf2d2bef6d8907b668db207a567de6f2e26a3b089fd69adf6e275df38ff7b46b9cbcb805955f16d1afbcae61bba1cfc3936e72fb493c48977a762a3f26ac0d4e254e4e8231236f95f675faafcb9bd795006fc11762b8bd5a92f3b67dc109e76163e7615f34ca9002e8fa68c6b190d9a600"/467], 0x7e) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) epoll_create(0xfff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x7, &(0x7f00000000c0)=[{0x20d8, 0x3, 0x3, 0x3f}, {0x83, 0x9, 0xd5, 0xfffffa3c}, {0x81, 0x81, 0x0, 0x3f}, {0x8001, 0x6, 0x7, 0xab7}, {0x4, 0x1, 0x0, 0x3f}, {0x5, 0x1, 0x2, 0x4}, {0x5, 0x3f, 0x0, 0x5}]}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @generic={0x2b, "e58a7768a83c7936514e511bcefc"}, @ipx={0x4, 0x2, 0xa453, "9f68bbfde8ed", 0x3}, @phonet={0x23, 0x0, 0x2, 0x20}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vlan1\x00', 0x37, 0x7f, 0x7}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) 09:13:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x3f0, 0x198, 0x0, 0x198, 0x0, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "140004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@uncond, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x3, "6389", 0x2}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000480)=0x6, 0x4) 09:13:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x13) pwritev(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x20) 09:13:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) 09:13:21 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/223, 0xdf}], 0x1, 0xb6) 09:13:21 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405c576cd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602437bb2e9b66ff1246c93e5c0289644e334432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf89b394807474b3c3156630d3c563ad9c4372975e40a7a1b5005084f485b5188167968e78cc40d2ce2a61821d9b918ff28101373eb3e27a55809a1b4fd25fad93a3895811c01d087796fb714628b0bbe6998867033d2f3f11f144655a602008097e47b222bf1e1b7f5601ca2b07a0cc4cd4f6640b705a4", 0xe0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0x0, 0xfffffffd}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 09:13:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstatfs(r0, 0x0) 09:13:21 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x44a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) setresuid(0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000240)=[{0x0, 0x100, 0x1800}, {0x0, 0x2fe4, 0x1800}, {0x1, 0x6, 0x800}, {0x4, 0x101, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x8a8f, 0x800}, {0x3, 0xf001, 0x1000}, {0x1, 0x0, 0x2000}], 0x8, &(0x7f00000003c0)={r2, r3+10000000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/467], 0x7e) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) epoll_create(0xfff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x7, &(0x7f00000000c0)=[{0x20d8, 0x3, 0x3, 0x3f}, {0x83, 0x9, 0xd5, 0xfffffa3c}, {0x81, 0x81, 0x0, 0x3f}, {0x8001, 0x6, 0x7, 0xab7}, {0x4, 0x1, 0x0, 0x3f}, {0x5, 0x1, 0x2, 0x4}, {0x5, 0x3f, 0x0, 0x5}]}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @generic={0x2b, "e58a7768a83c7936514e511bcefc"}, @ipx={0x4, 0x2, 0xa453, "9f68bbfde8ed", 0x3}, @phonet={0x23, 0x0, 0x2, 0x20}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vlan1\x00', 0x37, 0x7f, 0x7}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) [ 166.235576][ T9214] ptrace attach of "/root/syz-executor.3"[9213] was attempted by "/root/syz-executor.3"[9214] [ 170.922028][ T0] NOHZ: local_softirq_pending 08 [ 171.561870][ T0] NOHZ: local_softirq_pending 08 [ 192.040514][ T0] NOHZ: local_softirq_pending 08 [ 213.801516][ T0] NOHZ: local_softirq_pending 08 [ 232.356834][ T0] NOHZ: local_softirq_pending 08 [ 273.953025][ T0] NOHZ: local_softirq_pending 08 [ 275.232304][ T0] NOHZ: local_softirq_pending 08 [ 286.808869][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 286.815691][ C0] rcu: 0-....: (10560 ticks this GP) idle=d9e/1/0x4000000000000002 softirq=12371/12373 fqs=5250 [ 286.826513][ C0] (t=10502 jiffies g=11505 q=437) [ 286.831600][ C0] NMI backtrace for cpu 0 [ 286.835936][ C0] CPU: 0 PID: 9189 Comm: syz-executor.1 Not tainted 5.7.0-rc7-syzkaller #0 [ 286.844488][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.854534][ C0] Call Trace: [ 286.857791][ C0] [ 286.860707][ C0] dump_stack+0x1e9/0x30e [ 286.865012][ C0] nmi_cpu_backtrace+0x9f/0x180 [ 286.869952][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.876002][ C0] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 286.881998][ C0] rcu_dump_cpu_stacks+0x199/0x2a0 [ 286.887082][ C0] rcu_sched_clock_irq+0x186a/0x1ac0 [ 286.892406][ C0] ? __this_cpu_preempt_check+0x9/0x20 [ 286.897876][ C0] update_process_times+0x12c/0x180 [ 286.903110][ C0] tick_sched_timer+0x254/0x410 [ 286.907934][ C0] ? tick_setup_sched_timer+0x3e0/0x3e0 [ 286.913448][ C0] __hrtimer_run_queues+0x42d/0x930 [ 286.918624][ C0] hrtimer_interrupt+0x373/0xd60 [ 286.923540][ C0] ? check_preemption_disabled+0x40/0x240 [ 286.929234][ C0] ? debug_smp_processor_id+0x5/0x20 [ 286.934556][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 286.940071][ C0] apic_timer_interrupt+0xf/0x20 [ 286.944977][ C0] [ 286.947931][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x68/0xe0 [ 286.954140][ C0] Code: 75 58 83 3d 19 d9 0b 08 00 74 28 65 4c 8b 34 25 40 1e 02 00 49 81 c6 c4 08 00 00 4c 89 f0 48 c1 e8 03 42 8a 04 38 84 c0 75 58 <31> db 41 83 3e 00 0f 94 c3 89 d8 5b 41 5e 41 5f c3 48 c7 c1 64 eb [ 286.973725][ C0] RSP: 0018:ffffc900181bfd08 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 286.982113][ C0] RAX: 1ffff11011da1100 RBX: 0000000000000000 RCX: 0000000000040000 [ 286.993016][ C0] RDX: 0000000000000000 RSI: 0000000000001c9b RDI: ffffffff88e95428 [ 287.001153][ C0] RBP: ffff88809cdc9160 R08: dffffc0000000000 R09: ffffed10139b9261 [ 287.009097][ C0] R10: ffffed10139b9261 R11: 0000000000000000 R12: dffffc0000000000 [ 287.017212][ C0] R13: ffff8880a86a62a8 R14: ffff88808ed08d44 R15: dffffc0000000000 [ 287.025207][ C0] ___might_sleep+0x1f/0x570 [ 287.030733][ C0] io_ring_ctx_wait_and_kill+0xbe/0x820 [ 287.036266][ C0] ? io_uring_flush+0xba0/0xba0 [ 287.041097][ C0] io_uring_release+0x59/0x70 [ 287.045794][ C0] __fput+0x2ed/0x750 [ 287.049798][ C0] task_work_run+0x147/0x1d0 [ 287.054403][ C0] prepare_exit_to_usermode+0x48e/0x600 [ 287.059932][ C0] ? syscall_return_slowpath+0xf9/0x420 [ 287.065449][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 287.071312][ C0] RIP: 0033:0x45ca29 [ 287.075179][ C0] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.094927][ C0] RSP: 002b:00007f75705ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 287.103314][ C0] RAX: 0000000000000000 RBX: 00000000004dac40 RCX: 000000000045ca29 [ 287.111256][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 287.119198][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 287.127150][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 287.135118][ C0] R13: 0000000000000078 R14: 00000000005255f2 R15: 00007f75705de6d4