Warning: Permanently added '10.128.0.18' (ECDSA) to the list of known hosts. 2020/05/23 13:45:01 fuzzer started 2020/05/23 13:45:01 dialing manager at 10.128.0.26:38661 2020/05/23 13:45:02 syscalls: 3055 2020/05/23 13:45:02 code coverage: enabled 2020/05/23 13:45:02 comparison tracing: enabled 2020/05/23 13:45:02 extra coverage: enabled 2020/05/23 13:45:02 setuid sandbox: enabled 2020/05/23 13:45:02 namespace sandbox: enabled 2020/05/23 13:45:02 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 13:45:02 fault injection: enabled 2020/05/23 13:45:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 13:45:02 net packet injection: enabled 2020/05/23 13:45:02 net device setup: enabled 2020/05/23 13:45:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 13:45:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 13:45:02 USB emulation: enabled 13:47:54 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) semop(0x0, 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1fe}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) syzkaller login: [ 228.142773][ T6944] IPVS: ftp: loaded support on port[0] = 21 13:47:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3f, 0x0, 0x0, 0x1, 0x8000}) [ 228.290054][ T6944] chnl_net:caif_netlink_parms(): no params data found [ 228.376406][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.385289][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.394837][ T6944] device bridge_slave_0 entered promiscuous mode [ 228.406195][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.414142][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.431489][ T6944] device bridge_slave_1 entered promiscuous mode [ 228.482770][ T6944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.503402][ T6944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.552718][ T6944] team0: Port device team_slave_0 added [ 228.562317][ T6944] team0: Port device team_slave_1 added [ 228.595944][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.600570][ T7082] IPVS: ftp: loaded support on port[0] = 21 [ 228.620146][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.660413][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.688343][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1 13:47:55 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2817e, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r2, 0x2) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) socket(0x0, 0x0, 0x0) dup2(r3, r2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) [ 228.696827][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.728203][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.864102][ T6944] device hsr_slave_0 entered promiscuous mode 13:47:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x40}}, 0x0) [ 228.920626][ T6944] device hsr_slave_1 entered promiscuous mode [ 229.041645][ T7130] IPVS: ftp: loaded support on port[0] = 21 [ 229.192643][ T7195] IPVS: ftp: loaded support on port[0] = 21 [ 229.283073][ T7082] chnl_net:caif_netlink_parms(): no params data found 13:47:55 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {&(0x7f0000000540)="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", 0x309, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x0) [ 229.664036][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 229.698131][ T7432] IPVS: ftp: loaded support on port[0] = 21 [ 229.718253][ T6944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.785491][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.793757][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.804308][ T7082] device bridge_slave_0 entered promiscuous mode [ 229.820005][ T6944] netdevsim netdevsim0 netdevsim1: renamed from eth1 13:47:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r1, 0x404c4701, 0x0) [ 229.848945][ T7195] chnl_net:caif_netlink_parms(): no params data found [ 229.862991][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.872104][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.882249][ T7082] device bridge_slave_1 entered promiscuous mode [ 229.889822][ T6944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.973765][ T6944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.051438][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.072824][ T7507] IPVS: ftp: loaded support on port[0] = 21 [ 230.092921][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.171370][ T7082] team0: Port device team_slave_0 added [ 230.193315][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.203498][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.211861][ T7130] device bridge_slave_0 entered promiscuous mode [ 230.220661][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.227719][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.235653][ T7130] device bridge_slave_1 entered promiscuous mode [ 230.253652][ T7082] team0: Port device team_slave_1 added [ 230.314870][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.327433][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.343573][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.351347][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.359043][ T7195] device bridge_slave_0 entered promiscuous mode [ 230.376045][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.383600][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.409711][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.423141][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.433446][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.464638][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.500534][ T7130] team0: Port device team_slave_0 added [ 230.506603][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.514777][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.524646][ T7195] device bridge_slave_1 entered promiscuous mode [ 230.553941][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.567783][ T7130] team0: Port device team_slave_1 added [ 230.601663][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.632704][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.639660][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.668814][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.684890][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.693181][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.722577][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.789684][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 230.834970][ T7082] device hsr_slave_0 entered promiscuous mode [ 230.902628][ T7082] device hsr_slave_1 entered promiscuous mode [ 230.949991][ T7082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.957701][ T7082] Cannot create hsr debugfs directory [ 231.013606][ T7130] device hsr_slave_0 entered promiscuous mode [ 231.070390][ T7130] device hsr_slave_1 entered promiscuous mode [ 231.110043][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.117669][ T7130] Cannot create hsr debugfs directory [ 231.134615][ T7195] team0: Port device team_slave_0 added [ 231.145546][ T7195] team0: Port device team_slave_1 added [ 231.218103][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.226277][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.253552][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.269437][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.278010][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.304654][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.465004][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.473487][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.483278][ T7432] device bridge_slave_0 entered promiscuous mode [ 231.495006][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.509356][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.518006][ T7432] device bridge_slave_1 entered promiscuous mode [ 231.593120][ T7195] device hsr_slave_0 entered promiscuous mode [ 231.642545][ T7195] device hsr_slave_1 entered promiscuous mode [ 231.679807][ T7195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.687410][ T7195] Cannot create hsr debugfs directory [ 231.724402][ T7507] chnl_net:caif_netlink_parms(): no params data found [ 231.746835][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.788555][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.801476][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.842093][ T6944] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.857875][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.871226][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.931680][ T7432] team0: Port device team_slave_0 added [ 231.958806][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.968134][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.980825][ T3977] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.987951][ T3977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.999431][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.009958][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.018262][ T3977] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.025436][ T3977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.036809][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.063112][ T7432] team0: Port device team_slave_1 added [ 232.081246][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.089312][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.099005][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.108396][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.153174][ T7130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.196814][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.218663][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.226689][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.236090][ T7507] device bridge_slave_0 entered promiscuous mode [ 232.244059][ T7130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.312899][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.322885][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.350498][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.363404][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.371392][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.379336][ T7507] device bridge_slave_1 entered promiscuous mode [ 232.387180][ T7130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.441637][ T7130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.511877][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.524323][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.549630][ T7082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.613530][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.620742][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.647471][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.676537][ T7082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.732309][ T7082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.767545][ T7082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.834668][ T7507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.844960][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.854348][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.896248][ T7507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.914761][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.923626][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.938988][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.045216][ T7432] device hsr_slave_0 entered promiscuous mode [ 233.120043][ T7432] device hsr_slave_1 entered promiscuous mode [ 233.159614][ T7432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.167172][ T7432] Cannot create hsr debugfs directory [ 233.192513][ T7507] team0: Port device team_slave_0 added [ 233.238830][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.248038][ T7507] team0: Port device team_slave_1 added [ 233.282100][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.293014][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.327819][ T7195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.398309][ T7195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.444253][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.452748][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.480179][ T7507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.494353][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.502165][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.529017][ T7507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.565263][ T7195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.626864][ T7195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.762398][ T7507] device hsr_slave_0 entered promiscuous mode [ 233.789957][ T7507] device hsr_slave_1 entered promiscuous mode [ 233.839518][ T7507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.847093][ T7507] Cannot create hsr debugfs directory [ 233.863832][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.873426][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.999216][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.016617][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.027582][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.036782][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.056803][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.073729][ T6944] device veth0_vlan entered promiscuous mode [ 234.137885][ T6944] device veth1_vlan entered promiscuous mode [ 234.173658][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.197609][ T7432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.275562][ T7432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.355424][ T7082] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.372504][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.381399][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 234.389905][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.397763][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.405893][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.414642][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.427074][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.442201][ T7432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.481790][ T7432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.563406][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.573905][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.583291][ T3977] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.590428][ T3977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.598084][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.607023][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.616224][ T3977] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.623423][ T3977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.631249][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.640434][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.648816][ T3977] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.656043][ T3977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.699823][ T6944] device veth0_macvtap entered promiscuous mode [ 234.707219][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.716789][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.726389][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.735435][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.745579][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.757188][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.779907][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.790754][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.800383][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.808902][ T3977] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.816049][ T3977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.824517][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.833632][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.843095][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.853057][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.861829][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.870996][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.881274][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.906934][ T6944] device veth1_macvtap entered promiscuous mode [ 234.923151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.934162][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.954020][ T7507] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.015380][ T7507] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.071755][ T7507] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.121533][ T7507] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.178031][ T7130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.188686][ T7130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.203736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.213440][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.223698][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.234944][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.245014][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.255955][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.265920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.277047][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.287061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.303008][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.343958][ T7082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.356683][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.368659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.378089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.403569][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.431158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.438705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.448147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.457547][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.472833][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.487192][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.499598][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.514358][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.523006][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.589007][ T7195] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.605098][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.614530][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.623281][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.631793][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.640598][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.651254][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.660071][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.667122][ T2475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.679372][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.699612][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.708241][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.771949][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.796151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.809654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.818095][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.825421][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.836520][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.845857][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.912066][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.930923][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.938686][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.947503][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.956761][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.011849][ T7130] device veth0_vlan entered promiscuous mode [ 236.068536][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.079692][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.088272][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.098965][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.108668][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.118882][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.143441][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.161146][ T7130] device veth1_vlan entered promiscuous mode [ 236.169068][ C0] hrtimer: interrupt took 46283 ns [ 236.196999][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.207211][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.224883][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.262914][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.293350][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.340199][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.354856][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.377755][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.413417][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.430643][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.438610][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.457598][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.466555][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.482174][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.496233][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.507808][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.514968][ T2475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.535056][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.557347][ T7507] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.576530][ T7082] device veth0_vlan entered promiscuous mode [ 236.623003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.635456][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.653163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.666592][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.683599][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.690765][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state 13:48:03 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) semop(0x0, 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1fe}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) [ 236.776131][ T7082] device veth1_vlan entered promiscuous mode [ 236.803621][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.823744][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.837953][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.858754][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.878701][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.887699][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.933376][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.969688][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.976785][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.986282][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.996047][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.005868][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.013024][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.022685][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.022849][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.039195][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.048113][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.063298][ T7130] device veth0_macvtap entered promiscuous mode [ 237.083162][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.111766][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.123119][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.137896][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.173107][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.183480][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.202578][ T7130] device veth1_macvtap entered promiscuous mode [ 237.270978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.287932][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.298449][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 13:48:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d9007) [ 237.316017][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.325634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.342372][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.351894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.366542][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.376163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.385941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.428798][ T7507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.433848][ T8207] FAT-fs (loop0): bogus number of FAT sectors [ 237.445690][ T8207] FAT-fs (loop0): Can't find a valid FAT filesystem [ 237.460956][ T7507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.478422][ T7082] device veth0_macvtap entered promiscuous mode [ 237.500692][ T7432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.530442][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.549998][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.560241][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.569092][ T29] audit: type=1804 audit(1590241684.008:2): pid=8207 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir513353620/syzkaller.sKaSS4/2/file0/bus" dev="sda1" ino=15740 res=1 [ 237.580166][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.639898][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.648650][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.670009][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.678831][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.689198][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.697988][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.707713][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.718119][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.732735][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.740997][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.783391][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 237.798384][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.812133][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.821627][ T7082] device veth1_macvtap entered promiscuous mode [ 237.870676][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.880656][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.891323][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.905636][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 237.917070][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.929608][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.965785][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.980725][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.990939][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.998674][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.006638][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.015818][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.051555][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.062154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.071187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.078742][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.088799][ T7195] device veth0_vlan entered promiscuous mode [ 238.105687][ T7507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.121032][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.135981][ T8207] FAT-fs (loop0): bogus number of FAT sectors [ 238.137196][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.153934][ T8207] FAT-fs (loop0): Can't find a valid FAT filesystem [ 238.154198][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.171384][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.183404][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.195277][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.254405][ T7195] device veth1_vlan entered promiscuous mode [ 238.284465][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.298713][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.316324][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.333034][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.353479][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.372601][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.390727][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.403590][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1 13:48:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_TXQLEN={0x8, 0xd, 0xa}]}, 0x54}}, 0x0) [ 238.460261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.499136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.507948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.650794][ T29] audit: type=1804 audit(1590241685.098:3): pid=8237 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir915854970/syzkaller.rNjwGM/0/file0" dev="sda1" ino=15748 res=1 [ 238.750509][ T7195] device veth0_macvtap entered promiscuous mode [ 238.764401][ T8234] device geneve2 entered promiscuous mode [ 238.821031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.829965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.855563][ T7195] device veth1_macvtap entered promiscuous mode 13:48:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_TXQLEN={0x8, 0xd, 0xa}]}, 0x54}}, 0x0) [ 238.864997][ T29] audit: type=1804 audit(1590241685.318:4): pid=8238 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir915854970/syzkaller.rNjwGM/0/file0" dev="sda1" ino=15748 res=1 [ 238.917651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.939407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.952317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 13:48:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3f, 0x0, 0x0, 0x1, 0x8000}) [ 238.976491][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 13:48:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0x200, 0x203, 0x200, 0x0, 0x308, 0x308, 0x308, 0x308, 0x308, 0x3, 0x0, {[{{@ipv6={@remote={0xfe, 0x80, [0x0, 0x0, 0x3e]}, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb5) 13:48:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3f, 0x0, 0x0, 0x1, 0x8000}) 13:48:05 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000600)=ANY=[@ANYBLOB="01"]) [ 239.077046][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 239.132207][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.154267][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 13:48:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4860332", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x22, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90) [ 239.207676][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.210625][ T8262] sd 0:0:1:0: device reset [ 239.258786][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 239.292900][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.315215][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.338168][ T7432] device veth0_vlan entered promiscuous mode [ 239.374031][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.386722][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.408560][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.418797][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.429106][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.437646][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.450296][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.468040][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.486853][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.498465][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.515375][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.551951][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.563819][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.579544][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.587320][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.597893][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.607089][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.624244][ T7432] device veth1_vlan entered promiscuous mode [ 239.660076][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.668158][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.678955][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.687420][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.699469][ T7507] device veth0_vlan entered promiscuous mode [ 239.747910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.760416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.830544][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.840592][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.903792][ T7432] device veth0_macvtap entered promiscuous mode [ 239.919604][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.938043][ T7432] device veth1_macvtap entered promiscuous mode [ 239.967963][ T7507] device veth1_vlan entered promiscuous mode [ 240.055825][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.067672][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.082751][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.093724][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.105208][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.116447][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.140840][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.152008][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.164684][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.227527][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.246472][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 13:48:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227b, 0x0) [ 240.273286][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.292748][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.307721][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.330305][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.345669][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.357037][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.369305][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.395472][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.408488][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.425355][ T7507] device veth0_macvtap entered promiscuous mode [ 240.440738][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.459744][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.476033][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.484919][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.522129][ T7507] device veth1_macvtap entered promiscuous mode [ 240.537757][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.547494][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.698128][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.708999][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.719542][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.730754][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.740618][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.752554][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.762452][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.773644][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.783595][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.794333][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.806229][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.862735][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.879445][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.918207][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.941559][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.946615][ T29] audit: type=1800 audit(1590241687.388:5): pid=8299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15767 res=0 [ 240.957291][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.004835][ T8299] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 241.012837][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.058466][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.070956][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.082179][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.094456][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.105025][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.116018][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.127843][ T8299] Process accounting resumed [ 241.130052][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.136500][ T8299] minix_free_inode: bit 1 already cleared [ 241.157160][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.169515][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.236313][ T8299] MINIX-fs: mounting unchecked file system, running fsck is recommended 13:48:07 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2201, 0x0) [ 241.340819][ T8299] Process accounting resumed [ 241.353972][ T7432] minix_free_inode: bit 1 already cleared 13:48:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3}, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x0) 13:48:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3f, 0x0, 0x0, 0x1, 0x8000}) 13:48:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:48:08 executing program 2: rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x8) 13:48:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 13:48:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) flistxattr(r0, &(0x7f0000000040)=""/28, 0x1c) [ 242.213663][ T8465] input: syz0 as /devices/virtual/input/input5 [ 242.222374][ T8462] FAT-fs (loop3): bogus number of FAT sectors [ 242.244795][ T8458] ================================================================== [ 242.253287][ T8458] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 242.260496][ T8458] Read of size 8 at addr ffff88805debc150 by task syz-executor.0/8458 [ 242.268638][ T8458] [ 242.270968][ T8458] CPU: 0 PID: 8458 Comm: syz-executor.0 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 242.280754][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.290802][ T8458] Call Trace: [ 242.294191][ T8458] dump_stack+0x18f/0x20d [ 242.298530][ T8458] ? __mutex_lock+0x1033/0x13c0 [ 242.303378][ T8458] ? __mutex_lock+0x1033/0x13c0 [ 242.308310][ T8458] print_address_description.constprop.0.cold+0xd3/0x413 [ 242.315435][ T8458] ? cdev_device_del+0x69/0x80 [ 242.320302][ T8458] ? joydev_disconnect+0x3d/0xb0 [ 242.325279][ T8458] ? __input_unregister_device+0x1b0/0x430 [ 242.331084][ T8458] ? input_unregister_device+0xb4/0xf0 [ 242.336588][ T8458] ? uinput_destroy_device+0x1e2/0x240 [ 242.342110][ T8458] ? vprintk_func+0x97/0x1a6 [ 242.346700][ T8458] ? __mutex_lock+0x1033/0x13c0 [ 242.351549][ T8458] kasan_report.cold+0x1f/0x37 [ 242.356311][ T8458] ? __mutex_lock+0x1033/0x13c0 [ 242.361158][ T8458] __mutex_lock+0x1033/0x13c0 [ 242.365833][ T8458] ? joydev_cleanup+0x21/0x190 [ 242.370620][ T8458] ? print_usage_bug+0x240/0x240 [ 242.375581][ T8458] ? trace_hardirqs_off+0x50/0x220 [ 242.380693][ T8458] ? mutex_trylock+0x2c0/0x2c0 [ 242.385460][ T8458] ? mark_held_locks+0x9f/0xe0 [ 242.390229][ T8458] ? kfree+0x1eb/0x2b0 [ 242.394315][ T8458] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 242.400377][ T8458] ? kfree_const+0x51/0x60 [ 242.403655][ T8462] FAT-fs (loop3): Can't find a valid FAT filesystem [ 242.404799][ T8458] ? joydev_cleanup+0x21/0x190 [ 242.404825][ T8458] joydev_cleanup+0x21/0x190 [ 242.404841][ T8458] joydev_disconnect+0x45/0xb0 [ 242.404862][ T8458] __input_unregister_device+0x1b0/0x430 [ 242.431097][ T8458] input_unregister_device+0xb4/0xf0 [ 242.436366][ T8458] uinput_destroy_device+0x1e2/0x240 [ 242.441641][ T8458] ? uinput_destroy_device+0x240/0x240 [ 242.447080][ T8458] uinput_release+0x37/0x50 [ 242.451584][ T8458] __fput+0x33e/0x880 [ 242.455626][ T8458] task_work_run+0xf4/0x1b0 [ 242.460127][ T8458] exit_to_usermode_loop+0x2fa/0x360 [ 242.465394][ T8458] do_syscall_64+0x6b1/0x7d0 [ 242.469968][ T8458] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 242.475838][ T8458] RIP: 0033:0x416621 [ 242.479726][ T8458] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 242.499307][ T8458] RSP: 002b:00007ffd96397b50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 242.507694][ T8458] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 242.515643][ T8458] RDX: 0000001b2db20000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 242.523601][ T8458] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 242.531548][ T8458] R10: 00007ffd96397c40 R11: 0000000000000293 R12: 00000000007904c8 [ 242.539508][ T8458] R13: 000000000003b260 R14: ffffffffffffffff R15: 000000000078bf0c [ 242.547478][ T8458] [ 242.549784][ T8458] Allocated by task 8465: [ 242.554093][ T8458] save_stack+0x1b/0x40 [ 242.558226][ T8458] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 242.563840][ T8458] kmem_cache_alloc_trace+0x153/0x7d0 [ 242.569189][ T8458] joydev_connect+0x83/0xd2f [ 242.573757][ T8458] input_attach_handler+0x194/0x200 [ 242.578930][ T8458] input_register_device.cold+0xf5/0x246 [ 242.584548][ T8458] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 242.590548][ T8458] ksys_ioctl+0x11a/0x180 [ 242.594854][ T8458] __x64_sys_ioctl+0x6f/0xb0 [ 242.599421][ T8458] do_syscall_64+0xf6/0x7d0 [ 242.603918][ T8458] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 242.609778][ T8458] [ 242.612094][ T8458] Freed by task 8458: [ 242.616053][ T8458] save_stack+0x1b/0x40 [ 242.620185][ T8458] __kasan_slab_free+0xf7/0x140 [ 242.625023][ T8458] kfree+0x109/0x2b0 [ 242.628966][ T8458] device_release+0x71/0x200 [ 242.633546][ T8458] kobject_put+0x1c8/0x2f0 [ 242.637950][ T8458] cdev_device_del+0x69/0x80 [ 242.642516][ T8458] joydev_disconnect+0x3d/0xb0 [ 242.647260][ T8458] __input_unregister_device+0x1b0/0x430 [ 242.652869][ T8458] input_unregister_device+0xb4/0xf0 [ 242.658143][ T8458] uinput_destroy_device+0x1e2/0x240 [ 242.663404][ T8458] uinput_release+0x37/0x50 [ 242.667899][ T8458] __fput+0x33e/0x880 [ 242.671880][ T8458] task_work_run+0xf4/0x1b0 [ 242.676366][ T8458] exit_to_usermode_loop+0x2fa/0x360 [ 242.681634][ T8458] do_syscall_64+0x6b1/0x7d0 [ 242.686209][ T8458] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 242.692087][ T8458] [ 242.694400][ T8458] The buggy address belongs to the object at ffff88805debc000 [ 242.694400][ T8458] which belongs to the cache kmalloc-8k of size 8192 [ 242.708428][ T8458] The buggy address is located 336 bytes inside of [ 242.708428][ T8458] 8192-byte region [ffff88805debc000, ffff88805debe000) [ 242.721769][ T8458] The buggy address belongs to the page: [ 242.727385][ T8458] page:ffffea000177af00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea000177af00 order:2 compound_mapcount:0 compound_pincount:0 [ 242.742554][ T8458] flags: 0xfffe0000010200(slab|head) [ 242.747818][ T8458] raw: 00fffe0000010200 ffffea0001773708 ffffea00016bf608 ffff8880aa0021c0 [ 242.756383][ T8458] raw: 0000000000000000 ffff88805debc000 0000000100000001 0000000000000000 [ 242.764938][ T8458] page dumped because: kasan: bad access detected [ 242.771320][ T8458] [ 242.773622][ T8458] Memory state around the buggy address: [ 242.779231][ T8458] ffff88805debc000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.787281][ T8458] ffff88805debc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.795319][ T8458] >ffff88805debc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.803354][ T8458] ^ 13:48:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) close(0xffffffffffffffff) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000240)) [ 242.810015][ T8458] ffff88805debc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.818051][ T8458] ffff88805debc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.826096][ T8458] ================================================================== [ 242.834140][ T8458] Disabling lock debugging due to kernel taint 13:48:09 executing program 1: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x3f, 0x0, 0x0, 0x1, 0x8000}) 13:48:09 executing program 4: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = dup2(r1, r0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x2000}]) io_pgetevents(r3, 0x0, 0x1, &(0x7f0000000140)=[{}], 0x0, 0x0) [ 242.917197][ T8462] FAT-fs (loop3): bogus number of FAT sectors [ 242.925247][ T8462] FAT-fs (loop3): Can't find a valid FAT filesystem [ 242.933593][ T8458] Kernel panic - not syncing: panic_on_warn set ... [ 242.940191][ T8458] CPU: 0 PID: 8458 Comm: syz-executor.0 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 242.951368][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.961417][ T8458] Call Trace: [ 242.964706][ T8458] dump_stack+0x18f/0x20d [ 242.969035][ T8458] ? __mutex_lock+0xf50/0x13c0 [ 242.973870][ T8458] panic+0x2e3/0x75c [ 242.977765][ T8458] ? __warn_printk+0xf3/0xf3 [ 242.982399][ T8458] ? preempt_schedule_common+0x5e/0xc0 [ 242.987855][ T8458] ? __mutex_lock+0x1033/0x13c0 [ 242.992698][ T8458] ? __mutex_lock+0x1033/0x13c0 [ 242.997542][ T8458] ? preempt_schedule_thunk+0x16/0x18 [ 243.002910][ T8458] ? trace_hardirqs_on+0x55/0x230 [ 243.007930][ T8458] ? __mutex_lock+0x1033/0x13c0 [ 243.012777][ T8458] ? __mutex_lock+0x1033/0x13c0 13:48:09 executing program 1: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x3f, 0x0, 0x0, 0x1, 0x8000}) [ 243.017642][ T8458] end_report+0x4d/0x53 [ 243.021792][ T8458] kasan_report.cold+0xd/0x37 [ 243.026461][ T8458] ? __mutex_lock+0x1033/0x13c0 [ 243.031309][ T8458] __mutex_lock+0x1033/0x13c0 [ 243.035988][ T8458] ? joydev_cleanup+0x21/0x190 [ 243.040757][ T8458] ? print_usage_bug+0x240/0x240 [ 243.045691][ T8458] ? trace_hardirqs_off+0x50/0x220 [ 243.050804][ T8458] ? mutex_trylock+0x2c0/0x2c0 [ 243.055561][ T8458] ? mark_held_locks+0x9f/0xe0 [ 243.060316][ T8458] ? kfree+0x1eb/0x2b0 [ 243.064380][ T8458] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 243.070356][ T8458] ? kfree_const+0x51/0x60 [ 243.074763][ T8458] ? joydev_cleanup+0x21/0x190 [ 243.079507][ T8458] joydev_cleanup+0x21/0x190 [ 243.084080][ T8458] joydev_disconnect+0x45/0xb0 [ 243.088824][ T8458] __input_unregister_device+0x1b0/0x430 [ 243.094532][ T8458] input_unregister_device+0xb4/0xf0 [ 243.099793][ T8458] uinput_destroy_device+0x1e2/0x240 [ 243.105053][ T8458] ? uinput_destroy_device+0x240/0x240 [ 243.110486][ T8458] uinput_release+0x37/0x50 [ 243.114965][ T8458] __fput+0x33e/0x880 [ 243.118922][ T8458] task_work_run+0xf4/0x1b0 [ 243.123418][ T8458] exit_to_usermode_loop+0x2fa/0x360 [ 243.128678][ T8458] do_syscall_64+0x6b1/0x7d0 [ 243.133245][ T8458] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 243.139109][ T8458] RIP: 0033:0x416621 [ 243.142980][ T8458] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 243.162556][ T8458] RSP: 002b:00007ffd96397b50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 243.170953][ T8458] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 243.178898][ T8458] RDX: 0000001b2db20000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 243.186848][ T8458] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 243.194791][ T8458] R10: 00007ffd96397c40 R11: 0000000000000293 R12: 00000000007904c8 [ 243.202749][ T8458] R13: 000000000003b260 R14: ffffffffffffffff R15: 000000000078bf0c [ 243.212043][ T8458] Kernel Offset: disabled [ 243.216357][ T8458] Rebooting in 86400 seconds..