[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.106' (ECDSA) to the list of known hosts. 2020/08/12 00:06:18 fuzzer started 2020/08/12 00:06:19 dialing manager at 10.128.0.26:39751 2020/08/12 00:06:19 syscalls: 3107 2020/08/12 00:06:19 code coverage: enabled 2020/08/12 00:06:19 comparison tracing: enabled 2020/08/12 00:06:19 extra coverage: enabled 2020/08/12 00:06:19 setuid sandbox: enabled 2020/08/12 00:06:19 namespace sandbox: enabled 2020/08/12 00:06:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/12 00:06:19 fault injection: enabled 2020/08/12 00:06:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/12 00:06:19 net packet injection: enabled 2020/08/12 00:06:19 net device setup: enabled 2020/08/12 00:06:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/12 00:06:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/12 00:06:19 USB emulation: enabled 2020/08/12 00:06:19 hci packet injection: enabled 00:06:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xa808) syzkaller login: [ 148.733490][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 148.957572][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 149.071674][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.079075][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.088408][ T8486] device bridge_slave_0 entered promiscuous mode [ 149.107972][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.115411][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.124842][ T8486] device bridge_slave_1 entered promiscuous mode [ 149.178885][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.195164][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.243380][ T8486] team0: Port device team_slave_0 added [ 149.257030][ T8486] team0: Port device team_slave_1 added [ 149.300590][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.307798][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.334506][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.356899][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.364545][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.390736][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.449167][ T8486] device hsr_slave_0 entered promiscuous mode [ 149.458555][ T8486] device hsr_slave_1 entered promiscuous mode [ 149.766738][ T8486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.805296][ T8486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.835054][ T8486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.867630][ T8486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.189016][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.227644][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.236860][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.259158][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.292048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.304237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.313595][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.321091][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.379536][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.389052][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.398976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.408349][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.415749][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.424953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.435901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.446855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.457306][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.504791][ T8486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.515353][ T8486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.575125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.584738][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.595515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.605846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.615477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.625724][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.635420][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.645105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.652804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.662930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.687316][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.786283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.797100][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.856671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.867385][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.895608][ T8486] device veth0_vlan entered promiscuous mode [ 150.909178][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.918433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.950755][ T8486] device veth1_vlan entered promiscuous mode [ 150.965304][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.036714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.046476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.067927][ T8486] device veth0_macvtap entered promiscuous mode [ 151.090965][ T8486] device veth1_macvtap entered promiscuous mode [ 151.140759][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.149240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.158818][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.168340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.178351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.202224][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.215417][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.225685][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.641486][ T1355] tipc: TX() has been purged, node left! [ 154.188724][ T8736] IPVS: ftp: loaded support on port[0] = 21 [ 154.762448][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 154.962762][ T1355] device hsr_slave_0 left promiscuous mode [ 154.973340][ T1355] device hsr_slave_1 left promiscuous mode [ 154.985225][ T1355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.992669][ T1355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.005993][ T1355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.013518][ T1355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.025344][ T1355] device bridge_slave_1 left promiscuous mode [ 155.032059][ T1355] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.045727][ T1355] device bridge_slave_0 left promiscuous mode [ 155.052423][ T1355] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.074940][ T1355] device veth1_macvtap left promiscuous mode [ 155.081014][ T1355] device veth0_macvtap left promiscuous mode [ 155.087456][ T1355] device veth1_vlan left promiscuous mode [ 155.093292][ T1355] device veth0_vlan left promiscuous mode [ 158.567275][ T1355] team0 (unregistering): Port device team_slave_1 removed [ 158.589667][ T1355] team0 (unregistering): Port device team_slave_0 removed [ 158.613227][ T1355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.640559][ T1355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.755588][ T1355] bond0 (unregistering): Released all slaves [ 158.848832][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.856652][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.865930][ T8736] device bridge_slave_0 entered promiscuous mode [ 158.889338][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.896754][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.906340][ T8736] device bridge_slave_1 entered promiscuous mode [ 158.954971][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.976542][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.029025][ T8736] team0: Port device team_slave_0 added [ 159.044304][ T8736] team0: Port device team_slave_1 added [ 159.089036][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.096495][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.122697][ T8736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.141121][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.148406][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.175289][ T8736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.252706][ T8736] device hsr_slave_0 entered promiscuous mode [ 159.284827][ T8736] device hsr_slave_1 entered promiscuous mode [ 160.092673][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.129866][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.138955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.161804][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.185448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.196607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.206023][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.213365][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.225269][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.243206][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.252252][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.261871][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.269190][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state 00:06:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x206) [ 160.315964][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.326710][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.337914][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.348312][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.409767][ T8736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.420284][ T8736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.435503][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.445674][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.455952][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.466178][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.475755][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.485841][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.495355][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.570439][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.579717][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.587509][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.608542][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.675382][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.685323][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.747781][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.757325][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.782143][ T8736] device veth0_vlan entered promiscuous mode [ 160.790612][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.800073][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.842613][ T8736] device veth1_vlan entered promiscuous mode [ 160.884118][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.893629][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.949498][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.960948][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.983891][ T8736] device veth0_macvtap entered promiscuous mode [ 161.010138][ T8736] device veth1_macvtap entered promiscuous mode [ 161.066098][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.073984][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.083436][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.092703][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.102749][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.149333][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.180340][ T8934] IPVS: ftp: loaded support on port[0] = 21 [ 161.197458][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.207328][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.871948][ T8934] chnl_net:caif_netlink_parms(): no params data found [ 161.955697][ T1689] tipc: TX() has been purged, node left! [ 162.467461][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.474824][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.484224][ T8934] device bridge_slave_0 entered promiscuous mode [ 162.598792][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.606320][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.615696][ T8934] device bridge_slave_1 entered promiscuous mode [ 162.760036][ T8934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.797811][ T8934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.856044][ T8934] team0: Port device team_slave_0 added [ 162.951404][ T8934] team0: Port device team_slave_1 added [ 163.193993][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.201060][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.228034][ T8934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.254410][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.261448][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.287527][ T8934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.570511][ T8934] device hsr_slave_0 entered promiscuous mode [ 163.581084][ T8934] device hsr_slave_1 entered promiscuous mode [ 163.589324][ T8934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.597993][ T8934] Cannot create hsr debugfs directory [ 163.618982][ T1689] device hsr_slave_0 left promiscuous mode [ 163.627459][ T1689] device hsr_slave_1 left promiscuous mode [ 163.636682][ T1689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.644383][ T1689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.656371][ T1689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.663961][ T1689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.685639][ T1689] device bridge_slave_1 left promiscuous mode [ 163.692365][ T1689] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.728859][ T1689] device bridge_slave_0 left promiscuous mode [ 163.736008][ T1689] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.762031][ T1689] device veth1_macvtap left promiscuous mode [ 163.768292][ T1689] device veth0_macvtap left promiscuous mode [ 163.774549][ T1689] device veth1_vlan left promiscuous mode [ 163.780395][ T1689] device veth0_vlan left promiscuous mode [ 163.801199][ T9101] IPVS: ftp: loaded support on port[0] = 21 [ 167.236197][ T1689] team0 (unregistering): Port device team_slave_1 removed [ 167.261114][ T1689] team0 (unregistering): Port device team_slave_0 removed [ 167.289232][ T1689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.315300][ T1689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.428414][ T1689] bond0 (unregistering): Released all slaves [ 167.863791][ T9101] chnl_net:caif_netlink_parms(): no params data found [ 167.988387][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.995783][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.005271][ T9101] device bridge_slave_0 entered promiscuous mode [ 168.069522][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.077598][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.087038][ T9101] device bridge_slave_1 entered promiscuous mode [ 168.105815][ T8934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 168.140824][ T8934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.184415][ T8934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.214706][ T8934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.241018][ T9101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.303582][ T9101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.442854][ T9101] team0: Port device team_slave_0 added [ 168.476276][ T9101] team0: Port device team_slave_1 added [ 168.573962][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.581045][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.607168][ T9101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.637671][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.644808][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.670891][ T9101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.750713][ T9101] device hsr_slave_0 entered promiscuous mode [ 168.763897][ T9101] device hsr_slave_1 entered promiscuous mode [ 168.955238][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.044281][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.053386][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.097077][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.175139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.184942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.195388][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.202780][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.219744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.247643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.259422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.268903][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.276300][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.285470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.302549][ C0] ===================================================== [ 169.309503][ C0] BUG: KMSAN: uninit-value in expire_timers+0x38d/0x780 [ 169.316437][ C0] CPU: 0 PID: 9101 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 169.325005][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.335047][ C0] Call Trace: [ 169.338338][ C0] [ 169.341192][ C0] dump_stack+0x21c/0x280 [ 169.345537][ C0] kmsan_report+0xf7/0x1e0 [ 169.349956][ C0] __msan_warning+0x58/0xa0 [ 169.354458][ C0] expire_timers+0x38d/0x780 [ 169.359059][ C0] __run_timers+0xaf4/0xd30 [ 169.363576][ C0] ? kmsan_get_metadata+0x116/0x180 [ 169.368778][ C0] run_timer_softirq+0x2d/0x50 [ 169.373538][ C0] ? migrate_timer_list+0x780/0x780 [ 169.378745][ C0] __do_softirq+0x2ea/0x7f5 [ 169.383253][ C0] asm_call_on_stack+0xf/0x20 [ 169.387914][ C0] [ 169.390852][ C0] do_softirq_own_stack+0x7c/0xa0 [ 169.395881][ C0] __irq_exit_rcu+0x226/0x270 [ 169.400559][ C0] irq_exit_rcu+0xe/0x10 [ 169.404817][ C0] sysvec_apic_timer_interrupt+0x107/0x130 [ 169.410629][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 169.416612][ C0] RIP: 0010:curve25519_generic+0xd112/0x24290 [ 169.422677][ C0] Code: 48 89 44 24 20 4d 8d 6c 5d 00 48 8b 5c 24 48 4c 21 fb 4c 89 b4 24 38 06 00 00 4c 8b b4 24 a8 00 00 00 4d 21 fe 4c 21 7c 24 30 <48> 8d bc 24 40 06 00 00 e8 91 d1 7d fc 4c 0b b4 24 88 00 00 00 4c [ 169.442281][ C0] RSP: 0018:ffff88808114af00 EFLAGS: 00000202 [ 169.448343][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080d4b538 [ 169.456309][ C0] RDX: ffff888080d4b538 RSI: 0000000000000200 RDI: ffff88808114b538 [ 169.464281][ C0] RBP: ffff88808114b670 R08: ffffea000000000f R09: ffff88812fffa000 [ 169.472250][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 169.480215][ C0] R13: 0238d04ca12f800d R14: 0000000000000000 R15: 0007ffffffffffff [ 169.488337][ C0] wg_set_device+0x11f6/0x4110 [ 169.493107][ C0] ? __nla_parse+0x141/0x150 [ 169.497704][ C0] ? kmsan_get_metadata+0x116/0x180 [ 169.502900][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 169.508445][ C0] ? kmsan_get_metadata+0x116/0x180 [ 169.513646][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.519450][ C0] ? wg_get_device_done+0x1a0/0x1a0 [ 169.524650][ C0] genl_rcv_msg+0x1703/0x18a0 [ 169.529335][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 169.534888][ C0] netlink_rcv_skb+0x6d7/0x7e0 [ 169.539667][ C0] ? genl_rcv+0x80/0x80 [ 169.543846][ C0] genl_rcv+0x63/0x80 [ 169.547826][ C0] netlink_unicast+0x11c8/0x1490 [ 169.552763][ C0] ? genl_pernet_exit+0x90/0x90 [ 169.557631][ C0] netlink_sendmsg+0x173a/0x1840 [ 169.562584][ C0] ? netlink_getsockopt+0x17e0/0x17e0 [ 169.567965][ C0] __sys_sendto+0x9f8/0xca0 [ 169.572485][ C0] ? kmsan_get_metadata+0x116/0x180 [ 169.577682][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.583483][ C0] ? kmsan_get_metadata+0x116/0x180 [ 169.588771][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.594571][ C0] __se_sys_sendto+0x107/0x130 [ 169.599367][ C0] __x64_sys_sendto+0x6e/0x90 [ 169.604041][ C0] do_syscall_64+0xad/0x160 [ 169.608543][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 169.614425][ C0] RIP: 0033:0x416ae3 [ 169.618304][ C0] Code: Bad RIP value. [ 169.622361][ C0] RSP: 002b:000000000169f7d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 169.630764][ C0] RAX: ffffffffffffffda RBX: 00000000016a3700 RCX: 0000000000416ae3 [ 169.638726][ C0] RDX: 0000000000000170 RSI: 00000000016a3750 RDI: 0000000000000004 [ 169.646693][ C0] RBP: 0000000000000000 R08: 000000000169f7e0 R09: 000000000000000c [ 169.654655][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.662619][ C0] R13: 0000000000000000 R14: 00000000016a3750 R15: 0000000000000004 [ 169.670596][ C0] [ 169.672913][ C0] Uninit was created at: [ 169.677151][ C0] kmsan_internal_poison_shadow+0x66/0xd0 [ 169.682863][ C0] kmsan_slab_alloc+0x8a/0xe0 [ 169.687537][ C0] __kmalloc_track_caller+0xbe8/0xe10 [ 169.692903][ C0] kmemdup+0x95/0x140 [ 169.696880][ C0] __addrconf_sysctl_register+0xe1/0x7f0 [ 169.702508][ C0] addrconf_sysctl_register+0x31d/0x3e0 [ 169.708050][ C0] ipv6_add_dev+0x1403/0x1c50 [ 169.712721][ C0] addrconf_notify+0xcc7/0x6400 [ 169.717571][ C0] raw_notifier_call_chain+0x123/0x290 [ 169.723031][ C0] register_netdevice+0x3120/0x37d0 [ 169.728224][ C0] veth_newlink+0xb5c/0x15c0 [ 169.732818][ C0] rtnl_newlink+0x2e03/0x3ed0 [ 169.737489][ C0] rtnetlink_rcv_msg+0x142b/0x18c0 [ 169.742624][ C0] netlink_rcv_skb+0x6d7/0x7e0 [ 169.747378][ C0] rtnetlink_rcv+0x50/0x60 [ 169.751785][ C0] netlink_unicast+0x11c8/0x1490 [ 169.756717][ C0] netlink_sendmsg+0x173a/0x1840 [ 169.761649][ C0] __sys_sendto+0x9f8/0xca0 [ 169.766141][ C0] __se_sys_sendto+0x107/0x130 [ 169.770927][ C0] __x64_sys_sendto+0x6e/0x90 [ 169.775619][ C0] do_syscall_64+0xad/0x160 [ 169.780145][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 169.786022][ C0] ===================================================== [ 169.792937][ C0] Disabling lock debugging due to kernel taint [ 169.799079][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 169.805660][ C0] CPU: 0 PID: 9101 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 169.815619][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.825663][ C0] Call Trace: [ 169.828939][ C0] [ 169.831791][ C0] dump_stack+0x21c/0x280 [ 169.836123][ C0] panic+0x4d7/0xef7 [ 169.840028][ C0] ? add_taint+0x17c/0x210 [ 169.844454][ C0] kmsan_report+0x1df/0x1e0 [ 169.848961][ C0] __msan_warning+0x58/0xa0 [ 169.853463][ C0] expire_timers+0x38d/0x780 [ 169.858061][ C0] __run_timers+0xaf4/0xd30 [ 169.862582][ C0] ? kmsan_get_metadata+0x116/0x180 [ 169.867779][ C0] run_timer_softirq+0x2d/0x50 [ 169.872543][ C0] ? migrate_timer_list+0x780/0x780 [ 169.877745][ C0] __do_softirq+0x2ea/0x7f5 [ 169.882272][ C0] asm_call_on_stack+0xf/0x20 [ 169.887038][ C0] [ 169.889988][ C0] do_softirq_own_stack+0x7c/0xa0 [ 169.895013][ C0] __irq_exit_rcu+0x226/0x270 [ 169.899696][ C0] irq_exit_rcu+0xe/0x10 [ 169.903943][ C0] sysvec_apic_timer_interrupt+0x107/0x130 [ 169.909750][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 169.915734][ C0] RIP: 0010:curve25519_generic+0xd112/0x24290 [ 169.921793][ C0] Code: 48 89 44 24 20 4d 8d 6c 5d 00 48 8b 5c 24 48 4c 21 fb 4c 89 b4 24 38 06 00 00 4c 8b b4 24 a8 00 00 00 4d 21 fe 4c 21 7c 24 30 <48> 8d bc 24 40 06 00 00 e8 91 d1 7d fc 4c 0b b4 24 88 00 00 00 4c [ 169.941399][ C0] RSP: 0018:ffff88808114af00 EFLAGS: 00000202 [ 169.947466][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080d4b538 [ 169.955435][ C0] RDX: ffff888080d4b538 RSI: 0000000000000200 RDI: ffff88808114b538 [ 169.963401][ C0] RBP: ffff88808114b670 R08: ffffea000000000f R09: ffff88812fffa000 [ 169.971367][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 169.979331][ C0] R13: 0238d04ca12f800d R14: 0000000000000000 R15: 0007ffffffffffff [ 169.987457][ C0] wg_set_device+0x11f6/0x4110 [ 169.992231][ C0] ? __nla_parse+0x141/0x150 [ 169.996832][ C0] ? kmsan_get_metadata+0x116/0x180 [ 170.002032][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 170.007586][ C0] ? kmsan_get_metadata+0x116/0x180 [ 170.012786][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 170.018589][ C0] ? wg_get_device_done+0x1a0/0x1a0 [ 170.023800][ C0] genl_rcv_msg+0x1703/0x18a0 [ 170.028495][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 170.034052][ C0] netlink_rcv_skb+0x6d7/0x7e0 [ 170.038818][ C0] ? genl_rcv+0x80/0x80 [ 170.042983][ C0] genl_rcv+0x63/0x80 [ 170.046974][ C0] netlink_unicast+0x11c8/0x1490 [ 170.051915][ C0] ? genl_pernet_exit+0x90/0x90 [ 170.056773][ C0] netlink_sendmsg+0x173a/0x1840 [ 170.061726][ C0] ? netlink_getsockopt+0x17e0/0x17e0 [ 170.067097][ C0] __sys_sendto+0x9f8/0xca0 [ 170.071616][ C0] ? kmsan_get_metadata+0x116/0x180 [ 170.076819][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 170.082622][ C0] ? kmsan_get_metadata+0x116/0x180 [ 170.087824][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 170.093634][ C0] __se_sys_sendto+0x107/0x130 [ 170.098416][ C0] __x64_sys_sendto+0x6e/0x90 [ 170.103102][ C0] do_syscall_64+0xad/0x160 [ 170.107612][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 170.113496][ C0] RIP: 0033:0x416ae3 [ 170.117372][ C0] Code: Bad RIP value. [ 170.121425][ C0] RSP: 002b:000000000169f7d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 170.129830][ C0] RAX: ffffffffffffffda RBX: 00000000016a3700 RCX: 0000000000416ae3 [ 170.137804][ C0] RDX: 0000000000000170 RSI: 00000000016a3750 RDI: 0000000000000004 [ 170.145768][ C0] RBP: 0000000000000000 R08: 000000000169f7e0 R09: 000000000000000c [ 170.153732][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.161693][ C0] R13: 0000000000000000 R14: 00000000016a3750 R15: 0000000000000004 [ 170.170910][ C0] Kernel Offset: disabled [ 170.175226][ C0] Rebooting in 86400 seconds..