[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.


Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts.
2020/03/26 21:58:11 fuzzer started
2020/03/26 21:58:13 dialing manager at 10.128.0.26:33655
2020/03/26 21:58:13 syscalls: 3028
2020/03/26 21:58:13 code coverage: enabled
2020/03/26 21:58:13 comparison tracing: enabled
2020/03/26 21:58:13 extra coverage: enabled
2020/03/26 21:58:13 setuid sandbox: enabled
2020/03/26 21:58:13 namespace sandbox: enabled
2020/03/26 21:58:13 Android sandbox: /sys/fs/selinux/policy does not exist
2020/03/26 21:58:13 fault injection: enabled
2020/03/26 21:58:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/03/26 21:58:13 net packet injection: enabled
2020/03/26 21:58:13 net device setup: enabled
2020/03/26 21:58:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/03/26 21:58:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
21:59:57 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
setreuid(0xee00, r0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0)

syzkaller login: [  148.485865][ T7157] IPVS: ftp: loaded support on port[0] = 21
21:59:57 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[  148.649009][ T7157] chnl_net:caif_netlink_parms(): no params data found
[  148.769179][ T7274] IPVS: ftp: loaded support on port[0] = 21
[  148.783791][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.798725][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.808203][ T7157] device bridge_slave_0 entered promiscuous mode
21:59:57 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_CMAP(r0, 0x560a, &(0x7f0000000040)={0x0, 0xfdfdffff})

[  148.830361][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.838129][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.846223][ T7157] device bridge_slave_1 entered promiscuous mode
[  148.897829][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.921501][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.013809][ T7157] team0: Port device team_slave_0 added
[  149.038313][ T7157] team0: Port device team_slave_1 added
[  149.053264][ T7274] chnl_net:caif_netlink_parms(): no params data found
[  149.119765][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.129012][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.158548][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
21:59:57 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
sendfile(r0, r1, 0x0, 0x800000bf)

[  149.172547][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.182820][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.212934][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.268258][ T7402] IPVS: ftp: loaded support on port[0] = 21
21:59:58 executing program 4:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000000)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1b1800000003}, {&(0x7f0000000280)="bdb7d510449f7a0aa94631a7299bc5a930f336cd6669ee264ee0fd61b79cf4bdf35a30607facf4b01531222311834301d3045187242a5f3d68eee174cc560fcbd439f7489df5db460599a2cb6cf3ed278f93f78f89bed78918747b11b2d5c6cde20513c792d2df2eb888b338b80817f47a7fb67af47b369ac51ad96cfda0f9098532e7ff39485f4f438e8ec732b33537f33b44", 0x93, 0x8}], 0x4801, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[  149.388471][ T7157] device hsr_slave_0 entered promiscuous mode
[  149.455695][ T7157] device hsr_slave_1 entered promiscuous mode
[  149.544961][ T7452] IPVS: ftp: loaded support on port[0] = 21
[  149.577700][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.584798][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.606394][ T7274] device bridge_slave_0 entered promiscuous mode
[  149.663099][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.676268][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.684870][ T7274] device bridge_slave_1 entered promiscuous mode
21:59:58 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYPTR, @ANYBLOB="a7b7b9231c1ee332df8a06694aad0802fc", @ANYRESHEX], 0x0, 0x21}, 0x20)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x7, r0, 0x0, 0x0)

[  149.712561][ T7478] IPVS: ftp: loaded support on port[0] = 21
[  149.789621][ T7274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.857206][ T7274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.936954][ T7402] chnl_net:caif_netlink_parms(): no params data found
[  149.991571][ T7575] IPVS: ftp: loaded support on port[0] = 21
[  150.027402][ T7274] team0: Port device team_slave_0 added
[  150.062018][ T7452] chnl_net:caif_netlink_parms(): no params data found
[  150.078613][ T7274] team0: Port device team_slave_1 added
[  150.161302][ T7157] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  150.199883][ T7157] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  150.263194][ T7157] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  150.360126][ T7402] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.368966][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.377194][ T7402] device bridge_slave_0 entered promiscuous mode
[  150.386241][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.393718][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.402814][ T7402] device bridge_slave_1 entered promiscuous mode
[  150.410838][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.418046][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.444203][ T7274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.455383][ T7157] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  150.523888][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.531641][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.540148][ T7452] device bridge_slave_0 entered promiscuous mode
[  150.553347][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.561338][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.571065][ T7452] device bridge_slave_1 entered promiscuous mode
[  150.580131][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.588074][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.614515][ T7274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.640510][ T7478] chnl_net:caif_netlink_parms(): no params data found
[  150.650780][ T7402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.671529][ T7402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.703445][ T7452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.797893][ T7274] device hsr_slave_0 entered promiscuous mode
[  150.835507][ T7274] device hsr_slave_1 entered promiscuous mode
[  150.865433][ T7274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.873218][ T7274] Cannot create hsr debugfs directory
[  150.887654][ T7452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.898684][ T7402] team0: Port device team_slave_0 added
[  150.915211][ T7402] team0: Port device team_slave_1 added
[  150.973583][ T7452] team0: Port device team_slave_0 added
[  150.981129][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.989037][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.015550][ T7402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.081459][ T7452] team0: Port device team_slave_1 added
[  151.096720][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.103694][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.133737][ T7402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.169738][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.177569][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.186511][ T7478] device bridge_slave_0 entered promiscuous mode
[  151.194693][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.202680][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.210888][ T7478] device bridge_slave_1 entered promiscuous mode
[  151.249444][ T7575] chnl_net:caif_netlink_parms(): no params data found
[  151.272300][ T7452] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.279735][ T7452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.306446][ T7452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.319727][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.335636][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.358193][ T7452] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.368104][ T7452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.395397][ T7452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.478166][ T7402] device hsr_slave_0 entered promiscuous mode
[  151.525432][ T7402] device hsr_slave_1 entered promiscuous mode
[  151.565272][ T7402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.572896][ T7402] Cannot create hsr debugfs directory
[  151.586700][ T7478] team0: Port device team_slave_0 added
[  151.618758][ T7478] team0: Port device team_slave_1 added
[  151.658368][ T7452] device hsr_slave_0 entered promiscuous mode
[  151.715395][ T7452] device hsr_slave_1 entered promiscuous mode
[  151.755120][ T7452] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.762748][ T7452] Cannot create hsr debugfs directory
[  151.851302][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.859668][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.869251][ T7575] device bridge_slave_0 entered promiscuous mode
[  151.881144][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.889074][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.915246][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.941043][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.948303][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.959267][ T7575] device bridge_slave_1 entered promiscuous mode
[  151.987609][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.994593][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.022269][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.150709][ T7478] device hsr_slave_0 entered promiscuous mode
[  152.207005][ T7478] device hsr_slave_1 entered promiscuous mode
[  152.245189][ T7478] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.245223][ T7478] Cannot create hsr debugfs directory
[  152.247566][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.287341][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.299402][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.316923][ T7274] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  152.372163][ T7157] 8021q: adding VLAN 0 to HW filter on device team0
[  152.389048][ T7274] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  152.466830][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  152.475606][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  152.495298][ T7274] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  152.542878][ T7575] team0: Port device team_slave_0 added
[  152.550009][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  152.559472][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  152.568480][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.575766][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.584199][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  152.608138][ T7274] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  152.668969][ T7575] team0: Port device team_slave_1 added
[  152.684373][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  152.693109][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  152.702614][ T2864] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.709745][ T2864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.753491][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.772035][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.799267][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.813968][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  152.837093][ T7452] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  152.877463][ T7452] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  152.937221][ T7452] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  152.977895][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.984875][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.011931][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.041395][ T7452] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  153.112041][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  153.122703][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  153.131863][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  153.143292][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  153.228296][ T7575] device hsr_slave_0 entered promiscuous mode
[  153.255424][ T7575] device hsr_slave_1 entered promiscuous mode
[  153.315810][ T7575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.323396][ T7575] Cannot create hsr debugfs directory
[  153.343084][ T7402] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  153.387875][ T7402] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  153.471399][ T7402] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  153.537875][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  153.546730][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  153.558355][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  153.567127][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.582522][ T7478] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  153.638965][ T7402] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  153.710266][ T7157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.722797][ T7157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  153.734122][ T7478] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  153.806036][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  153.814304][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.846523][ T7478] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  153.899545][ T7478] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  153.955166][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  153.962664][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.000301][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.100820][ T7274] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.108366][ T7575] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  154.161429][ T7452] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.186101][ T7575] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  154.219962][ T7575] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  154.268489][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.277086][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.284769][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.293778][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.306018][ T7452] 8021q: adding VLAN 0 to HW filter on device team0
[  154.320394][ T7274] 8021q: adding VLAN 0 to HW filter on device team0
[  154.332567][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  154.342117][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  154.351099][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.362292][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.370899][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.378169][ T2864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.387528][ T7575] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  154.448375][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  154.456782][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.466046][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.475035][ T2773] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.482123][ T2773] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.492739][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.501599][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.510300][ T2773] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.517630][ T2773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.556877][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.570323][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  154.578865][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.588019][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.598135][ T2864] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.605296][ T2864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.613494][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.622648][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  154.631469][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  154.640048][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  154.671914][ T7157] device veth0_vlan entered promiscuous mode
[  154.679170][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  154.689841][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  154.698408][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  154.707793][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  154.716983][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.726360][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  154.749875][ T7402] 8021q: adding VLAN 0 to HW filter on device team0
[  154.766424][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.774289][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.782328][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  154.791104][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  154.809537][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.817504][ T7157] device veth1_vlan entered promiscuous mode
[  154.832202][ T7274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.848406][ T7274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.866566][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  154.878649][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  154.888257][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  154.899235][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  154.908409][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.919812][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.929642][ T2714] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.936925][ T2714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.947183][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  154.955992][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  154.964277][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.976321][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.984768][ T2714] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.991927][ T2714] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.004745][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.012889][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.021147][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.029878][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.056055][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.063963][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.073425][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.082722][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.090985][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.099341][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.108410][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.142344][ T7452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.159550][ T7452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.183878][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.192509][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.202250][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.211052][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.220212][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.229559][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.238661][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.248485][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.270569][ T7478] 8021q: adding VLAN 0 to HW filter on device team0
[  155.284015][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.296200][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.304677][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.313658][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.322226][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.330364][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.338337][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.347711][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.356407][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.363476][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.371658][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.400579][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.412354][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.421877][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.431886][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.439007][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.446701][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.455046][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.466040][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.473464][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.487005][ T7274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.509587][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.531552][ T7452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.539594][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.548581][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.556894][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.564630][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  155.574013][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  155.582710][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.596475][ T7575] 8021q: adding VLAN 0 to HW filter on device team0
[  155.627075][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.637258][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.645989][ T2714] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.653177][ T2714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.661358][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.671400][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.680786][ T2714] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.687959][ T2714] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.696085][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.705217][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.713589][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.724549][ T7157] device veth0_macvtap entered promiscuous mode
[  155.788693][ T7575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.827182][ T7575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.858866][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  155.871331][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.888258][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.897311][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.907645][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.916948][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.931623][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.940849][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.955398][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.964113][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.977464][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.987665][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.997727][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.007774][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.017958][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.028927][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.042448][ T7157] device veth1_macvtap entered promiscuous mode
[  156.058730][ T7478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.073261][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.096258][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  156.104381][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.112745][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.122192][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.131145][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.139632][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.148694][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.158419][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.167608][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.202589][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.213290][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.221458][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.229411][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.237343][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.245767][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  156.254393][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  156.269647][ T7452] device veth0_vlan entered promiscuous mode
[  156.285387][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.302358][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.314237][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.323093][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  156.332262][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  156.340771][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  156.349744][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  156.378048][ T7452] device veth1_vlan entered promiscuous mode
[  156.392545][ T7274] device veth0_vlan entered promiscuous mode
[  156.408266][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.417169][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.425716][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  156.433698][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.441915][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.452900][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  156.461734][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  156.475117][ T7478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.483876][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.492208][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.509213][ T7274] device veth1_vlan entered promiscuous mode
[  156.604368][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  156.622329][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  156.631136][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  156.639861][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.649060][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.663974][ T7452] device veth0_macvtap entered promiscuous mode
[  156.679332][ T7452] device veth1_macvtap entered promiscuous mode
[  156.793206][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  156.802309][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  156.819284][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  156.830126][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  156.887758][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.897803][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.920918][ T7274] device veth0_macvtap entered promiscuous mode
22:00:05 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="b5e6c25af6f309147a2ddae385530f981cc27a7a3e9f9d4a0c1238626fbbf3ecf50feecb383e98e0b2fb669d7acb2620946a5c80cb077c8abbce62aca2b46d2e9c534172dba1888a09a066e7a5e618f0184859f4060e4c544045cea0e3ea53316328a60abac5009d42505c091399152716ffe4c3ba7718799087b794d23d374042b4ab837788bcf73594f3e76c3f494878a8c270e141d0a992b0d442a0d92be2a5a6468c33ed06ae5ef20190975054a9db9397d1f00f0277c3a02519f76896c484e8806bfa7d5c67b2f218b2d450d1693632a43f53626ba3c88304cf92d2b964329fdef3716596ce1adeac3673f75ec656f203cd832fbbdb23aa836998a84a86d1747edefe0c6b808992ee18469a5b9eeefeb3324058673730e09f4b5c3c235ec39eb65004dfd81daa40964599d5297b6fdd7626b96f382989ada371eb134061b089d5574edb1558d2675af9ae7cb0fe16501bef10fa0677cfb6ce0c2e0ba5f67290b8beb94f0fac9823e42443620d53895cf6695096c008dadd5f3d14bbaad0474bfb014995df0a970d655d7ff10381d8bb3be3139a4d33c6c21ce142cd54a17b7b1b9b89af2b3632b0d24602989c7474f570816112e356eb1af84c3b316c97cfb6715eef4e2a9b37211c108e3871b92ec11f89fbcc7a1f47206d57a41f46cf84514cdf2fea7e994682ece0346e5b9b8035cb284b266a42818a9e2d5d776bd10f43829f5913e1481c1f9399e6fdcc88c34700314e5b53941b2ae540a1d2600c91dbfe88d7901811a288a24f76b17b000a7f6cfea9b5e6bd8c0afe2e7f1e9cb93acf318fee289dbfb6e301f8af99262c7c660a5d786222b66c79e8ac39c69e66e5d9aa11e34c0e80a4a9d771603da3c1b9ec0bf75e57991bbed18654df374e035378272fa8e9767304417bd9093bdb3e3ba3ccc709c51f9ad9fab90811ec1f9fd5192d16859b2457d42caac2c85abd6cea007021aad5036c7b0050b63156ca009d1bff2b461ab025a747230ce551588397b37adad508c7bb23efb5ee4dc578b36dda45967800ddfcb33a08d997ed68bf7746c22e20009411491ac58cb960510141c7c2ff1651d4c935821a367eb2214765a71472af5b8ba4e941388b027cc2507143b3fbaeaac2068734ddb9907233973f361a51ea4233e095a75735213015ae9fe873de644083019b39407225dee4f2ac3d9db5bfaa03c16a394d99a0fa1ff8a0fb45096ae3e3ac485a912f4795648d64980beb6a4a843f6143f5f691839b67606f3d10d73775445b5416202909b3bee0d99ee19ee012ff20a7b366ec4a9c8bc810fa1aa31f1df20233f46884c2eb36f0f0093d108c13f30ea239d8cd6d512ffca3932a70b9819c8f602594183fa9545c948550c106228a03068538c790229fce9216c36fb4135fc8884c34e05147506ea8bd5931c534a3bfd01b4aa7eb8fe3"})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  156.940490][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  156.959648][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.987615][ T7452] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.002868][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  157.028379][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.037611][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.044984][    C0] hrtimer: interrupt took 43582 ns
[  157.046541][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.059174][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.069295][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.078421][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
22:00:05 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="b5e6c25af6f309147a2ddae385530f981cc27a7a3e9f9d4a0c1238626fbbf3ecf50feecb383e98e0b2fb669d7acb2620946a5c80cb077c8abbce62aca2b46d2e9c534172dba1888a09a066e7a5e618f0184859f4060e4c544045cea0e3ea53316328a60abac5009d42505c091399152716ffe4c3ba7718799087b794d23d374042b4ab837788bcf73594f3e76c3f494878a8c270e141d0a992b0d442a0d92be2a5a6468c33ed06ae5ef20190975054a9db9397d1f00f0277c3a02519f76896c484e8806bfa7d5c67b2f218b2d450d1693632a43f53626ba3c88304cf92d2b964329fdef3716596ce1adeac3673f75ec656f203cd832fbbdb23aa836998a84a86d1747edefe0c6b808992ee18469a5b9eeefeb3324058673730e09f4b5c3c235ec39eb65004dfd81daa40964599d5297b6fdd7626b96f382989ada371eb134061b089d5574edb1558d2675af9ae7cb0fe16501bef10fa0677cfb6ce0c2e0ba5f67290b8beb94f0fac9823e42443620d53895cf6695096c008dadd5f3d14bbaad0474bfb014995df0a970d655d7ff10381d8bb3be3139a4d33c6c21ce142cd54a17b7b1b9b89af2b3632b0d24602989c7474f570816112e356eb1af84c3b316c97cfb6715eef4e2a9b37211c108e3871b92ec11f89fbcc7a1f47206d57a41f46cf84514cdf2fea7e994682ece0346e5b9b8035cb284b266a42818a9e2d5d776bd10f43829f5913e1481c1f9399e6fdcc88c34700314e5b53941b2ae540a1d2600c91dbfe88d7901811a288a24f76b17b000a7f6cfea9b5e6bd8c0afe2e7f1e9cb93acf318fee289dbfb6e301f8af99262c7c660a5d786222b66c79e8ac39c69e66e5d9aa11e34c0e80a4a9d771603da3c1b9ec0bf75e57991bbed18654df374e035378272fa8e9767304417bd9093bdb3e3ba3ccc709c51f9ad9fab90811ec1f9fd5192d16859b2457d42caac2c85abd6cea007021aad5036c7b0050b63156ca009d1bff2b461ab025a747230ce551588397b37adad508c7bb23efb5ee4dc578b36dda45967800ddfcb33a08d997ed68bf7746c22e20009411491ac58cb960510141c7c2ff1651d4c935821a367eb2214765a71472af5b8ba4e941388b027cc2507143b3fbaeaac2068734ddb9907233973f361a51ea4233e095a75735213015ae9fe873de644083019b39407225dee4f2ac3d9db5bfaa03c16a394d99a0fa1ff8a0fb45096ae3e3ac485a912f4795648d64980beb6a4a843f6143f5f691839b67606f3d10d73775445b5416202909b3bee0d99ee19ee012ff20a7b366ec4a9c8bc810fa1aa31f1df20233f46884c2eb36f0f0093d108c13f30ea239d8cd6d512ffca3932a70b9819c8f602594183fa9545c948550c106228a03068538c790229fce9216c36fb4135fc8884c34e05147506ea8bd5931c534a3bfd01b4aa7eb8fe3"})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  157.093514][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.103175][ T7402] device veth0_vlan entered promiscuous mode
[  157.128846][ T7274] device veth1_macvtap entered promiscuous mode
22:00:05 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  157.150270][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  157.174854][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.196572][ T7452] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.210893][ T7575] device veth0_vlan entered promiscuous mode
[  157.233264][ T7402] device veth1_vlan entered promiscuous mode
22:00:05 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  157.250703][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  157.264074][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.273396][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.288871][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
22:00:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="b5e6c25af6f309147a2ddae385530f981cc27a7a3e9f9d4a0c1238626fbbf3ecf50feecb383e98e0b2fb669d7acb2620946a5c80cb077c8abbce62aca2b46d2e9c534172dba1888a09a066e7a5e618f0184859f4060e4c544045cea0e3ea53316328a60abac5009d42505c091399152716ffe4c3ba7718799087b794d23d374042b4ab837788bcf73594f3e76c3f494878a8c270e141d0a992b0d442a0d92be2a5a6468c33ed06ae5ef20190975054a9db9397d1f00f0277c3a02519f76896c484e8806bfa7d5c67b2f218b2d450d1693632a43f53626ba3c88304cf92d2b964329fdef3716596ce1adeac3673f75ec656f203cd832fbbdb23aa836998a84a86d1747edefe0c6b808992ee18469a5b9eeefeb3324058673730e09f4b5c3c235ec39eb65004dfd81daa40964599d5297b6fdd7626b96f382989ada371eb134061b089d5574edb1558d2675af9ae7cb0fe16501bef10fa0677cfb6ce0c2e0ba5f67290b8beb94f0fac9823e42443620d53895cf6695096c008dadd5f3d14bbaad0474bfb014995df0a970d655d7ff10381d8bb3be3139a4d33c6c21ce142cd54a17b7b1b9b89af2b3632b0d24602989c7474f570816112e356eb1af84c3b316c97cfb6715eef4e2a9b37211c108e3871b92ec11f89fbcc7a1f47206d57a41f46cf84514cdf2fea7e994682ece0346e5b9b8035cb284b266a42818a9e2d5d776bd10f43829f5913e1481c1f9399e6fdcc88c34700314e5b53941b2ae540a1d2600c91dbfe88d7901811a288a24f76b17b000a7f6cfea9b5e6bd8c0afe2e7f1e9cb93acf318fee289dbfb6e301f8af99262c7c660a5d786222b66c79e8ac39c69e66e5d9aa11e34c0e80a4a9d771603da3c1b9ec0bf75e57991bbed18654df374e035378272fa8e9767304417bd9093bdb3e3ba3ccc709c51f9ad9fab90811ec1f9fd5192d16859b2457d42caac2c85abd6cea007021aad5036c7b0050b63156ca009d1bff2b461ab025a747230ce551588397b37adad508c7bb23efb5ee4dc578b36dda45967800ddfcb33a08d997ed68bf7746c22e20009411491ac58cb960510141c7c2ff1651d4c935821a367eb2214765a71472af5b8ba4e941388b027cc2507143b3fbaeaac2068734ddb9907233973f361a51ea4233e095a75735213015ae9fe873de644083019b39407225dee4f2ac3d9db5bfaa03c16a394d99a0fa1ff8a0fb45096ae3e3ac485a912f4795648d64980beb6a4a843f6143f5f691839b67606f3d10d73775445b5416202909b3bee0d99ee19ee012ff20a7b366ec4a9c8bc810fa1aa31f1df20233f46884c2eb36f0f0093d108c13f30ea239d8cd6d512ffca3932a70b9819c8f602594183fa9545c948550c106228a03068538c790229fce9216c36fb4135fc8884c34e05147506ea8bd5931c534a3bfd01b4aa7eb8fe3"})
socketpair$unix(0x1, 0x0, 0x0, 0x0)

[  157.299685][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  157.310016][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  157.320082][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  157.329540][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.338669][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
22:00:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

[  157.383292][ T7478] device veth0_vlan entered promiscuous mode
[  157.409844][ T7575] device veth1_vlan entered promiscuous mode
[  157.436343][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.446989][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.459785][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.478535][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
22:00:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)

[  157.495308][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  157.521614][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.537898][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  157.550702][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.573263][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.643347][ T7478] device veth1_vlan entered promiscuous mode
[  157.654717][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.663884][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.673222][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  157.681848][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.690878][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.703157][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  157.714270][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.724242][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  157.737092][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.748566][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.820284][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  157.828468][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  157.838876][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  157.909728][ T7402] device veth0_macvtap entered promiscuous mode
[  158.018630][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.027677][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.036827][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.046061][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.055261][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.063945][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.082192][ T7402] device veth1_macvtap entered promiscuous mode
[  158.096879][ T7478] device veth0_macvtap entered promiscuous mode
[  158.107664][ T7575] device veth0_macvtap entered promiscuous mode
[  158.117564][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  158.128849][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  158.137806][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  158.146486][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  158.163665][ T7478] device veth1_macvtap entered promiscuous mode
[  158.223521][ T7575] device veth1_macvtap entered promiscuous mode
[  158.264216][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.280192][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.298306][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.310878][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.321222][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.333072][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.347364][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.355821][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  158.364035][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  158.373124][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  158.381794][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  158.393062][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.407096][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.418288][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.431521][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.442350][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.455524][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.466044][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.476887][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.488513][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.500341][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.511264][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.521630][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.533761][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.544170][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.554663][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.566335][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.575943][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.590392][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.601084][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.614287][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.624949][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.636893][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.647328][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.659001][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.670797][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.679040][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  158.688744][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  158.697666][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.707886][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.717043][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.726732][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.741169][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.753101][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.763423][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.775848][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.786021][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.797184][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.807215][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.817749][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.828062][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  158.839273][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.852090][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.875823][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  158.885719][ T2701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  158.897271][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.908777][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.918977][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.931791][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.942389][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.952923][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.962948][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.974279][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.984890][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.995465][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.008183][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.055328][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  159.064009][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
22:00:07 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x121041)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x8, 0x2}, @cond})
write$evdev(r0, &(0x7f0000000040), 0xc00)

[  159.380059][ T8474] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  159.413751][ T8474] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  159.501938][ T8474] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  159.517510][ T8474] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  159.517573][ T8474] EXT4-fs (loop4): mount failed
[  159.524628][ T8490] ptrace attach of "/root/syz-executor.5"[8488] was attempted by "/root/syz-executor.5"[8490]
22:00:08 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

22:00:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)

[  159.609323][ T8474] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  159.634450][ T8474] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  159.660212][ T8474] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  159.677745][ T8474] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  159.684447][ T8474] EXT4-fs (loop4): mount failed
22:00:08 executing program 4:
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

22:00:08 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
sendfile(r0, r1, 0x0, 0x800000bf)

22:00:08 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

22:00:08 executing program 5:
pipe(0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setattr(r2, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
memfd_create(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00b828becc03555e5689d91b59672a8b298a7dd8a16795e0a23ff2ea32a8994aa6a23e220adfd351dfe3"], 0x2a)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100000})
epoll_pwait(r3, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000200)={[0x40]}, 0x8)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

22:00:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

22:00:08 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

22:00:08 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="b5e6c25af6f309147a2ddae385530f981cc27a7a3e9f9d4a0c1238626fbbf3ecf50feecb383e98e0b2fb669d7acb2620946a5c80cb077c8abbce62aca2b46d2e9c534172dba1888a09a066e7a5e618f0184859f4060e4c544045cea0e3ea53316328a60abac5009d42505c091399152716ffe4c3ba7718799087b794d23d374042b4ab837788bcf73594f3e76c3f494878a8c270e141d0a992b0d442a0d92be2a5a6468c33ed06ae5ef20190975054a9db9397d1f00f0277c3a02519f76896c484e8806bfa7d5c67b2f218b2d450d1693632a43f53626ba3c88304cf92d2b964329fdef3716596ce1adeac3673f75ec656f203cd832fbbdb23aa836998a84a86d1747edefe0c6b808992ee18469a5b9eeefeb3324058673730e09f4b5c3c235ec39eb65004dfd81daa40964599d5297b6fdd7626b96f382989ada371eb134061b089d5574edb1558d2675af9ae7cb0fe16501bef10fa0677cfb6ce0c2e0ba5f67290b8beb94f0fac9823e42443620d53895cf6695096c008dadd5f3d14bbaad0474bfb014995df0a970d655d7ff10381d8bb3be3139a4d33c6c21ce142cd54a17b7b1b9b89af2b3632b0d24602989c7474f570816112e356eb1af84c3b316c97cfb6715eef4e2a9b37211c108e3871b92ec11f89fbcc7a1f47206d57a41f46cf84514cdf2fea7e994682ece0346e5b9b8035cb284b266a42818a9e2d5d776bd10f43829f5913e1481c1f9399e6fdcc88c34700314e5b53941b2ae540a1d2600c91dbfe88d7901811a288a24f76b17b000a7f6cfea9b5e6bd8c0afe2e7f1e9cb93acf318fee289dbfb6e301f8af99262c7c660a5d786222b66c79e8ac39c69e66e5d9aa11e34c0e80a4a9d771603da3c1b9ec0bf75e57991bbed18654df374e035378272fa8e9767304417bd9093bdb3e3ba3ccc709c51f9ad9fab90811ec1f9fd5192d16859b2457d42caac2c85abd6cea007021aad5036c7b0050b63156ca009d1bff2b461ab025a747230ce551588397b37adad508c7bb23efb5ee4dc578b36dda45967800ddfcb33a08d997ed68bf7746c22e20009411491ac58cb960510141c7c2ff1651d4c935821a367eb2214765a71472af5b8ba4e941388b027cc2507143b3fbaeaac2068734ddb9907233973f361a51ea4233e095a75735213015ae9fe873de644083019b39407225dee4f2ac3d9db5bfaa03c16a394d99a0fa1ff8a0fb45096ae3e3ac485a912f4795648d64980beb6a4a843f6143f5f691839b67606f3d10d73775445b5416202909b3bee0d99ee19ee012ff20a7b366ec4a9c8bc810fa1aa31f1df20233f46884c2eb36f0f0093d108c13f30ea239d8cd6d512ffca3932a70b9819c8f602594183fa9545c948550c106228a03068538c790229fce9216c36fb4135fc8884c34e05147506ea8bd5931c534a3bfd01b4aa7eb8fe3"})
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

22:00:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))

22:00:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))

22:00:08 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
sendfile(r0, r1, 0x0, 0x800000bf)

[  159.917794][   T27] audit: type=1804 audit(1585260008.619:2): pid=8528 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir673328664/syzkaller.P0nSsy/1/file0" dev="sda1" ino=15778 res=1
22:00:08 executing program 4:
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

22:00:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000500))

22:00:08 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="b5e6c25af6f309147a2ddae385530f981cc27a7a3e9f9d4a0c1238626fbbf3ecf50feecb383e98e0b2fb669d7acb2620946a5c80cb077c8abbce62aca2b46d2e9c534172dba1888a09a066e7a5e618f0184859f4060e4c544045cea0e3ea53316328a60abac5009d42505c091399152716ffe4c3ba7718799087b794d23d374042b4ab837788bcf73594f3e76c3f494878a8c270e141d0a992b0d442a0d92be2a5a6468c33ed06ae5ef20190975054a9db9397d1f00f0277c3a02519f76896c484e8806bfa7d5c67b2f218b2d450d1693632a43f53626ba3c88304cf92d2b964329fdef3716596ce1adeac3673f75ec656f203cd832fbbdb23aa836998a84a86d1747edefe0c6b808992ee18469a5b9eeefeb3324058673730e09f4b5c3c235ec39eb65004dfd81daa40964599d5297b6fdd7626b96f382989ada371eb134061b089d5574edb1558d2675af9ae7cb0fe16501bef10fa0677cfb6ce0c2e0ba5f67290b8beb94f0fac9823e42443620d53895cf6695096c008dadd5f3d14bbaad0474bfb014995df0a970d655d7ff10381d8bb3be3139a4d33c6c21ce142cd54a17b7b1b9b89af2b3632b0d24602989c7474f570816112e356eb1af84c3b316c97cfb6715eef4e2a9b37211c108e3871b92ec11f89fbcc7a1f47206d57a41f46cf84514cdf2fea7e994682ece0346e5b9b8035cb284b266a42818a9e2d5d776bd10f43829f5913e1481c1f9399e6fdcc88c34700314e5b53941b2ae540a1d2600c91dbfe88d7901811a288a24f76b17b000a7f6cfea9b5e6bd8c0afe2e7f1e9cb93acf318fee289dbfb6e301f8af99262c7c660a5d786222b66c79e8ac39c69e66e5d9aa11e34c0e80a4a9d771603da3c1b9ec0bf75e57991bbed18654df374e035378272fa8e9767304417bd9093bdb3e3ba3ccc709c51f9ad9fab90811ec1f9fd5192d16859b2457d42caac2c85abd6cea007021aad5036c7b0050b63156ca009d1bff2b461ab025a747230ce551588397b37adad508c7bb23efb5ee4dc578b36dda45967800ddfcb33a08d997ed68bf7746c22e20009411491ac58cb960510141c7c2ff1651d4c935821a367eb2214765a71472af5b8ba4e941388b027cc2507143b3fbaeaac2068734ddb9907233973f361a51ea4233e095a75735213015ae9fe873de644083019b39407225dee4f2ac3d9db5bfaa03c16a394d99a0fa1ff8a0fb45096ae3e3ac485a912f4795648d64980beb6a4a843f6143f5f691839b67606f3d10d73775445b5416202909b3bee0d99ee19ee012ff20a7b366ec4a9c8bc810fa1aa31f1df20233f46884c2eb36f0f0093d108c13f30ea239d8cd6d512ffca3932a70b9819c8f602594183fa9545c948550c106228a03068538c790229fce9216c36fb4135fc8884c34e05147506ea8bd5931c534a3bfd01b4aa7eb8fe3"})
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

22:00:08 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

22:00:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000500))

[  160.124305][ T8516] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  160.137087][   T27] audit: type=1804 audit(1585260008.819:3): pid=8541 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir673328664/syzkaller.P0nSsy/2/file0" dev="sda1" ino=15756 res=1
[  160.196120][ T8516] FAT-fs (loop5): Filesystem has been set read-only
[  160.251919][ T8516] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 0)
[  160.262086][ T8511] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
22:00:09 executing program 5:
pipe(0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setattr(r2, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
memfd_create(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00b828becc03555e5689d91b59672a8b298a7dd8a16795e0a23ff2ea32a8994aa6a23e220adfd351dfe3"], 0x2a)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100000})
epoll_pwait(r3, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000200)={[0x40]}, 0x8)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

22:00:09 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
sendfile(r0, r1, 0x0, 0x800000bf)

22:00:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

22:00:09 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

22:00:09 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x121041)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x1c}}, 0x0)
write$evdev(r0, &(0x7f0000000040), 0xc00)

22:00:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000500))

22:00:09 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))

22:00:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

22:00:09 executing program 2:
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

22:00:09 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500))

22:00:09 executing program 2:
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

22:00:09 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf)

[  160.675295][ T8569] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  160.698617][ T8569] FAT-fs (loop5): Filesystem has been set read-only
[  160.714595][ T8569] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  160.731930][ T8569] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  160.751531][ T8569] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
22:00:09 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
pselect6(0x40, &(0x7f0000000140)={0x1f, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x4d03, 0x2}, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000001c0)={0x0, 0x0, 0x3})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:00:09 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000500))

22:00:09 executing program 4:
pipe(0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setattr(r2, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
memfd_create(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00b828becc03555e5689d91b59672a8b298a7dd8a16795e0a23ff2ea32a8994aa6a23e220adfd351dfe3"], 0x2a)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100000})
epoll_pwait(r3, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000200)={[0x40]}, 0x8)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

22:00:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)

22:00:09 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf)

22:00:09 executing program 2:
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

[  160.787985][ T8563] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
22:00:09 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000500))

22:00:09 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

22:00:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)

22:00:09 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf)

22:00:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)

22:00:09 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

[  160.970150][ T8604] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  161.115603][ T8592] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  161.143472][ T8592] FAT-fs (loop4): Filesystem has been set read-only
[  161.155640][ T8592] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
22:00:09 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
pselect6(0x40, &(0x7f0000000140)={0x1f, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x4d03, 0x2}, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000001c0)={0x0, 0x0, 0x3})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:00:09 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0x800000bf)

22:00:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x4, 0x0, [{}, {0x80000008}, {0xd}, {0x1, 0x0, 0x0, 0xffffffff}]})

22:00:09 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000500))

22:00:09 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

22:00:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)

[  161.189588][ T8587] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
22:00:10 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)

22:00:10 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0xd2b, 0x0, &(0x7f00000000c0)="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"})

22:00:10 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0x800000bf)

22:00:10 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)

22:00:10 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140))

22:00:10 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r0, 0x4b6b, 0x0)

[  161.488305][ T8628] BUG: kernel NULL pointer dereference, address: 0000000000000086
[  161.496142][ T8628] #PF: supervisor instruction fetch in kernel mode
[  161.502637][ T8628] #PF: error_code(0x0010) - not-present page
[  161.508611][ T8628] PGD 9d8bf067 P4D 9d8bf067 PUD 8c725067 PMD 0 
[  161.515225][ T8628] Oops: 0010 [#1] PREEMPT SMP KASAN
[  161.520431][ T8628] CPU: 1 PID: 8628 Comm: syz-executor.5 Not tainted 5.6.0-rc7-syzkaller #0
[  161.529112][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  161.539184][ T8628] RIP: 0010:0x86
[  161.542750][ T8628] Code: Bad RIP value.
[  161.546810][ T8628] RSP: 0018:ffffc90003c87998 EFLAGS: 00010086
[  161.552959][ T8628] RAX: ffffc90003c879c8 RBX: fffffe0000000000 RCX: 0000000000040000
[  161.560927][ T8628] RDX: ffffc900148d0000 RSI: 000000000000340f RDI: 0000000000003410
[  161.568890][ T8628] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca
[  161.576883][ T8628] R10: ffff88804bc18000 R11: 0000000000000002 R12: dffffc0000000000
[  161.584844][ T8628] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb
[  161.592792][ T8628] FS:  00007f9febeb9700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  161.601887][ T8628] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  161.614024][ T8628] CR2: 000000000000005c CR3: 00000000a33fd000 CR4: 00000000001426e0
[  161.621982][ T8628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  161.631851][ T8628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  161.639806][ T8628] Call Trace:
[  161.643096][ T8628]  ? handle_external_interrupt_irqoff+0x154/0x280
[  161.649499][ T8628]  ? handle_external_interrupt_irqoff+0x132/0x280
[  161.655921][ T8628]  ? __irqentry_text_start+0x8/0x8
[  161.661028][ T8628]  ? vcpu_enter_guest+0x6c77/0x9290
[  161.666297][ T8628]  ? vmx_vcpu_load+0x45f/0x530
[  161.671047][ T8628]  ? mark_lock+0x107/0x1650
[  161.675538][ T8628]  ? kvm_arch_vcpu_load+0x53e/0x810
[  161.680886][ T8628]  ? finish_task_switch+0x2e2/0x550
[  161.686074][ T8628]  ? lockdep_hardirqs_on+0x4f4/0x840
[  161.691335][ T8628]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  161.696854][ T8628]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  161.702300][ T8628]  ? preempt_schedule_irq+0x113/0x150
[  161.707643][ T8628]  ? retint_kernel+0x2b/0x2b
[  161.712229][ T8628]  ? kvm_check_async_pf_completion+0x34e/0x360
[  161.718359][ T8628]  ? vcpu_run+0x3a3/0xd50
[  161.722675][ T8628]  ? kvm_arch_vcpu_ioctl_run+0x419/0x880
[  161.730720][ T8628]  ? kvm_vcpu_ioctl+0x67c/0xa80
[  161.735547][ T8628]  ? kvm_vm_release+0x50/0x50
[  161.740208][ T8628]  ? __se_sys_ioctl+0xf9/0x160
[  161.744948][ T8628]  ? do_syscall_64+0xf3/0x1b0
[  161.749621][ T8628]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  161.755670][ T8628] Modules linked in:
[  161.759551][ T8628] CR2: 0000000000000086
[  161.763694][ T8628] ---[ end trace 1b9f05ecbda880cf ]---
[  161.763729][ T8653] BUG: kernel NULL pointer dereference, address: 0000000000000086
[  161.769172][ T8628] RIP: 0010:0x86
[  161.776962][ T8653] #PF: supervisor instruction fetch in kernel mode
[  161.780518][ T8628] Code: Bad RIP value.
[  161.786985][ T8653] #PF: error_code(0x0010) - not-present page
[  161.786994][ T8653] PGD 99f92067 P4D 99f92067 PUD 8f3d7067 PMD 0 
[  161.791061][ T8628] RSP: 0018:ffffc90003c87998 EFLAGS: 00010086
[  161.797020][ T8653] Oops: 0010 [#2] PREEMPT SMP KASAN
[  161.803227][ T8628] RAX: ffffc90003c879c8 RBX: fffffe0000000000 RCX: 0000000000040000
[  161.809267][ T8653] CPU: 0 PID: 8653 Comm: syz-executor.0 Tainted: G      D           5.6.0-rc7-syzkaller #0
[  161.814549][ T8628] RDX: ffffc900148d0000 RSI: 000000000000340f RDI: 0000000000003410
[  161.814558][ T8628] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca
[  161.822510][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  161.822526][ T8653] RIP: 0010:0x86
[  161.832496][ T8628] R10: ffff88804bc18000 R11: 0000000000000002 R12: dffffc0000000000
[  161.840464][ T8653] Code: Bad RIP value.
[  161.848433][ T8628] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb
[  161.858475][ T8653] RSP: 0018:ffffc90003ddf998 EFLAGS: 00010086
[  161.862036][ T8628] FS:  00007f9febeb9700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  161.869991][ T8653] RAX: ffffc90003ddf9c8 RBX: fffffe0000000000 RCX: 0000000000040000
[  161.874032][ T8628] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  161.881981][ T8653] RDX: ffffc90001ba9000 RSI: 0000000000003216 RDI: 0000000000003217
[  161.888129][ T8628] CR2: 000000000000005c CR3: 00000000a33fd000 CR4: 00000000001426e0
[  161.897033][ T8653] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca
[  161.904981][ T8628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  161.911557][ T8653] R10: ffff8880a23ae100 R11: 0000000000000002 R12: dffffc0000000000
[  161.919504][ T8628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  161.919511][ T8628] Kernel panic - not syncing: Fatal exception
[  161.927456][ T8653] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb
[  161.927466][ T8653] FS:  00007f8075f82700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  161.982197][ T8653] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  161.988789][ T8653] CR2: 000000000000005c CR3: 000000008eb42000 CR4: 00000000001426f0
[  161.996748][ T8653] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  162.006881][ T8653] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  162.014834][ T8653] Call Trace:
[  162.018114][ T8653]  ? handle_external_interrupt_irqoff+0x154/0x280
[  162.024561][ T8653]  ? handle_external_interrupt_irqoff+0x132/0x280
[  162.031104][ T8653]  ? __irqentry_text_start+0x8/0x8
[  162.036314][ T8653]  ? vcpu_enter_guest+0x6c77/0x9290
[  162.041624][ T8653]  ? __kasan_slab_free+0x1ac/0x1e0
[  162.046744][ T8653]  ? __kasan_slab_free+0x12e/0x1e0
[  162.051851][ T8653]  ? kfree+0x10a/0x220
[  162.055906][ T8653]  ? tomoyo_path_number_perm+0x525/0x690
[  162.061520][ T8653]  ? security_file_ioctl+0x55/0xb0
[  162.066611][ T8653]  ? __se_sys_ioctl+0x48/0x160
[  162.071364][ T8653]  ? do_syscall_64+0xf3/0x1b0
[  162.076024][ T8653]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  162.082092][ T8653]  ? format_decode+0x466/0x1ce0
[  162.086928][ T8653]  ? string+0x280/0x2c0
[  162.091206][ T8653]  ? trace_irq_enable_rcuidle+0x1f/0x1d0
[  162.097026][ T8653]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  162.102490][ T8653]  ? trace_irq_enable_rcuidle+0x1f/0x1d0
[  162.108116][ T8653]  ? retint_kernel+0x2b/0x2b
[  162.112699][ T8653]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  162.118160][ T8653]  ? trace_irq_enable_rcuidle+0x1f/0x1d0
[  162.123772][ T8653]  ? retint_kernel+0x2b/0x2b
[  162.128346][ T8653]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  162.133800][ T8653]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  162.139252][ T8653]  ? check_preemption_disabled+0xa2/0x240
[  162.145487][ T8653]  ? retint_kernel+0x2b/0x2b
[  162.150077][ T8653]  ? kvm_check_async_pf_completion+0x34e/0x360
[  162.156311][ T8653]  ? vcpu_run+0x3a3/0xd50
[  162.160637][ T8653]  ? kvm_arch_vcpu_ioctl_run+0x419/0x880
[  162.166254][ T8653]  ? kvm_vcpu_ioctl+0x67c/0xa80
[  162.171094][ T8653]  ? kvm_vm_release+0x50/0x50
[  162.175772][ T8653]  ? __se_sys_ioctl+0xf9/0x160
[  162.180518][ T8653]  ? do_syscall_64+0xf3/0x1b0
[  162.185186][ T8653]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  162.191426][ T8653] Modules linked in:
[  162.195303][ T8653] CR2: 0000000000000086
[  162.199438][ T8653] ---[ end trace 1b9f05ecbda880d0 ]---
[  162.204891][ T8653] RIP: 0010:0x86
[  162.208458][ T8653] Code: Bad RIP value.
[  162.212521][ T8653] RSP: 0018:ffffc90003c87998 EFLAGS: 00010086
[  162.218570][ T8653] RAX: ffffc90003c879c8 RBX: fffffe0000000000 RCX: 0000000000040000
[  162.226525][ T8653] RDX: ffffc900148d0000 RSI: 000000000000340f RDI: 0000000000003410
[  162.234478][ T8653] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca
[  162.242430][ T8653] R10: ffff88804bc18000 R11: 0000000000000002 R12: dffffc0000000000
[  162.250384][ T8653] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb
[  162.258343][ T8653] FS:  00007f8075f82700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  162.267254][ T8653] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.273833][ T8653] CR2: 000000000000005c CR3: 000000008eb42000 CR4: 00000000001426f0
[  162.281806][ T8653] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  162.289767][ T8653] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  163.079097][ T8628] Shutting down cpus with NMI
[  163.085165][ T8628] Kernel Offset: disabled
[  163.089513][ T8628] Rebooting in 86400 seconds..