[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ 48.596691][ T6739] scp (6739) used greatest stack depth: 21296 bytes left Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 48.988594][ T4883] systemd-udevd (4883) used greatest stack depth: 21056 bytes left Warning: Permanently added '10.128.0.147' (ECDSA) to the list of known hosts. 2020/06/26 22:21:34 fuzzer started 2020/06/26 22:21:34 dialing manager at 10.128.0.26:45395 2020/06/26 22:21:35 syscalls: 3118 2020/06/26 22:21:35 code coverage: enabled 2020/06/26 22:21:35 comparison tracing: enabled 2020/06/26 22:21:35 extra coverage: enabled 2020/06/26 22:21:35 setuid sandbox: enabled 2020/06/26 22:21:35 namespace sandbox: enabled 2020/06/26 22:21:35 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/26 22:21:35 fault injection: enabled 2020/06/26 22:21:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/26 22:21:35 net packet injection: enabled 2020/06/26 22:21:35 net device setup: enabled 2020/06/26 22:21:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/26 22:21:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/26 22:21:35 USB emulation: enabled 22:23:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002a000d490dff5200000000c9709d5b9c", @ANYRES32=r3], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x48041) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r4 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x84ffde, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 184.901819][ T6818] IPVS: ftp: loaded support on port[0] = 21 22:23:44 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup2(r1, r0) r3 = accept$inet(r2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "52f41687911a09f1", "4e79ee33d09dfaacc109d779560bbe38742628b550e5cb30d6742d476dd12a68", "0ae64d08", "73b4bc265f8a2725"}, 0x38) [ 185.064276][ T6818] chnl_net:caif_netlink_parms(): no params data found [ 185.176246][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.200909][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.209403][ T6818] device bridge_slave_0 entered promiscuous mode [ 185.233243][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.240348][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.251720][ T6818] device bridge_slave_1 entered promiscuous mode [ 185.276039][ T6948] IPVS: ftp: loaded support on port[0] = 21 [ 185.303727][ T6818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.333025][ T6818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 22:23:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x401, 'syz0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRES64, @ANYRESHEX]) close(r0) [ 185.398283][ T6818] team0: Port device team_slave_0 added [ 185.433135][ T6818] team0: Port device team_slave_1 added [ 185.536747][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.556976][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.584905][ T6818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.631431][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.638401][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.676134][ T7035] IPVS: ftp: loaded support on port[0] = 21 [ 185.689202][ T6818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.719437][ T6948] chnl_net:caif_netlink_parms(): no params data found 22:23:45 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x0, 0x100000, 0x0}) [ 185.836822][ T6818] device hsr_slave_0 entered promiscuous mode [ 185.911668][ T6818] device hsr_slave_1 entered promiscuous mode [ 186.028208][ T7109] IPVS: ftp: loaded support on port[0] = 21 22:23:45 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x800c4153, 0x0) [ 186.173406][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.180502][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.189853][ T6948] device bridge_slave_0 entered promiscuous mode [ 186.230431][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.240454][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.249576][ T6948] device bridge_slave_1 entered promiscuous mode [ 186.396682][ T7035] chnl_net:caif_netlink_parms(): no params data found [ 186.474699][ T6948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.529500][ T6948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.556988][ T7273] IPVS: ftp: loaded support on port[0] = 21 [ 186.631083][ T6948] team0: Port device team_slave_0 added [ 186.642977][ T7109] chnl_net:caif_netlink_parms(): no params data found 22:23:46 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "02"}}, 0x119) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)='\n\x00\x00\x00', 0x4}], 0x1) [ 186.678732][ T6948] team0: Port device team_slave_1 added [ 186.691278][ T6818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.789976][ T6818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.852232][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.859189][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.913891][ T6948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.925789][ T6818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.966862][ T6818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.024730][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.032780][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.058743][ T6948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.077422][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.087905][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.096829][ T7035] device bridge_slave_0 entered promiscuous mode [ 187.112954][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.120017][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.129029][ T7035] device bridge_slave_1 entered promiscuous mode [ 187.187187][ T7436] IPVS: ftp: loaded support on port[0] = 21 [ 187.218332][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.226132][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.234913][ T7109] device bridge_slave_0 entered promiscuous mode [ 187.274109][ T6948] device hsr_slave_0 entered promiscuous mode [ 187.331055][ T6948] device hsr_slave_1 entered promiscuous mode [ 187.370780][ T6948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.378659][ T6948] Cannot create hsr debugfs directory [ 187.391457][ T7035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.406104][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.414106][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.423272][ T7109] device bridge_slave_1 entered promiscuous mode [ 187.454528][ T7035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.499137][ T7035] team0: Port device team_slave_0 added [ 187.533712][ T7109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.546421][ T7109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.572538][ T7035] team0: Port device team_slave_1 added [ 187.658593][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.666005][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.694629][ T7035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.709572][ T7109] team0: Port device team_slave_0 added [ 187.744062][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.751258][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.778126][ T7035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.791454][ T7109] team0: Port device team_slave_1 added [ 187.804402][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 187.860098][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.867490][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.894090][ T7109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.953391][ T7035] device hsr_slave_0 entered promiscuous mode [ 187.981168][ T7035] device hsr_slave_1 entered promiscuous mode [ 188.020841][ T7035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.028412][ T7035] Cannot create hsr debugfs directory [ 188.056765][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.071633][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.102428][ T7109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.253569][ T6818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.316097][ T7109] device hsr_slave_0 entered promiscuous mode [ 188.371037][ T7109] device hsr_slave_1 entered promiscuous mode [ 188.410733][ T7109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.418292][ T7109] Cannot create hsr debugfs directory [ 188.453317][ T7436] chnl_net:caif_netlink_parms(): no params data found [ 188.487081][ T6948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.603623][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.616828][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.632538][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.639605][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.649497][ T7273] device bridge_slave_0 entered promiscuous mode [ 188.663180][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.670237][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.678767][ T7273] device bridge_slave_1 entered promiscuous mode [ 188.686479][ T6948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.736199][ T6948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.800375][ T6818] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.837431][ T6948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.929645][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.972251][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.986073][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.995276][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.004130][ T2587] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.011400][ T2587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.020993][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.028959][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.037662][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.047828][ T2587] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.054964][ T2587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.100667][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.148336][ T7273] team0: Port device team_slave_0 added [ 189.169079][ T7273] team0: Port device team_slave_1 added [ 189.189906][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.200709][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.207810][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.219393][ T7436] device bridge_slave_0 entered promiscuous mode [ 189.228705][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.236865][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.245885][ T7436] device bridge_slave_1 entered promiscuous mode [ 189.293359][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.300315][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.327346][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.344196][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.351404][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.377839][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.393561][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.402451][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.415178][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.423729][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.436839][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.481738][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.501244][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.510016][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.529348][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.538557][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.547676][ T7109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.607984][ T7109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.674862][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.686930][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.699801][ T7109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.794401][ T7273] device hsr_slave_0 entered promiscuous mode [ 189.851574][ T7273] device hsr_slave_1 entered promiscuous mode [ 189.891165][ T7273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.898758][ T7273] Cannot create hsr debugfs directory [ 189.935735][ T7109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.001992][ T7436] team0: Port device team_slave_0 added [ 190.035541][ T7035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.064601][ T7436] team0: Port device team_slave_1 added [ 190.103450][ T7035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.136882][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.144520][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.159970][ T6818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.171744][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.178724][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.207261][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.224655][ T7035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.298350][ T7035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.358203][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.365286][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.392515][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.420017][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.444395][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.455315][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.536148][ T7436] device hsr_slave_0 entered promiscuous mode [ 190.602330][ T7436] device hsr_slave_1 entered promiscuous mode [ 190.640661][ T7436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.648233][ T7436] Cannot create hsr debugfs directory [ 190.675449][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.685672][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.698191][ T6948] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.778953][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.788611][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.801893][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.808969][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.846603][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.858746][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.869370][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.885583][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.892697][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.908673][ T6818] device veth0_vlan entered promiscuous mode [ 190.932775][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.942839][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.951426][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.960389][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.970028][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.011983][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.022800][ T7273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.072981][ T7273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.158854][ T7109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.169649][ T6818] device veth1_vlan entered promiscuous mode [ 191.187368][ T7273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.249871][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.258530][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.269499][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.278526][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.287753][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.296598][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.305154][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.314404][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.326504][ T7273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.397901][ T6948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.409481][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.434097][ T7109] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.454454][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.471774][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.480058][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.494697][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.503352][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.548978][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.559058][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.568226][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.575351][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.614923][ T6818] device veth0_macvtap entered promiscuous mode [ 191.626512][ T6818] device veth1_macvtap entered promiscuous mode [ 191.636284][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.648201][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.657444][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.666808][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.673929][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.682230][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.690998][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.699405][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.707688][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.716510][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.725556][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.734681][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.743671][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.751591][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.759016][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.769215][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.824484][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.833278][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.842119][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.851136][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.859440][ T7436] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.918105][ T7436] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.956548][ T6948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.978532][ T7436] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.041872][ T7035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.048747][ T7436] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.101691][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.111120][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.122904][ T7109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.162358][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.172365][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.185476][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.194614][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.207412][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.217128][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.229438][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.245091][ T7035] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.281011][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.306277][ T6948] device veth0_vlan entered promiscuous mode [ 192.319524][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.328983][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.338630][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.348024][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.356976][ T2587] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.364099][ T2587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.374112][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.383081][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.392106][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.400033][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.408423][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.445604][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.459636][ T6948] device veth1_vlan entered promiscuous mode [ 192.481844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.489892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.500272][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.509410][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.516546][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.525955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.535171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.544677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.553670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.591749][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.599648][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.608907][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.617924][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.626551][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.635019][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.643541][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.788498][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.823172][ T7109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.836525][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.870931][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.878496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.888059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.897915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.919540][ T6948] device veth0_macvtap entered promiscuous mode [ 192.967142][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.988103][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.000181][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.014630][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.024294][ T2484] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.031440][ T2484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.062645][ T6948] device veth1_macvtap entered promiscuous mode [ 193.078623][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.087156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.096378][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.105280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.114502][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.123551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.133603][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.142197][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.149259][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.157345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.165201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.208098][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.235590][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.250217][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.263612][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.271507][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.280167][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.293630][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.305019][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.316565][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.330281][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.342445][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.359958][ T7035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.370310][ T7109] device veth0_vlan entered promiscuous mode [ 193.381023][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.391732][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.421931][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.433590][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.450071][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.463713][ T7109] device veth1_vlan entered promiscuous mode [ 193.472283][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.480266][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.488773][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.498693][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.531107][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.539078][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.548377][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.557376][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.566413][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.585912][ T7273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.601313][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.613720][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 22:23:53 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x8000000200004d1e, 0xfffffffffffffb41}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0xff2) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) [ 193.641365][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.649879][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.659538][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.670144][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.773327][ C0] hrtimer: interrupt took 28567 ns [ 193.801456][ T8078] NFS: Device name not specified [ 193.855200][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.870789][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.879686][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.909853][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.913467][ T8083] NFS: Device name not specified [ 193.935682][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 22:23:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1c, &(0x7f0000000140)="c4fe910c67e11148b38686cec96ddb5322ad4a7c47f9cf1a0928a7a7"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 193.998950][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.017136][ T7109] device veth0_macvtap entered promiscuous mode 22:23:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="070f293f"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000003c0), 0x0) [ 194.043604][ T7436] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.055698][ T7035] device veth0_vlan entered promiscuous mode [ 194.140871][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.148854][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.159547][ T8091] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 194.171503][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.203836][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.233364][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 22:23:53 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') [ 194.255859][ T8091] ------------[ cut here ]------------ [ 194.261512][ T8091] kernel BUG at arch/x86/kvm/mmu/mmu.c:3719! [ 194.285187][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.314790][ T7109] device veth1_macvtap entered promiscuous mode [ 194.314985][ T8091] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 194.327245][ T8091] CPU: 0 PID: 8091 Comm: syz-executor.0 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 194.337034][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.347097][ T8091] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 194.352378][ T8091] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 194.364281][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.371974][ T8091] RSP: 0018:ffffc90016dbfb30 EFLAGS: 00010212 [ 194.371984][ T8091] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc900020e9000 [ 194.371991][ T8091] RDX: 0000000000008ffc RSI: ffffffff8118e14a RDI: 0000000000000001 [ 194.371998][ T8091] RBP: ffff888051e80040 R08: ffff888051cde4c0 R09: ffffed1015cc719c [ 194.372005][ T8091] R10: ffff8880ae638cdb R11: ffffed1015cc719b R12: 0000000000000000 [ 194.372011][ T8091] R13: 0000000000000001 R14: ffff888051e80458 R15: 0000000000000000 [ 194.372021][ T8091] FS: 00007f52c3aa3700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 194.372028][ T8091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.372034][ T8091] CR2: 0000000000ca3b72 CR3: 0000000089e16000 CR4: 00000000001426f0 [ 194.372044][ T8091] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.372051][ T8091] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.372055][ T8091] Call Trace: [ 194.372075][ T8091] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 194.372093][ T8091] kvm_arch_vcpu_ioctl_run+0x4016/0x68d0 [ 194.372116][ T8091] ? kvm_arch_vcpu_runnable+0x6c0/0x6c0 [ 194.372128][ T8091] ? lock_downgrade+0x840/0x840 [ 194.372144][ T8091] ? rcu_read_lock_held_common+0xa0/0xa0 [ 194.372158][ T8091] ? check_preemption_disabled+0x38/0x220 [ 194.372173][ T8091] ? kvm_vcpu_ioctl+0x467/0xe10 [ 194.372185][ T8091] kvm_vcpu_ioctl+0x467/0xe10 [ 194.372201][ T8091] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 194.372215][ T8091] ? ioctl_file_clone+0x180/0x180 [ 194.372232][ T8091] ? check_preemption_disabled+0x38/0x220 [ 194.372246][ T8091] ? __fget_files+0x299/0x400 [ 194.372262][ T8091] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 194.372275][ T8091] ksys_ioctl+0x11a/0x180 [ 194.372290][ T8091] __x64_sys_ioctl+0x6f/0xb0 [ 194.372301][ T8091] do_syscall_64+0x60/0xe0 [ 194.372319][ T8091] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 194.420573][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.420654][ T8091] RIP: 0033:0x45cb19 [ 194.428617][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.437511][ T8091] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:23:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) [ 194.437518][ T8091] RSP: 002b:00007f52c3aa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.437529][ T8091] RAX: ffffffffffffffda RBX: 00000000004e8a00 RCX: 000000000045cb19 [ 194.437536][ T8091] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 194.437542][ T8091] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 194.437548][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 194.437554][ T8091] R13: 00000000000003d0 R14: 00000000004c68ae R15: 00007f52c3aa36d4 [ 194.437565][ T8091] Modules linked in: [ 194.674942][ T8091] ---[ end trace 7f818be01aa59fed ]--- [ 194.680825][ T8091] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 194.686115][ T8091] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 194.704460][ T8111] binder: BINDER_SET_CONTEXT_MGR already set [ 194.710277][ T8091] RSP: 0018:ffffc90016dbfb30 EFLAGS: 00010212 [ 194.716966][ T8111] binder: 8110:8111 ioctl 40046207 0 returned -16 [ 194.718287][ T8091] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc900020e9000 [ 194.725112][ T8113] binder: BINDER_SET_CONTEXT_MGR already set [ 194.732528][ T8091] RDX: 0000000000008ffc RSI: ffffffff8118e14a RDI: 0000000000000001 [ 194.742407][ T8113] binder: 8110:8113 ioctl 40046207 0 returned -16 [ 194.746613][ T8091] RBP: ffff888051e80040 R08: ffff888051cde4c0 R09: ffffed1015cc719c [ 194.761023][ T8091] R10: ffff8880ae638cdb R11: ffffed1015cc719b R12: 0000000000000000 22:23:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) [ 194.769101][ T8091] R13: 0000000000000001 R14: ffff888051e80458 R15: 0000000000000000 [ 194.778260][ T8091] FS: 00007f52c3aa3700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 194.787666][ T8091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.794556][ T8091] CR2: 0000000000000000 CR3: 0000000089e16000 CR4: 00000000001426e0 [ 194.802838][ T8091] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.811458][ T8091] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.819513][ T8091] Kernel panic - not syncing: Fatal exception [ 194.826876][ T8091] Kernel Offset: disabled [ 194.831203][ T8091] Rebooting in 86400 seconds..