[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 50.640694][ T6735] scp (6735) used greatest stack depth: 21424 bytes left Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.130' (ECDSA) to the list of known hosts. 2020/06/27 02:08:06 fuzzer started 2020/06/27 02:08:06 dialing manager at 10.128.0.26:45395 2020/06/27 02:08:06 syscalls: 3118 2020/06/27 02:08:06 code coverage: enabled 2020/06/27 02:08:06 comparison tracing: enabled 2020/06/27 02:08:06 extra coverage: enabled 2020/06/27 02:08:06 setuid sandbox: enabled 2020/06/27 02:08:06 namespace sandbox: enabled 2020/06/27 02:08:06 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/27 02:08:06 fault injection: enabled 2020/06/27 02:08:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/27 02:08:06 net packet injection: enabled 2020/06/27 02:08:06 net device setup: enabled 2020/06/27 02:08:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/27 02:08:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/27 02:08:06 USB emulation: enabled 02:09:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0x4038ae7a, &(0x7f0000000040)) syzkaller login: [ 169.788548][ T6807] IPVS: ftp: loaded support on port[0] = 21 02:09:59 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) connect(r0, &(0x7f0000000180)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) [ 169.923102][ T6807] chnl_net:caif_netlink_parms(): no params data found [ 170.009059][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.022399][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.038078][ T6807] device bridge_slave_0 entered promiscuous mode [ 170.058348][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.065516][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.085717][ T6807] device bridge_slave_1 entered promiscuous mode [ 170.131844][ T6938] IPVS: ftp: loaded support on port[0] = 21 [ 170.141713][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.163358][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.222354][ T6807] team0: Port device team_slave_0 added [ 170.243573][ T6807] team0: Port device team_slave_1 added [ 170.322085][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.331055][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.358167][ T6807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 02:10:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000006a000109000000000000000090fe"], 0x18}], 0x1}, 0x0) [ 170.388898][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.405581][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.455623][ T6807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.494460][ T6938] chnl_net:caif_netlink_parms(): no params data found [ 170.629249][ T6807] device hsr_slave_0 entered promiscuous mode 02:10:00 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={[{@size={'size', 0x3d, [0x70]}}]}) [ 170.696012][ T6807] device hsr_slave_1 entered promiscuous mode [ 170.849322][ T7075] IPVS: ftp: loaded support on port[0] = 21 [ 170.958793][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.970436][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.980140][ T6938] device bridge_slave_0 entered promiscuous mode [ 171.016306][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.023480][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.047102][ T6938] device bridge_slave_1 entered promiscuous mode [ 171.097502][ T7123] IPVS: ftp: loaded support on port[0] = 21 02:10:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4040aeee, &(0x7f0000000000)={0x0, 0x1b000}) [ 171.138640][ T6938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.191169][ T6938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.309267][ T6807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.368130][ T6938] team0: Port device team_slave_0 added [ 171.375109][ T6807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.440550][ T6807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.455937][ T7207] IPVS: ftp: loaded support on port[0] = 21 02:10:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x32, &(0x7f0000000380)={@private, @loopback}, &(0x7f00000003c0)=0xc) [ 171.492261][ T6938] team0: Port device team_slave_1 added [ 171.521845][ T6807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.730336][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.737434][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.766180][ T6938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.787518][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 171.812941][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.820179][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.847297][ T6938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.872039][ T7264] IPVS: ftp: loaded support on port[0] = 21 [ 171.907797][ T7123] chnl_net:caif_netlink_parms(): no params data found [ 171.969543][ T6938] device hsr_slave_0 entered promiscuous mode [ 172.029322][ T6938] device hsr_slave_1 entered promiscuous mode [ 172.085681][ T6938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.093405][ T6938] Cannot create hsr debugfs directory [ 172.204118][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.212554][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.220773][ T7075] device bridge_slave_0 entered promiscuous mode [ 172.230827][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.237993][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.246079][ T7075] device bridge_slave_1 entered promiscuous mode [ 172.297246][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.313866][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.411271][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 172.433439][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.442097][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.453062][ T7123] device bridge_slave_0 entered promiscuous mode [ 172.464456][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.473790][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.481883][ T7123] device bridge_slave_1 entered promiscuous mode [ 172.515283][ T7075] team0: Port device team_slave_0 added [ 172.541594][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.556848][ T7075] team0: Port device team_slave_1 added [ 172.608270][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.627956][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.634923][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.661706][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.718822][ T7123] team0: Port device team_slave_0 added [ 172.725299][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.734295][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.761334][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.793875][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.809645][ T7123] team0: Port device team_slave_1 added [ 172.868919][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.876770][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.904142][ T7123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.927301][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.934278][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.961679][ T7123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.978008][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.989332][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.008617][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.016919][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.024013][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.032987][ T7207] device bridge_slave_0 entered promiscuous mode [ 173.055213][ T7264] chnl_net:caif_netlink_parms(): no params data found [ 173.093357][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.101103][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.110017][ T7207] device bridge_slave_1 entered promiscuous mode [ 173.162611][ T7075] device hsr_slave_0 entered promiscuous mode [ 173.205814][ T7075] device hsr_slave_1 entered promiscuous mode [ 173.255552][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.255590][ T7075] Cannot create hsr debugfs directory [ 173.292164][ T6938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.340781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.349634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.359534][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.366879][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.374810][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.384649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.393222][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.400349][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.408150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.500736][ T7123] device hsr_slave_0 entered promiscuous mode [ 173.545888][ T7123] device hsr_slave_1 entered promiscuous mode [ 173.585502][ T7123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.593103][ T7123] Cannot create hsr debugfs directory [ 173.608712][ T6938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.664325][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.672894][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.695394][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.704614][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.714833][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.724760][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.736328][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.749181][ T6938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.849488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.861829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.871270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.883193][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.900198][ T6938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.968702][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.978191][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.989157][ T7264] device bridge_slave_0 entered promiscuous mode [ 174.041400][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.053009][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.062026][ T7264] device bridge_slave_1 entered promiscuous mode [ 174.087734][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.098930][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.109470][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.135872][ T7207] team0: Port device team_slave_0 added [ 174.143767][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.172684][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.193528][ T7207] team0: Port device team_slave_1 added [ 174.245810][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.252792][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.279660][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.295869][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.302913][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.329621][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.383549][ T7264] team0: Port device team_slave_0 added [ 174.403169][ T7264] team0: Port device team_slave_1 added [ 174.433971][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.442132][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.497702][ T7207] device hsr_slave_0 entered promiscuous mode [ 174.525833][ T7207] device hsr_slave_1 entered promiscuous mode [ 174.556542][ T7207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.564120][ T7207] Cannot create hsr debugfs directory [ 174.611429][ T6807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.642392][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.650447][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.677129][ T7264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.702222][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.709537][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.736327][ T7264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.792211][ T7264] device hsr_slave_0 entered promiscuous mode [ 174.829923][ T7264] device hsr_slave_1 entered promiscuous mode [ 174.885415][ T7264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.892995][ T7264] Cannot create hsr debugfs directory [ 174.913756][ T7123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.982784][ T7123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.040420][ T7123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.124677][ T7123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.243364][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.252486][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.267879][ T7075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.310248][ T7075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.372822][ T7075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.462016][ T7075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.600586][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.612192][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.624880][ T6807] device veth0_vlan entered promiscuous mode [ 175.662984][ T6938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.670341][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.680286][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.700290][ T7207] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.762657][ T6807] device veth1_vlan entered promiscuous mode [ 175.779188][ T7207] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.845113][ T7207] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.921910][ T7207] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.960258][ T6938] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.968087][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.982130][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.990767][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.999290][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.072199][ T7264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.130879][ T7264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.187840][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.198026][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.207618][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.214696][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.222723][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.231618][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.240707][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.247815][ T2512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.256145][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.264646][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.274670][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.287037][ T7123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.304810][ T6807] device veth0_macvtap entered promiscuous mode [ 176.314383][ T7264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.388493][ T7264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.433673][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.442851][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.452231][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.461766][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.471334][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.480381][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.499620][ T6807] device veth1_macvtap entered promiscuous mode [ 176.523513][ T6938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.536420][ T6938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.553294][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.565900][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.574591][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.585037][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.594005][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.603666][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.612630][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.621180][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.629191][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.651951][ T7123] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.676047][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.720300][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.728172][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.740477][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.749674][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.759036][ T2560] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.766152][ T2560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.797173][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.815406][ T6938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.824100][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.839653][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.849538][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.860546][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.871051][ T2560] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.878158][ T2560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.890215][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.899125][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.907991][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.916873][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.926237][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.954047][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.042261][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.129918][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.139538][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.148097][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.156579][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.167820][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.177397][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.186967][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.195897][ T2560] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.202939][ T2560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.211151][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.220928][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.229882][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.239032][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.249448][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.259320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.295656][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.304019][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.320835][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.330506][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.361847][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.422610][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.445991][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.454756][ T2560] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.461920][ T2560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.474755][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.499088][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.507687][ T8063] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 177.532893][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.592410][ T6938] device veth0_vlan entered promiscuous mode [ 177.626066][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.637987][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.647075][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.657992][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 02:10:07 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x38}, @timestamp={0x44, 0xc, 0x8, 0x4, 0x0, [0x0, 0x0]}]}}}}}}, 0x0) [ 177.706704][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.714693][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.725947][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.733771][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.744370][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.762044][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.785685][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.794133][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 02:10:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x4}) [ 177.807046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.822356][ T6938] device veth1_vlan entered promiscuous mode [ 177.854843][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.873094][ T7075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.891340][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:10:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x36e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4800, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdbc0b92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) [ 177.930545][ T7123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.947103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.958338][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.977006][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.991716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.004381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.013470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.023752][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.081171][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.090046][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.099629][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.106848][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.114973][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.123851][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.132576][ T8080] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.168321][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.176072][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.184875][ T8081] device bridge0 entered promiscuous mode [ 178.276631][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.284749][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.297619][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.307134][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.314250][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.322442][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.332856][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.342337][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.352702][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.369824][ T6938] device veth0_macvtap entered promiscuous mode [ 178.383969][ T7264] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.411156][ T8081] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.423252][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.430447][ T8081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.437960][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.445131][ T8081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.460107][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.467368][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state 02:10:08 executing program 0: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x3}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x20000845}, {&(0x7f0000000840)='\x00', 0x49ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) [ 178.585957][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.603774][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.665426][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.672976][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.693114][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.704543][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.720951][ T6938] device veth1_macvtap entered promiscuous mode [ 178.760599][ T7123] device veth0_vlan entered promiscuous mode [ 178.840172][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.851919][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.864870][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.875422][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 02:10:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) [ 178.884211][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.894732][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.901903][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.911207][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.921260][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.930163][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.937418][ T2512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.949497][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.959267][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.972140][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.984899][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.005506][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.022687][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 02:10:08 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 179.034376][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.052423][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.062451][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.071882][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.081569][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.092773][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.102393][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.112033][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.128828][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.146141][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.154044][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.165253][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.173435][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.189213][ T7123] device veth1_vlan entered promiscuous mode [ 179.206267][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.214299][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.238537][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.268190][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.278091][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.291997][ T7207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.303887][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.337731][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.350094][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.361123][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.370494][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.379605][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.397590][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.408381][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.420860][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.452336][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.464444][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.474044][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.489603][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.497398][ T8084] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 179.527930][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.553825][ T7123] device veth0_macvtap entered promiscuous mode [ 179.582671][ T7075] device veth0_vlan entered promiscuous mode [ 179.592201][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.601496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.610541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.621164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.631167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.640828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.650894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.659951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.668595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.682201][ T7123] device veth1_macvtap entered promiscuous mode [ 179.696957][ T7264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.802913][ T7075] device veth1_vlan entered promiscuous mode [ 179.827340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.835444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.844167][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.857902][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.865685][ T8084] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.876417][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.890435][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.902453][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.968463][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.996262][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.014204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.030176][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.045440][ T8084] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.052284][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.054490][ T8084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.054511][ T8084] usb 1-1: Product: syz [ 180.078830][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.090628][ T8084] usb 1-1: Manufacturer: syz [ 180.101266][ T8084] usb 1-1: SerialNumber: syz 02:10:09 executing program 1: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[]}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x8, 0x3, 0x0, [0x3, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) [ 180.116514][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.182047][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.216281][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 02:10:09 executing program 1: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[]}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x28, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) [ 180.230753][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.278100][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.295253][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.403029][ T7075] device veth0_macvtap entered promiscuous mode [ 180.441018][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.449567][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.463097][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.471757][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.480784][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.489653][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.498588][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.510385][ T7075] device veth1_macvtap entered promiscuous mode [ 180.581667][ T7207] device veth0_vlan entered promiscuous mode [ 180.648199][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.670305][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.689764][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.715271][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.744907][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.769331][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.784120][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.794583][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.805960][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.818976][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.848720][ T7207] device veth1_vlan entered promiscuous mode [ 180.894565][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.904717][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.939529][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.972086][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.001117][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.012381][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.022952][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.034168][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.061782][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.085156][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.105713][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.114386][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.124208][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.136097][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.143885][ T2560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.160445][ T7264] device veth0_vlan entered promiscuous mode [ 181.214730][ T7264] device veth1_vlan entered promiscuous mode [ 181.310809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.321271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.325123][ T8084] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 181.330729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.345511][ T8084] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 181.359825][ T8084] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 181.376354][ T7207] device veth0_macvtap entered promiscuous mode [ 181.424605][ T7207] device veth1_macvtap entered promiscuous mode [ 181.458788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 02:10:11 executing program 2: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[]}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x8, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 02:10:11 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000003a40)="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"/294, 0xffffffffffffff73, 0x20000000, 0x0, 0xffffff8e) write$binfmt_elf64(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 181.478906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.498857][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.518227][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.531132][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.546788][ T7264] device veth0_macvtap entered promiscuous mode [ 181.578031][ T8084] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 181.590774][ T7264] device veth1_macvtap entered promiscuous mode [ 181.619026][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.631238][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.652811][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.664637][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.674922][ T8084] usb 1-1: USB disconnect, device number 2 [ 181.681529][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.683339][ T8084] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 181.704695][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.737676][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.792483][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.842265][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.876134][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.889449][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.917342][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.951890][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.048259][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.069065][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.100210][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.135243][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.145990][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.157354][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.168448][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.179780][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.194393][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.219179][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.229881][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.240398][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.251048][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.260998][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.271552][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.281997][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.292525][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.303106][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.313628][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.325877][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.333772][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.350855][ T29] audit: type=1800 audit(1593223811.952:2): pid=8149 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="cpuacct.usage_user" dev="sda1" ino=15760 res=0 [ 182.384584][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.410639][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.436658][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.529445][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.554860][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.564711][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.595476][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.615033][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.629783][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.644590][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.664001][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.674300][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.703472][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.723793][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.787446][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.814580][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:10:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x3c}}, 0x0) 02:10:12 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 02:10:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000100)) 02:10:12 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x200000040, 0x0) 02:10:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000003a40)="575ca1cc0c8ac76f8523fb7b5f6d64906955996dda9f1e1ecb90d303b54a7d16fddf9feb1c6dd84504f7987641b87aa53667c76244177b3a69d574cfafe0090c035b0530d2553c91f86acd316bd480885f7e6411fdffbff13ac0d4bc0cfcc4199b2dc22d57c408e171e0a5c1af6dfea96653176705906467c0842e1ac9516b2ecf6caf8fe0bea48e5d0080000015c17188d676d3968c471e5c7709106afe5fc0de6117e0f6e729387eb831ecaa7fff32056f0e6c328e62f794a74e366d2a897ad0a0c0ed5b920acb83137d6feaaed4a46315d878e61e36682244f63d5b7d76e75f6f530b1a572f3f0033c30a342257f7cc283ab886689328beffc2d0ef14bc22ae070dbfd81f95ad1f9c60cc63c43e7904934d0e58d2932a00"/294, 0xffffffffffffff73, 0x20000000, 0x0, 0xffffff8e) write$binfmt_elf64(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 02:10:12 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 02:10:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) 02:10:12 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:12 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 02:10:13 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x73) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x200000040, 0x0) 02:10:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)='\x00'/16, 0x10) 02:10:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_TXQLEN={0x8}]}, 0x3c}}, 0x0) 02:10:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) [ 183.642989][ T8240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 02:10:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 02:10:13 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 02:10:13 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x4, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 02:10:13 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000003a40)="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"/294, 0xffffffffffffff73, 0x20000000, 0x0, 0xffffff8e) write$binfmt_elf64(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 02:10:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x1, 0x0) 02:10:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) ftruncate(r2, 0x48280) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r3, 0x48, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:10:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 02:10:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:14 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) [ 184.615857][ T29] audit: type=1804 audit(1593223814.222:3): pid=8287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir909404126/syzkaller.AIFt06/4/bus" dev="sda1" ino=15789 res=1 02:10:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) [ 184.711131][ T29] audit: type=1804 audit(1593223814.312:4): pid=8275 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir909404126/syzkaller.AIFt06/4/bus" dev="sda1" ino=15789 res=1 02:10:15 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x4, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 02:10:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 02:10:15 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x3f00) 02:10:15 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000003a40)="575ca1cc0c8ac76f8523fb7b5f6d64906955996dda9f1e1ecb90d303b54a7d16fddf9feb1c6dd84504f7987641b87aa53667c76244177b3a69d574cfafe0090c035b0530d2553c91f86acd316bd480885f7e6411fdffbff13ac0d4bc0cfcc4199b2dc22d57c408e171e0a5c1af6dfea96653176705906467c0842e1ac9516b2ecf6caf8fe0bea48e5d0080000015c17188d676d3968c471e5c7709106afe5fc0de6117e0f6e729387eb831ecaa7fff32056f0e6c328e62f794a74e366d2a897ad0a0c0ed5b920acb83137d6feaaed4a46315d878e61e36682244f63d5b7d76e75f6f530b1a572f3f0033c30a342257f7cc283ab886689328beffc2d0ef14bc22ae070dbfd81f95ad1f9c60cc63c43e7904934d0e58d2932a00"/294, 0xffffffffffffff73, 0x20000000, 0x0, 0xffffff8e) write$binfmt_elf64(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 02:10:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:15 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1000007ffff000) 02:10:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 02:10:15 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:16 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x4, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 02:10:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1000007ffff000) 02:10:16 executing program 5: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[]}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x8, 0x3, 0x0, [0x3, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 02:10:16 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:16 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x10) 02:10:16 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000003a40)="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"/294, 0xffffffffffffff73, 0x20000000, 0x0, 0xffffff8e) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 02:10:16 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:16 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0xffffffff}, {&(0x7f0000001480)="d19bd54c0cdb8dc4dd363dfb34edc6126df7346ae08b7eb1078519fcb63d2ddbf6a65237c5a1e8528fbc30ee9d9a0c41c3c7e35c20f1a6992d057eea04d029e61062b5cecb8c4f1baeb4e71174e0b0c6302dc893142deded2dc1a6c46e40abe397a6f1bb2e5b752827fcdc0e61b175341d61dd714912b02156b54749c34e7074ecb958a78f98e7e676abf51a094d529d5405d3eba6eb7674d3ce6bc9863b518fa04c6d01457d0aa1587073134cb1d7a48f5635b855e5c5cf8a473c3e0c6b7d6764293137df32f897c2f67186d1802c0fa33a27b604d95a3f02e2fcb3f59f3832c8f7933e18a7d0a2a0775366bb00a87b9537ee09992e7388300096166ce6d173dfb8279ab8509903b9ede1f0b0adf225e9a2b504436d3f69bcd5c2bee7d9c728f4cb96b21fc7a63b04f4a505d37e9791bbf088f1db75cfe1ec5d470eef08c524a031636b8592de3fb37df2fcccc0b6f690e7397e3e64e2a21e53f2f31f43ba01ed70643b745c346683ef5bb9d55f9a28d6bad76b1a7119e4d0b00d57cc7626d30efc5f2993c43cd0a1cece75d51066726d8230cf4ec89f460d16e3cca5c63f87513d1a7f5898258222a88fb0f3d49861fb61c2353921a8bc5752feeb8bc0e5fdb424593ce478890ee8f88d142e7166d99641f81ca3dae10ff62b4ccf", 0x1dc, 0x5}]) 02:10:16 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x10) 02:10:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1000007ffff000) 02:10:16 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x10) 02:10:16 executing program 0: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1000007ffff000) 02:10:17 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x4, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 02:10:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:17 executing program 0: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) [ 187.532232][ T8395] ------------[ cut here ]------------ [ 187.537944][ T8395] kernel BUG at arch/x86/kvm/mmu/mmu.c:3719! [ 187.601429][ T8395] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 187.607538][ T8395] CPU: 1 PID: 8395 Comm: syz-executor.5 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 187.617334][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.627401][ T8395] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 187.632686][ T8395] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 187.652289][ T8395] RSP: 0018:ffffc900017c7b30 EFLAGS: 00010216 [ 187.658358][ T8395] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90013d68000 [ 187.666333][ T8395] RDX: 000000000000a68c RSI: ffffffff8118e14a RDI: 0000000000000001 [ 187.674299][ T8395] RBP: ffff8880529f8080 R08: ffff8880a22782c0 R09: ffffed1015cc719c [ 187.682269][ T8395] R10: ffff8880ae638cdb R11: ffffed1015cc719b R12: 0000000000000000 [ 187.690244][ T8395] R13: 0000000000000001 R14: ffff8880529f8498 R15: 0000000000000000 [ 187.698215][ T8395] FS: 00007f982a4ba700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 187.707136][ T8395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.713713][ T8395] CR2: 0000000000740694 CR3: 000000008b5ec000 CR4: 00000000001426e0 [ 187.721681][ T8395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.729645][ T8395] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.737607][ T8395] Call Trace: [ 187.740910][ T8395] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 187.746900][ T8395] kvm_arch_vcpu_ioctl_run+0x4016/0x68d0 [ 187.752543][ T8395] ? kvm_arch_vcpu_runnable+0x6c0/0x6c0 [ 187.758087][ T8395] ? lock_downgrade+0x840/0x840 [ 187.763049][ T8395] ? rcu_read_lock_held_common+0xa0/0xa0 [ 187.768679][ T8395] ? check_preemption_disabled+0x38/0x220 [ 187.774395][ T8395] ? kvm_vcpu_ioctl+0x467/0xe10 [ 187.779241][ T8395] kvm_vcpu_ioctl+0x467/0xe10 [ 187.783915][ T8395] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 187.790326][ T8395] ? ioctl_file_clone+0x180/0x180 [ 187.795348][ T8395] ? check_preemption_disabled+0x38/0x220 [ 187.801065][ T8395] ? __fget_files+0x299/0x400 [ 187.805744][ T8395] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 187.812153][ T8395] ksys_ioctl+0x11a/0x180 [ 187.816512][ T8395] __x64_sys_ioctl+0x6f/0xb0 [ 187.821132][ T8395] do_syscall_64+0x60/0xe0 [ 187.825548][ T8395] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 187.831432][ T8395] RIP: 0033:0x45cb19 [ 187.835321][ T8395] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.854915][ T8395] RSP: 002b:00007f982a4b9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.863322][ T8395] RAX: ffffffffffffffda RBX: 00000000004e8a00 RCX: 000000000045cb19 [ 187.871289][ T8395] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 187.879253][ T8395] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 187.887219][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 187.895182][ T8395] R13: 00000000000003d0 R14: 00000000004c68ae R15: 00007f982a4ba6d4 [ 187.903148][ T8395] Modules linked in: 02:10:17 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000003a40)="575ca1cc0c8ac76f8523fb7b5f6d64906955996dda9f1e1ecb90d303b54a7d16fddf9feb1c6dd84504f7987641b87aa53667c76244177b3a69d574cfafe0090c035b0530d2553c91f86acd316bd480885f7e6411fdffbff13ac0d4bc0cfcc4199b2dc22d57c408e171e0a5c1af6dfea96653176705906467c0842e1ac9516b2ecf6caf8fe0bea48e5d0080000015c17188d676d3968c471e5c7709106afe5fc0de6117e0f6e729387eb831ecaa7fff32056f0e6c328e62f794a74e366d2a897ad0a0c0ed5b920acb83137d6feaaed4a46315d878e61e36682244f63d5b7d76e75f6f530b1a572f3f0033c30a342257f7cc283ab886689328beffc2d0ef14bc22ae070dbfd81f95ad1f9c60cc63c43e7904934d0e58d2932a00"/294, 0xffffffffffffff73, 0x20000000, 0x0, 0xffffff8e) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 02:10:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:17 executing program 0: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x1, {0x5, @pix={0x0, 0x0, 0x30314442, 0x0, 0x0, 0x0, 0x0, 0x7}}}) 02:10:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendfile(r1, r0, 0x0, 0x1000007ffff000) 02:10:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:17 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 02:10:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendfile(r1, r0, 0x0, 0x1000007ffff000) 02:10:17 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 02:10:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 02:10:18 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x4, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 188.603271][ T8395] ---[ end trace ac58d7c50aa34ca3 ]--- [ 188.609203][ T8395] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 188.614683][ T8395] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 188.634582][ T8395] RSP: 0018:ffffc900017c7b30 EFLAGS: 00010216 [ 188.640761][ T8395] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90013d68000 [ 188.649567][ T8395] RDX: 000000000000a68c RSI: ffffffff8118e14a RDI: 0000000000000001 [ 188.658066][ T8395] RBP: ffff8880529f8080 R08: ffff8880a22782c0 R09: ffffed1015cc719c [ 188.666565][ T8395] R10: ffff8880ae638cdb R11: ffffed1015cc719b R12: 0000000000000000 [ 188.675082][ T8395] R13: 0000000000000001 R14: ffff8880529f8498 R15: 0000000000000000 [ 188.683165][ T8395] FS: 00007f982a4ba700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 188.693205][ T8395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.714536][ T8395] CR2: 0000001b2c832000 CR3: 000000008b5ec000 CR4: 00000000001426e0 [ 188.737101][ T8395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.754152][ T8395] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.768562][ T8395] Kernel panic - not syncing: Fatal exception [ 188.776110][ T8395] Kernel Offset: disabled [ 188.780424][ T8395] Rebooting in 86400 seconds..