Warning: Permanently added '[localhost]:19658' (ECDSA) to the list of known hosts. 2020/04/15 12:02:28 fuzzer started 2020/04/15 12:02:30 dialing manager at 10.0.2.10:39575 2020/04/15 12:02:30 syscalls: 2990 2020/04/15 12:02:30 code coverage: enabled 2020/04/15 12:02:30 comparison tracing: enabled 2020/04/15 12:02:30 extra coverage: enabled 2020/04/15 12:02:30 setuid sandbox: enabled 2020/04/15 12:02:30 namespace sandbox: enabled 2020/04/15 12:02:30 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/15 12:02:30 fault injection: enabled 2020/04/15 12:02:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/15 12:02:30 net packet injection: enabled 2020/04/15 12:02:30 net device setup: enabled 2020/04/15 12:02:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/15 12:02:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/15 12:02:30 USB emulation: /dev/raw-gadget does not exist 12:03:22 executing program 0: 12:03:22 executing program 1: 12:03:22 executing program 2: syzkaller login: [ 208.330228][ T8979] IPVS: ftp: loaded support on port[0] = 21 [ 208.422860][ T8982] IPVS: ftp: loaded support on port[0] = 21 12:03:23 executing program 3: [ 208.891336][ T8979] chnl_net:caif_netlink_parms(): no params data found [ 208.899716][ T8984] IPVS: ftp: loaded support on port[0] = 21 [ 208.932452][ T8982] chnl_net:caif_netlink_parms(): no params data found [ 209.082520][ T8988] IPVS: ftp: loaded support on port[0] = 21 [ 209.131034][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.148861][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.183605][ T8979] device bridge_slave_0 entered promiscuous mode [ 209.230447][ T8982] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.256896][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.269890][ T8982] device bridge_slave_0 entered promiscuous mode [ 209.295567][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.305543][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.317370][ T8982] device bridge_slave_1 entered promiscuous mode [ 209.328476][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.345875][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.360207][ T8979] device bridge_slave_1 entered promiscuous mode [ 209.411696][ T8979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.428960][ T8982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.453883][ T8979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.469281][ T8982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.553557][ T8982] team0: Port device team_slave_0 added [ 209.570426][ T8979] team0: Port device team_slave_0 added [ 209.588277][ T8979] team0: Port device team_slave_1 added [ 209.608048][ T8982] team0: Port device team_slave_1 added [ 209.635048][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.644082][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.691524][ T8979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.717707][ T8984] chnl_net:caif_netlink_parms(): no params data found [ 209.740167][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.755498][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.814384][ T8979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.862040][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.878258][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.933479][ T8982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.955563][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.967835][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.024235][ T8982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.251111][ T8982] device hsr_slave_0 entered promiscuous mode [ 210.367834][ T8982] device hsr_slave_1 entered promiscuous mode [ 210.480726][ T8988] chnl_net:caif_netlink_parms(): no params data found [ 210.541169][ T8979] device hsr_slave_0 entered promiscuous mode [ 210.667573][ T8979] device hsr_slave_1 entered promiscuous mode [ 210.736995][ T8979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.752867][ T8979] Cannot create hsr debugfs directory [ 210.765590][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.779380][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.792123][ T8984] device bridge_slave_0 entered promiscuous mode [ 210.837929][ T8984] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.855785][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.869129][ T8984] device bridge_slave_1 entered promiscuous mode [ 210.946047][ T8984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.993504][ T8984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.070067][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.088642][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.114824][ T8988] device bridge_slave_0 entered promiscuous mode [ 211.145132][ T8984] team0: Port device team_slave_0 added [ 211.168061][ T8984] team0: Port device team_slave_1 added [ 211.222583][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.253458][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.282337][ T8988] device bridge_slave_1 entered promiscuous mode [ 211.399476][ T8988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.435133][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.457530][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.525468][ T8984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.571716][ T8988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.598582][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.614846][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.653708][ T8984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.769123][ T8984] device hsr_slave_0 entered promiscuous mode [ 211.837340][ T8984] device hsr_slave_1 entered promiscuous mode [ 211.907049][ T8984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.920601][ T8984] Cannot create hsr debugfs directory [ 211.945853][ T8988] team0: Port device team_slave_0 added [ 211.963945][ T8988] team0: Port device team_slave_1 added [ 211.998102][ T8982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.089701][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.109248][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.164307][ T8988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.189925][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.207507][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.267272][ T8988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.291143][ T8982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.405815][ T8982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.473137][ T8982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.650632][ T8988] device hsr_slave_0 entered promiscuous mode [ 212.707468][ T8988] device hsr_slave_1 entered promiscuous mode [ 212.767160][ T8988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.778685][ T8988] Cannot create hsr debugfs directory [ 212.789787][ T8979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.885408][ T8979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.972856][ T8979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.079999][ T8979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.256689][ T8984] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.329798][ T8984] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.419406][ T8984] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.511899][ T8984] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.602443][ T8988] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.704349][ T8988] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.798558][ T8988] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.869943][ T8988] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.027933][ T8979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.061929][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.075780][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.103854][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.124267][ T8979] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.151349][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.163846][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.177436][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.191132][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.203603][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.213496][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.238047][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.254587][ T8982] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.287706][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.322168][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.355323][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.382876][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.415298][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.439561][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.455488][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.469471][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.482455][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.494810][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.511299][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.535538][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.663424][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.679821][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.692674][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.704421][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.718626][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.727847][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.761642][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.771299][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.782313][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.793452][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.829091][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.842688][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.854808][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.884599][ T8979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.900453][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.916891][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.927438][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.948456][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.962286][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.972139][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.995297][ T8988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.009582][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.022322][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.035644][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.065352][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.077694][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.090584][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.107132][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.123657][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.140728][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.154865][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.168797][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.182784][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.195488][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.212065][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.232779][ T8982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.248713][ T8982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.265083][ T8979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.274905][ T3428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.285853][ T3428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.304569][ T8988] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.328204][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.342180][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.352936][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.361736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.371635][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.381148][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.392441][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.423653][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.434712][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.447844][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.458555][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.467574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.477540][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.488870][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.499316][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.509785][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.521101][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.529920][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.539772][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.549619][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.575476][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.587753][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.598679][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.610529][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.624743][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.634982][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.646711][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.656725][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.672803][ T8984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.690590][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.700481][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.711435][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.722276][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.735771][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.745907][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.756708][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.774803][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.791950][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.806546][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.818268][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.831388][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.846678][ T8982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.864011][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.884595][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.898868][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.945165][ T8979] device veth0_vlan entered promiscuous mode [ 215.971581][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.990094][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.005479][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.019433][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.047090][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.059594][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.074792][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.096053][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.124366][ T8982] device veth0_vlan entered promiscuous mode [ 216.143827][ T8979] device veth1_vlan entered promiscuous mode [ 216.159672][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.174651][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.190201][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.205027][ T8984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.225500][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.236902][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.246995][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.257130][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.269345][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.293350][ T8988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.318187][ T8982] device veth1_vlan entered promiscuous mode [ 216.334277][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.348368][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.373609][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.408149][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.443250][ T8979] device veth0_macvtap entered promiscuous mode [ 216.484663][ T8979] device veth1_macvtap entered promiscuous mode [ 216.560733][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.604000][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.632810][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.655567][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.682185][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.705921][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.724472][ T8979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.746904][ T8982] device veth0_macvtap entered promiscuous mode [ 216.782165][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.809684][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.825743][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.848188][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.873759][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.908626][ T8979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.932192][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.958376][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.993803][ T8982] device veth1_macvtap entered promiscuous mode [ 217.052861][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.072479][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.103291][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.119087][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.140234][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.158291][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.176202][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.193454][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.208825][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.461654][ T8984] device veth0_vlan entered promiscuous mode [ 217.484667][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.516343][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.546126][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.651505][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.681697][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.718526][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.751123][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.775123][ T8988] device veth0_vlan entered promiscuous mode [ 217.803099][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.819303][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.845126][ T8984] device veth1_vlan entered promiscuous mode [ 217.977833][ T8988] device veth1_vlan entered promiscuous mode 12:03:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) [ 218.329416][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.375177][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.422484][ T8988] device veth0_macvtap entered promiscuous mode [ 218.453848][ T8988] device veth1_macvtap entered promiscuous mode 12:03:33 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = io_uring_setup(0xc29, &(0x7f0000000080)) r1 = io_uring_setup(0xc29, &(0x7f0000000080)) dup2(r0, r1) [ 218.505367][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.633419][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 12:03:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) [ 218.670759][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.696199][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.736150][ T8984] device veth0_macvtap entered promiscuous mode 12:03:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$assume_authority(0x3, r1) [ 218.766289][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 12:03:33 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = io_uring_setup(0xc29, &(0x7f0000000080)) r1 = io_uring_setup(0xc29, &(0x7f0000000080)) dup2(r0, r1) [ 218.843718][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.890410][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 12:03:33 executing program 0: add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) [ 218.944178][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.013771][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.034125][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.063561][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.078785][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.100683][ T8984] device veth1_macvtap entered promiscuous mode [ 219.118436][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.138068][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.160189][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.178456][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.202526][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.258862][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.281149][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.315112][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.337892][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.351889][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.369291][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.386049][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.401239][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.421663][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.478843][ T0] NOHZ: local_softirq_pending 08 [ 219.517156][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.531443][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.609828][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.624037][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.638193][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.651956][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.665484][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.679937][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.695015][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.711035][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.723217][ T9009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:03:34 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in=@local, @in6=@dev}, {@in=@broadcast}, @in6=@remote}}, 0xf0}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB="a7b74aad84a9d68309edc917d385a7c5959263093c6547c70921cd391b005ef73203a5cab984cd23e62dcb03f191f3b525328e92fad8556bc8405672662be63f6747a6cdb02d4d678ce828c53466ba9d95a6b464336d4f7eadad3878640848d2e5fa8b4739d9fb4ec579bc7a30ec20e05a0b5dcfe211d1755bf6885fb485a0d6a6724374261746f1f794fa01a66be0fc9fd9bdfce28bf15497006d103a6f3254d05f20d450b76d952527fd955f9262edcf3a4901cb156caaf2f5a8a4f9b1d7153beed666324c752a9236f92118a2c8a49ca698a4016b1cfcb4fd38cee0af619e378a49a6f5dd49998413ac94591558f28b9c37f34595e6d88c840373782a17873c7bcc83e3f8b6a84479", @ANYRESOCT], 0x0, 0x13b}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:03:34 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 12:03:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623b0fb914371e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 12:03:34 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) [ 220.151156][ T9063] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 12:03:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x74, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000200029080000000000000000010000000400008008000100000000004db333ab1567a9bcbaf9fe1c67d1bfd48b121b9630d7d4ed59fa45f02d0681b33bf98f70621c39d8c6382d5df71e5e59f774e2a405000000000000003468284e5898eb47409da3fc351c044a9a4e8ee56f8ee40aa9495c4d4496155302ae4a699aafd3b445815f3ae829f21186058a4f21cf19876ca06c91e75d6d1c27812d52905c14ca3f05e85d87afaac261dd64563cccbf925d1451d1e0db72bfc7c973653710a2e85e9d4c94b536a615117b8f342d97ab643cf0a94dd9"], 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) [ 220.190507][ T9063] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 12:03:34 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d5, 0x1, &(0x7f0000000100)=[{&(0x7f0000000200)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001080010000000000100000000000001c034a40200010000100700000000000000000000000c0908", 0x7b}], 0x0, 0x0) 12:03:34 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) [ 220.349815][ T9075] XFS (loop2): SB sanity check failed [ 220.370085][ T9075] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x391/0x480, xfs_sb block 0xffffffffffffffff [ 220.399445][ T9075] XFS (loop2): Unmount and run xfs_repair [ 220.417625][ T9075] XFS (loop2): First 128 bytes of corrupted metadata buffer: 12:03:35 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) [ 220.454541][ T9075] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 220.484214][ T9075] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 220.525473][ T9075] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 12:03:35 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) [ 220.565279][ T9075] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 220.610483][ T9075] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 220.633400][ T9075] 00000050: 1c 00 00 01 08 00 10 00 00 00 00 01 00 00 00 00 ................ [ 220.654668][ T9075] 00000060: 00 00 01 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 220.680915][ T9075] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 00 00 00 00 00 ................ [ 220.705977][ T9075] XFS (loop2): SB validate failed with error -117. [ 220.866245][ T9106] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 220.918350][ T9106] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 221.130074][ T9036] XFS (loop2): SB sanity check failed [ 221.148586][ T9036] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x391/0x480, xfs_sb block 0xffffffffffffffff [ 221.223862][ T9036] XFS (loop2): Unmount and run xfs_repair [ 221.256213][ T9036] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 221.290452][ T9036] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 221.323152][ T9036] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 221.352536][ T9036] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 221.373861][ T9036] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 221.399684][ T9036] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 221.432919][ T9036] 00000050: 1c 00 00 01 08 00 10 00 00 00 00 01 00 00 00 00 ................ 12:03:36 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) 12:03:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) [ 221.467967][ T9036] 00000060: 00 00 01 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... 12:03:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623b0fb914371e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 221.487765][ T9036] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 00 00 00 00 00 ................ [ 221.511206][ T9107] XFS (loop2): SB validate failed with error -117. 12:03:36 executing program 1: bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) [ 221.519551][ T9126] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 221.542411][ T9126] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 12:03:36 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d5, 0x1, &(0x7f0000000100)=[{&(0x7f0000000200)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001080010000000000100000000000001c034a40200010000100700000000000000000000000c0908", 0x7b}], 0x0, 0x0) 12:03:36 executing program 1: bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) 12:03:36 executing program 1: bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) 12:03:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623b0fb914371e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 222.042097][ T9147] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 222.067225][ T9147] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 12:03:36 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) [ 222.134538][ T58] XFS (loop2): SB sanity check failed 12:03:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 12:03:36 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) [ 222.186552][ T58] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x391/0x480, xfs_sb block 0xffffffffffffffff 12:03:36 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) [ 222.216083][ T58] XFS (loop2): Unmount and run xfs_repair [ 222.227910][ T58] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 222.239066][ T58] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 222.252240][ T58] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.265722][ T58] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 222.280052][ T58] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 222.293557][ T58] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 222.308647][ T58] 00000050: 1c 00 00 01 08 00 10 00 00 00 00 01 00 00 00 00 ................ [ 222.328237][ T58] 00000060: 00 00 01 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 222.349692][ T58] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 00 00 00 00 00 ................ [ 222.373887][ T9151] XFS (loop2): SB validate failed with error -117. 12:03:37 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) 12:03:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623b0fb914371e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 12:03:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc080, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) 12:03:37 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) [ 222.805874][ T9189] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 222.813147][ T9193] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.827661][ T9189] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 12:03:37 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) 12:03:37 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="f24d205c7ea3"}, 0x10) 12:03:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc080, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) 12:03:37 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) 12:03:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket(0x10, 0x803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x2, &(0x7f0000000380)=""/110, 0x6e) 12:03:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00') sendfile(r0, r1, 0x0, 0xedc0) 12:03:37 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) 12:03:37 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) 12:03:37 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 12:03:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00') sendfile(r0, r1, 0x0, 0xedc0) 12:03:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000200)={0x4000000}) 12:03:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 223.421973][ T9241] [drm:drm_calc_timestamping_constants] *ERROR* crtc 32: Can't calculate constants, dotclock = 0! [ 223.452271][ C0] ------------[ cut here ]------------ [ 223.461119][ C0] WARNING: CPU: 0 PID: 9241 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x31e/0x3b0 [ 223.477164][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 223.477164][ C0] CPU: 0 PID: 9241 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 223.548675][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 223.586699][ C0] Call Trace: [ 223.586699][ C0] [ 223.586699][ C0] dump_stack+0x188/0x20d [ 223.616705][ C0] ? vkms_vblank_simulate+0x2e0/0x3b0 [ 223.616705][ C0] panic+0x2e3/0x75c [ 223.626611][ C0] ? add_taint.cold+0x16/0x16 [ 223.626611][ C0] ? printk+0xba/0xed [ 223.626611][ C0] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 223.646605][ C0] ? __warn.cold+0x14/0x35 [ 223.646605][ C0] ? __warn+0xd5/0x1c8 [ 223.646605][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 223.666603][ C0] __warn.cold+0x2f/0x35 [ 223.666603][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 223.676590][ C0] report_bug+0x27b/0x2f0 [ 223.676590][ C0] do_error_trap+0x12b/0x220 [ 223.686762][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 223.696565][ C0] do_invalid_op+0x32/0x40 [ 223.696565][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 223.706891][ C0] invalid_op+0x23/0x30 [ 223.706891][ C0] RIP: 0010:vkms_vblank_simulate+0x31e/0x3b0 [ 223.706891][ C0] Code: 85 9e 00 00 00 48 8b 95 48 02 00 00 4c 89 e1 bf 02 00 00 00 48 c7 c6 60 15 92 88 e8 9c b9 ae ff e9 e5 fe ff ff e8 c2 e7 17 fd <0f> 0b e9 88 fd ff ff e8 76 ae 55 fd e9 11 fe ff ff 4c 89 ef e8 69 [ 223.746605][ C0] RSP: 0018:ffffc90000007dd8 EFLAGS: 00010006 [ 223.756578][ C0] RAX: ffff888061aec580 RBX: ffff888027b25830 RCX: ffffffff845b49c3 [ 223.766617][ C0] RDX: 0000000000010000 RSI: ffffffff845b4c3e RDI: 0000000000000007 [ 223.776568][ C0] RBP: 0000000000065994 R08: ffff888061aec580 R09: fffffbfff15128a9 [ 223.786587][ C0] R10: ffffffff8a894547 R11: fffffbfff15128a8 R12: ffff888027b24ce0 [ 223.796752][ C0] R13: 0000000000000000 R14: ffff88802ce29780 R15: ffff88802ce29700 [ 223.812924][ C0] ? vkms_vblank_simulate+0xa3/0x3b0 [ 223.812924][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 223.812924][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 223.812924][ C0] __hrtimer_run_queues+0x1ce/0xed0 [ 223.812924][ C0] ? vkms_disable_vblank+0x20/0x20 [ 223.812924][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 223.812924][ C0] ? hrtimer_init+0x320/0x320 [ 223.812924][ C0] ? ktime_get_update_offsets_now+0x2d6/0x450 [ 223.880241][ C0] hrtimer_interrupt+0x312/0x770 [ 223.886620][ C0] smp_apic_timer_interrupt+0x15b/0x600 [ 223.886620][ C0] apic_timer_interrupt+0xf/0x20 [ 223.906689][ C0] [ 223.906689][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x8c/0xe0 [ 223.916618][ C0] Code: 48 c7 c0 20 c2 94 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 37 48 83 3d db b0 c4 01 00 74 22 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 65 f3 7e f9 65 8b 05 66 0d 32 78 [ 223.956645][ C0] RSP: 0018:ffffc90004687b58 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 223.969239][ C0] RAX: 1ffffffff1329844 RBX: 0000000000000282 RCX: 0000000000000000 [ 223.986855][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: 0000000000000282 [ 223.999280][ C0] RBP: ffff888027b24338 R08: ffff888061aec580 R09: 0000000000000000 [ 224.007411][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 224.028321][ C0] R13: 0000000000000282 R14: ffff888027b24338 R15: ffff888023cd3928 [ 224.028321][ C0] drm_vblank_get+0x149/0x1d0 [ 224.049433][ C0] drm_wait_vblank_ioctl+0x3e3/0x1780 [ 224.066695][ C0] ? drm_dev_exit+0x1b/0x50 [ 224.069186][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 224.076950][ C0] ? lock_downgrade+0x840/0x840 [ 224.089371][ C0] ? find_held_lock+0x2d/0x110 [ 224.089371][ C0] ? __might_fault+0x11f/0x1d0 [ 224.096619][ C0] drm_ioctl_kernel+0x220/0x2f0 [ 224.110710][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 224.120282][ C0] ? drm_setversion+0x8a0/0x8a0 [ 224.129103][ C0] ? __might_fault+0x190/0x1d0 [ 224.136655][ C0] compat_drm_wait_vblank+0xd6/0x190 [ 224.136655][ C0] ? compat_drm_mode_addfb2+0x190/0x190 [ 224.136655][ C0] ? __fget_files+0x32f/0x500 [ 224.159097][ C0] ? compat_drm_mode_addfb2+0x190/0x190 [ 224.166611][ C0] drm_compat_ioctl+0x1e6/0x300 [ 224.166611][ C0] ? compat_drm_setunique+0x10/0x10 [ 224.189751][ C0] __ia32_compat_sys_ioctl+0x23d/0x2b0 [ 224.196611][ C0] do_fast_syscall_32+0x270/0xe90 [ 224.216699][ C0] entry_SYSENTER_compat+0x70/0x7f [ 224.229167][ C0] Kernel Offset: disabled [ 224.229167][ C0] Rebooting in 86400 seconds..