Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. 2020/05/23 06:40:08 fuzzer started 2020/05/23 06:40:08 dialing manager at 10.128.0.26:38661 2020/05/23 06:40:09 syscalls: 3055 2020/05/23 06:40:09 code coverage: enabled 2020/05/23 06:40:09 comparison tracing: enabled 2020/05/23 06:40:09 extra coverage: enabled 2020/05/23 06:40:09 setuid sandbox: enabled 2020/05/23 06:40:09 namespace sandbox: enabled 2020/05/23 06:40:09 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 06:40:09 fault injection: enabled 2020/05/23 06:40:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 06:40:09 net packet injection: enabled 2020/05/23 06:40:09 net device setup: enabled 2020/05/23 06:40:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 06:40:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 06:40:09 USB emulation: enabled 06:42:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000000)) syzkaller login: [ 192.109765][ T6826] IPVS: ftp: loaded support on port[0] = 21 06:42:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[], 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @loopback}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x70bd2c, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 192.284229][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 192.403511][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.429227][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.438087][ T6826] device bridge_slave_0 entered promiscuous mode [ 192.462432][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.479260][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.499697][ T6826] device bridge_slave_1 entered promiscuous mode [ 192.535941][ T6956] IPVS: ftp: loaded support on port[0] = 21 [ 192.562964][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 06:42:20 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x100000008d}, 0x0) r0 = getpid() sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x9, 0xa6, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x7, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) [ 192.592677][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.675068][ T6826] team0: Port device team_slave_0 added [ 192.692897][ T6826] team0: Port device team_slave_1 added [ 192.815245][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.829798][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.862834][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.887319][ T7075] IPVS: ftp: loaded support on port[0] = 21 [ 192.894263][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.902548][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.937211][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.957381][ T6956] chnl_net:caif_netlink_parms(): no params data found 06:42:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x100, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x100}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 193.054298][ T6826] device hsr_slave_0 entered promiscuous mode [ 193.099504][ T6826] device hsr_slave_1 entered promiscuous mode [ 193.316528][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.325169][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.334718][ T6956] device bridge_slave_0 entered promiscuous mode [ 193.346583][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.354367][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.379835][ T6956] device bridge_slave_1 entered promiscuous mode [ 193.424613][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.456111][ T7158] IPVS: ftp: loaded support on port[0] = 21 06:42:21 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 193.482234][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.645292][ T6956] team0: Port device team_slave_0 added [ 193.688651][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 193.723106][ T6956] team0: Port device team_slave_1 added [ 193.865264][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.873315][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.902989][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.953192][ T7301] IPVS: ftp: loaded support on port[0] = 21 [ 193.974833][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 06:42:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 193.983819][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.037898][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.054893][ T6826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.178874][ T6826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.292865][ T6956] device hsr_slave_0 entered promiscuous mode [ 194.329924][ T6956] device hsr_slave_1 entered promiscuous mode [ 194.379224][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.387380][ T6956] Cannot create hsr debugfs directory [ 194.394846][ T6826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.457791][ T6826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.508564][ T7366] IPVS: ftp: loaded support on port[0] = 21 [ 194.516401][ T7158] chnl_net:caif_netlink_parms(): no params data found [ 194.548092][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.555869][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.567674][ T7075] device bridge_slave_0 entered promiscuous mode [ 194.603661][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.612324][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.622158][ T7075] device bridge_slave_1 entered promiscuous mode [ 194.715166][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.755921][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.857727][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.865122][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.874157][ T7158] device bridge_slave_0 entered promiscuous mode [ 194.892302][ T7075] team0: Port device team_slave_0 added [ 194.909439][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.916736][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.925699][ T7158] device bridge_slave_1 entered promiscuous mode [ 194.955266][ T7075] team0: Port device team_slave_1 added [ 195.016327][ T7158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.097641][ T7158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.109190][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.116537][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.144277][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.165627][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 195.213126][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.220679][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.247478][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.374223][ T7075] device hsr_slave_0 entered promiscuous mode [ 195.440386][ T7075] device hsr_slave_1 entered promiscuous mode [ 195.479215][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.486823][ T7075] Cannot create hsr debugfs directory [ 195.502835][ T7158] team0: Port device team_slave_0 added [ 195.518596][ T7158] team0: Port device team_slave_1 added [ 195.538335][ T7366] chnl_net:caif_netlink_parms(): no params data found [ 195.562503][ T6956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.660807][ T6956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.705119][ T6956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.756375][ T6956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.828843][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.835918][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.863929][ T7158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.879584][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.886569][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.914159][ T7158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.987904][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.046405][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.055266][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.065206][ T7301] device bridge_slave_0 entered promiscuous mode [ 196.076521][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.084931][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.094151][ T7301] device bridge_slave_1 entered promiscuous mode [ 196.121467][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.132827][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.174284][ T7158] device hsr_slave_0 entered promiscuous mode [ 196.234191][ T7158] device hsr_slave_1 entered promiscuous mode [ 196.279158][ T7158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.286727][ T7158] Cannot create hsr debugfs directory [ 196.315980][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.328821][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.385419][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.467801][ T7301] team0: Port device team_slave_0 added [ 196.481049][ T7301] team0: Port device team_slave_1 added [ 196.502482][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.511112][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.521562][ T7366] device bridge_slave_0 entered promiscuous mode [ 196.531722][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.538805][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.548555][ T7366] device bridge_slave_1 entered promiscuous mode [ 196.614567][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.625304][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.635722][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.643530][ T3253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.653070][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.662912][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.671864][ T3253] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.679194][ T3253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.686804][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.708019][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.715588][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.742789][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.765865][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.775161][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.806938][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.819911][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.852358][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.867671][ T7366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.877802][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.887349][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.896370][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.906364][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.916009][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.925032][ T7075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.976818][ T7075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.046911][ T7075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.103898][ T7366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.119840][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.129471][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.159551][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.168287][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.184740][ T7075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 197.271834][ T7366] team0: Port device team_slave_0 added [ 197.284526][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.330902][ T7366] team0: Port device team_slave_1 added [ 197.423376][ T7301] device hsr_slave_0 entered promiscuous mode [ 197.469913][ T7301] device hsr_slave_1 entered promiscuous mode [ 197.510263][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.518369][ T7301] Cannot create hsr debugfs directory [ 197.544575][ T7366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.554537][ T7366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.582866][ T7366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.606169][ T7366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.626162][ T7366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.668195][ T7366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.737593][ T7158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.787766][ T7158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.852110][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.861396][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.877729][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.906723][ T7158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.956113][ T7158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.084238][ T7366] device hsr_slave_0 entered promiscuous mode [ 198.149582][ T7366] device hsr_slave_1 entered promiscuous mode [ 198.209495][ T7366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.217718][ T7366] Cannot create hsr debugfs directory [ 198.264259][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.310151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.318038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.384445][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.435011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.443985][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.496974][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.507743][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.518266][ T2480] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.525557][ T2480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.535520][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.545061][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.554031][ T2480] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.561440][ T2480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.588639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.597861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.606605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.616416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.642838][ T6826] device veth0_vlan entered promiscuous mode [ 198.660722][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.668622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.678183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.688002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.697352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.742401][ T6826] device veth1_vlan entered promiscuous mode [ 198.757424][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.766686][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.795703][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.820001][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.830898][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.841675][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.867391][ T6956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.883495][ T6956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.916675][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.929878][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.938785][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.949851][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.962680][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.970897][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.980553][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.004584][ T7301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.057291][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.083625][ T7301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.161530][ T7301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.203216][ T7301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.244986][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.274728][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.284958][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.294108][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.301510][ T3253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.313563][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.323041][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.346243][ T6826] device veth0_macvtap entered promiscuous mode [ 199.364393][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.373061][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.382437][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.391995][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.401626][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.408684][ T3256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.417670][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.425752][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.433831][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.441459][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.451787][ T7366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.515075][ T7366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.580403][ T7158] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.595573][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.606097][ T6826] device veth1_macvtap entered promiscuous mode [ 199.628371][ T7366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.661617][ T7366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.707769][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.720215][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.730846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.762363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.775240][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.786312][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.794313][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.818028][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.827433][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.840069][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.853674][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.863129][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.876256][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.927698][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.938344][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.947499][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.958369][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.966990][ T2480] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.974421][ T2480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.982843][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.992298][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.001493][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.010856][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.019710][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.028190][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.038379][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.047968][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.068860][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.077791][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.087645][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.097291][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.115197][ T7075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.141078][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.151194][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.160444][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.169792][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.178676][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.283159][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.298048][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.308599][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.322183][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.402783][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.425236][ T6956] device veth0_vlan entered promiscuous mode [ 200.475116][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.490103][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 06:42:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000200)) [ 200.517624][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.547190][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:42:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x108, 0x108, 0x108, 0x108, 0x108, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'bond_slave_0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', [], 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x8}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) [ 200.586872][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.596427][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.653442][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.722461][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.736348][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.755772][ T6956] device veth1_vlan entered promiscuous mode [ 200.762581][ T8088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.795195][ T8090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.819334][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 06:42:28 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="dbe996758569"}, 0x14) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40286608, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 200.845785][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.943807][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.955938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.973688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.985724][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.998379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.014657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.029042][ C1] hrtimer: interrupt took 59993 ns [ 201.105859][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.124251][ T7366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.140219][ T6956] device veth0_macvtap entered promiscuous mode [ 201.153750][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.161970][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.196639][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.197375][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.197875][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.198344][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.198704][ T3255] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.198755][ T3255] bridge0: port 1(bridge_slave_0) entered forwarding state 06:42:29 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="dbe996758569"}, 0x14) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40286608, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 201.209488][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.267311][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.278283][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.315501][ T6956] device veth1_macvtap entered promiscuous mode [ 201.345314][ T7366] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.378404][ T7075] device veth0_vlan entered promiscuous mode [ 201.427404][ T7158] device veth0_vlan entered promiscuous mode [ 201.492686][ T7158] device veth1_vlan entered promiscuous mode [ 201.642527][ T7158] device veth0_macvtap entered promiscuous mode [ 201.669575][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.678147][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 06:42:29 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="dbe996758569"}, 0x14) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40286608, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 201.700893][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.730459][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.749447][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.756586][ T8045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.779614][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.800565][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.827490][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.850079][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.870104][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.887710][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.903440][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.927650][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.937786][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.951213][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.963197][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.978288][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 06:42:29 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="dbe996758569"}, 0x14) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40286608, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 201.999439][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.008313][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.018546][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.025738][ T8045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.034573][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.045566][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.076320][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.083753][ T8045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.303219][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.314008][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.327377][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.356343][ T7158] device veth1_macvtap entered promiscuous mode [ 202.364359][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.381645][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.390003][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.399886][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.415679][ T7075] device veth1_vlan entered promiscuous mode 06:42:30 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="dbe996758569"}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 202.451299][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.470623][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.487638][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.521130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.543195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.558012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.568598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.583167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.625564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.636345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.652312][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.675601][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.718017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.745546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.784128][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.812414][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.832874][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.847762][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.868545][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.911128][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.920097][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.928942][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.943057][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.952554][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.961790][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.970898][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.981216][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.990106][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.998620][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.027282][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.042094][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.054105][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.068196][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.083819][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.095307][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.106303][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.117294][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.127539][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.136671][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.145582][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.154997][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.194851][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.202883][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.216545][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.335331][ T7075] device veth0_macvtap entered promiscuous mode [ 203.515679][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.540809][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.548552][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.583250][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.593564][ T7075] device veth1_macvtap entered promiscuous mode [ 203.688359][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.728926][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.751771][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.808247][ T7366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.852030][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.889344][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.916016][ T8127] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 203.956082][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 204.003101][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.037775][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 204.067648][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.083390][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.085065][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.113204][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.126974][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 06:42:32 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[], 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @loopback}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x70bd2c, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 204.183025][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 204.219083][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.246098][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 204.264532][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.288237][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 204.313985][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.342667][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.367891][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.378021][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.393270][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.659456][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.668368][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.717621][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.727301][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.760548][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.768927][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.793626][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.803287][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 06:42:32 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 06:42:32 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="dbe996758569"}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 204.828449][ T7301] device veth0_vlan entered promiscuous mode [ 204.848388][ T7366] device veth0_vlan entered promiscuous mode [ 204.869699][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.878172][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.896390][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.905845][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.937326][ T7366] device veth1_vlan entered promiscuous mode [ 205.006610][ T7366] device veth0_macvtap entered promiscuous mode [ 205.034133][ T7366] device veth1_macvtap entered promiscuous mode [ 205.077858][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.096630][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.117379][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.128958][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.147657][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.166304][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.178010][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.188621][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.201638][ T7366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.213780][ T7301] device veth1_vlan entered promiscuous mode [ 205.226342][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.237143][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.266935][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.282018][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.291605][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.301641][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.310411][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.326303][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.360538][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.377058][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.389374][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 205.417638][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.428669][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 205.440054][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.451365][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 205.462695][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.473440][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 205.485282][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.500849][ T7366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.530401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.539914][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.624956][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.634328][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.647902][ T7301] device veth0_macvtap entered promiscuous mode [ 205.736652][ T3256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.813622][ T7301] device veth1_macvtap entered promiscuous mode [ 205.845829][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.857470][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.873967][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.899094][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.913649][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.924861][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.951640][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.962652][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.989147][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.999992][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.013067][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.026312][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.036499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.051434][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 206.065437][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.076967][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 206.088432][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.100153][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 206.111716][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.122391][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 206.133823][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.144428][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 206.155509][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.167859][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.178357][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.189458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:42:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) 06:42:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) dup3(r3, r2, 0x0) 06:42:34 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\xc6\x94|W>Zm$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xe4U$\r9\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\x9b9\xe0\xa7B\x05\x00%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c\x02im\xc7~\x04\xa9\xa6\xf8I\x00\xa9ROz$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) 06:42:34 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="dbe996758569"}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 06:42:34 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') getdents64(r0, &(0x7f00000001c0)=""/4088, 0xff8) getdents(r0, 0x0, 0x0) 06:42:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50340000000000109022400010000000009043ff4010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) 06:42:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@nls={'nls', 0x3d, 'macroman'}}, {@nls={'nls', 0x3d, 'cp860'}}]}) [ 206.847379][ T8198] hfsplus: unable to change nls mapping [ 206.884079][ T8198] hfsplus: unable to parse mount options [ 206.899344][ T12] usb 6-1: new high-speed USB device number 2 using dummy_hcd 06:42:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) memfd_create(0x0, 0x0) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x1}) ptrace$setregs(0xd, r6, 0x80, &(0x7f0000000100)="59ec484081a3f5cda16d912f5f270bb668ef9f44e842cbabfce2cb321571eaf25ae8ed9490af4e6b038bdcf6583de8db8a55a92a056c404462b7dc834d43c6a1bbad6180f24b3d0aecbb06cbaa652db04f18cb616c94ab71ae8d7dc54b6048119bb6fa5d90e8f3d3080a707ef9412c1d17146298b97d6fc2d9761dfbede821349a215389ffa0551215f932e918e0c56362fee2fa618705dcaef5c2c4eee19d46e8409a65b114a832b60fc11b7e530a751a7984352b26094b124f0a9663491f6fd54d74") ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x20c200a2, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 06:42:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@nls={'nls', 0x3d, 'macroman'}}, {@nls={'nls', 0x3d, 'cp860'}}]}) 06:42:34 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40286608, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 207.076243][ T8209] hfsplus: unable to change nls mapping [ 207.103613][ T8209] hfsplus: unable to parse mount options 06:42:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x4000007]}, 0x5c) 06:42:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf05acb612f691f3bd3508abca1be6eeb89cbfebb37358582bdbb7d553b4e921550000", 0x39}], 0x1}, 0x0) 06:42:35 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 06:42:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) memfd_create(0x0, 0x0) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x1}) ptrace$setregs(0xd, r6, 0x80, &(0x7f0000000100)="59ec484081a3f5cda16d912f5f270bb668ef9f44e842cbabfce2cb321571eaf25ae8ed9490af4e6b038bdcf6583de8db8a55a92a056c404462b7dc834d43c6a1bbad6180f24b3d0aecbb06cbaa652db04f18cb616c94ab71ae8d7dc54b6048119bb6fa5d90e8f3d3080a707ef9412c1d17146298b97d6fc2d9761dfbede821349a215389ffa0551215f932e918e0c56362fee2fa618705dcaef5c2c4eee19d46e8409a65b114a832b60fc11b7e530a751a7984352b26094b124f0a9663491f6fd54d74") ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x20c200a2, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 06:42:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@nls={'nls', 0x3d, 'macroman'}}, {@nls={'nls', 0x3d, 'cp860'}}]}) [ 207.289465][ T12] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 207.298094][ T12] usb 6-1: config 0 has no interface number 0 [ 207.315206][ T12] usb 6-1: config 0 interface 63 altsetting 244 endpoint 0x81 has an invalid bInterval 0, changing to 7 06:42:35 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40286608, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 207.392770][ T12] usb 6-1: config 0 interface 63 altsetting 244 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.457186][ T12] usb 6-1: config 0 interface 63 has no altsetting 0 06:42:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xc0, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0xd}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5ac}}], 0xc6, 0x0) [ 207.502179][ T8226] hfsplus: unable to change nls mapping [ 207.528994][ T12] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.40 [ 207.561941][ T8226] hfsplus: unable to parse mount options [ 207.603541][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.740589][ T12] usb 6-1: config 0 descriptor?? [ 208.291188][ T12] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.63/0003:054C:03D5.0001/input/input5 [ 208.352927][ T12] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input63 [ 208.470892][ T12] usb 6-1: USB disconnect, device number 2 [ 208.520474][ T12] ================================================================== [ 208.529218][ T12] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 208.536429][ T12] Read of size 8 at addr ffff888060360150 by task kworker/0:1/12 [ 208.544156][ T12] [ 208.546599][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 208.556058][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.566131][ T12] Workqueue: usb_hub_wq hub_event [ 208.571162][ T12] Call Trace: [ 208.574597][ T12] dump_stack+0x18f/0x20d [ 208.579051][ T12] ? __mutex_lock+0x1033/0x13c0 [ 208.583913][ T12] ? __mutex_lock+0x1033/0x13c0 [ 208.588781][ T12] print_address_description.constprop.0.cold+0xd3/0x413 [ 208.595910][ T12] ? joydev_disconnect+0x3d/0xb0 [ 208.600864][ T12] ? __input_unregister_device+0x1b0/0x430 [ 208.606692][ T12] ? input_unregister_device+0xb4/0xf0 [ 208.612262][ T12] ? hidinput_disconnect+0x15e/0x3d0 [ 208.617592][ T12] ? hid_disconnect+0x13f/0x1a0 [ 208.622457][ T12] ? vprintk_func+0x97/0x1a6 [ 208.627229][ T12] ? __mutex_lock+0x1033/0x13c0 [ 208.632284][ T12] kasan_report.cold+0x1f/0x37 [ 208.637192][ T12] ? __mutex_lock+0x1033/0x13c0 [ 208.642209][ T12] __mutex_lock+0x1033/0x13c0 [ 208.646892][ T12] ? print_usage_bug+0x240/0x240 [ 208.651973][ T12] ? joydev_cleanup+0x21/0x190 [ 208.656984][ T12] ? trace_hardirqs_off+0x50/0x220 [ 208.662097][ T12] ? mutex_trylock+0x2c0/0x2c0 [ 208.667116][ T12] ? mark_held_locks+0x9f/0xe0 [ 208.671884][ T12] ? kfree+0x1eb/0x2b0 [ 208.676031][ T12] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 208.682025][ T12] ? kfree_const+0x51/0x60 [ 208.686525][ T12] ? dev_attr_show+0x90/0x90 [ 208.691142][ T12] ? joydev_cleanup+0x21/0x190 [ 208.695926][ T12] joydev_cleanup+0x21/0x190 [ 208.700532][ T12] joydev_disconnect+0x45/0xb0 [ 208.705415][ T12] __input_unregister_device+0x1b0/0x430 [ 208.711063][ T12] input_unregister_device+0xb4/0xf0 [ 208.716642][ T12] hidinput_disconnect+0x15e/0x3d0 [ 208.721869][ T12] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 208.727528][ T12] hid_disconnect+0x13f/0x1a0 [ 208.732390][ T12] hid_hw_stop+0x12/0x70 [ 208.736629][ T12] hid_device_remove+0xed/0x240 [ 208.741490][ T12] ? sony_register_touchpad.constprop.0+0x890/0x890 [ 208.748098][ T12] ? hid_compare_device_paths+0xc0/0xc0 [ 208.754074][ T12] device_release_driver_internal+0x231/0x500 [ 208.760352][ T12] bus_remove_device+0x2dc/0x4a0 [ 208.765292][ T12] device_del+0x481/0xd30 [ 208.769722][ T12] ? device_link_add_missing_supplier_links+0x370/0x370 [ 208.776670][ T12] ? mark_held_locks+0x9f/0xe0 [ 208.781430][ T12] ? _raw_spin_unlock_irq+0x1f/0x80 [ 208.787640][ T12] hid_destroy_device+0xe1/0x150 [ 208.792594][ T12] usbhid_disconnect+0x9f/0xe0 [ 208.797373][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 208.802955][ T12] ? __pm_runtime_idle+0xd1/0x320 [ 208.808470][ T12] ? usb_autoresume_device+0x60/0x60 [ 208.814125][ T12] device_release_driver_internal+0x432/0x500 [ 208.820670][ T12] bus_remove_device+0x2dc/0x4a0 [ 208.825629][ T12] device_del+0x481/0xd30 [ 208.830240][ T12] ? device_link_add_missing_supplier_links+0x370/0x370 [ 208.837183][ T12] ? usb_remove_ep_devs+0x3e/0x80 [ 208.842267][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 208.847559][ T12] usb_disable_device+0x211/0x690 [ 208.852606][ T12] usb_disconnect+0x284/0x8d0 [ 208.857509][ T12] hub_event+0x17ca/0x38f0 [ 208.861937][ T12] ? hub_port_debounce+0x260/0x260 [ 208.867349][ T12] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 208.873356][ T12] ? debug_smp_processor_id+0x2f/0x185 [ 208.879015][ T12] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 208.884582][ T12] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 208.890585][ T12] process_one_work+0x965/0x16a0 [ 208.895533][ T12] ? lock_release+0x800/0x800 [ 208.900729][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 208.906116][ T12] ? rwlock_bug.part.0+0x90/0x90 [ 208.911070][ T12] worker_thread+0x96/0xe20 [ 208.915774][ T12] ? process_one_work+0x16a0/0x16a0 [ 208.921325][ T12] kthread+0x3b5/0x4a0 [ 208.926019][ T12] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 208.932043][ T12] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 208.938185][ T12] ret_from_fork+0x24/0x30 [ 208.942714][ T12] [ 208.945201][ T12] Allocated by task 12: [ 208.949567][ T12] save_stack+0x1b/0x40 [ 208.953947][ T12] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 208.959667][ T12] kmem_cache_alloc_trace+0x153/0x7d0 [ 208.965044][ T12] joydev_connect+0x83/0xd2f [ 208.969631][ T12] input_attach_handler+0x194/0x200 [ 208.974854][ T12] input_register_device.cold+0xf5/0x246 [ 208.980480][ T12] hidinput_connect+0x4f8f/0xdb30 [ 208.985576][ T12] hid_connect+0x96b/0xbc0 [ 208.990369][ T12] hid_hw_start+0xa2/0x130 [ 208.994783][ T12] sony_probe+0x214/0x2d0 [ 208.999490][ T12] hid_device_probe+0x2be/0x3f0 [ 209.004340][ T12] really_probe+0x281/0x6d0 [ 209.008927][ T12] driver_probe_device+0xfe/0x1d0 [ 209.013957][ T12] __device_attach_driver+0x1c2/0x220 [ 209.019341][ T12] bus_for_each_drv+0x162/0x1e0 [ 209.025043][ T12] __device_attach+0x21a/0x360 [ 209.029788][ T12] bus_probe_device+0x1e4/0x290 [ 209.034821][ T12] device_add+0xaf1/0x1900 [ 209.039234][ T12] hid_add_device+0x33c/0x9a0 [ 209.043919][ T12] usbhid_probe+0xac8/0xff0 [ 209.048427][ T12] usb_probe_interface+0x305/0x7a0 [ 209.053638][ T12] really_probe+0x281/0x6d0 [ 209.058146][ T12] driver_probe_device+0xfe/0x1d0 [ 209.063156][ T12] __device_attach_driver+0x1c2/0x220 [ 209.068611][ T12] bus_for_each_drv+0x162/0x1e0 [ 209.073480][ T12] __device_attach+0x21a/0x360 [ 209.078316][ T12] bus_probe_device+0x1e4/0x290 [ 209.083173][ T12] device_add+0xaf1/0x1900 [ 209.087576][ T12] usb_set_configuration+0xec5/0x1740 [ 209.092945][ T12] usb_generic_driver_probe+0x9d/0xe0 [ 209.098463][ T12] usb_probe_device+0xc6/0x1f0 [ 209.103478][ T12] really_probe+0x281/0x6d0 [ 209.107969][ T12] driver_probe_device+0xfe/0x1d0 [ 209.113336][ T12] __device_attach_driver+0x1c2/0x220 [ 209.119236][ T12] bus_for_each_drv+0x162/0x1e0 [ 209.124105][ T12] __device_attach+0x21a/0x360 [ 209.129018][ T12] bus_probe_device+0x1e4/0x290 [ 209.133860][ T12] device_add+0xaf1/0x1900 [ 209.138361][ T12] usb_new_device.cold+0x753/0x103d [ 209.144263][ T12] hub_event+0x1eca/0x38f0 [ 209.148663][ T12] process_one_work+0x965/0x16a0 [ 209.153756][ T12] worker_thread+0x96/0xe20 [ 209.158238][ T12] kthread+0x3b5/0x4a0 [ 209.162294][ T12] ret_from_fork+0x24/0x30 [ 209.166791][ T12] [ 209.169112][ T12] Freed by task 12: [ 209.172924][ T12] save_stack+0x1b/0x40 [ 209.177065][ T12] __kasan_slab_free+0xf7/0x140 [ 209.181902][ T12] kfree+0x109/0x2b0 [ 209.186488][ T12] device_release+0x71/0x200 [ 209.191063][ T12] kobject_put+0x1c8/0x2f0 [ 209.195463][ T12] cdev_device_del+0x69/0x80 [ 209.200123][ T12] joydev_disconnect+0x3d/0xb0 [ 209.205142][ T12] __input_unregister_device+0x1b0/0x430 [ 209.210770][ T12] input_unregister_device+0xb4/0xf0 [ 209.216152][ T12] hidinput_disconnect+0x15e/0x3d0 [ 209.221282][ T12] hid_disconnect+0x13f/0x1a0 [ 209.225965][ T12] hid_hw_stop+0x12/0x70 [ 209.230197][ T12] hid_device_remove+0xed/0x240 [ 209.235193][ T12] device_release_driver_internal+0x231/0x500 [ 209.241254][ T12] bus_remove_device+0x2dc/0x4a0 [ 209.246328][ T12] device_del+0x481/0xd30 [ 209.250660][ T12] hid_destroy_device+0xe1/0x150 [ 209.255659][ T12] usbhid_disconnect+0x9f/0xe0 [ 209.260416][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 209.265638][ T12] device_release_driver_internal+0x432/0x500 [ 209.271700][ T12] bus_remove_device+0x2dc/0x4a0 [ 209.276630][ T12] device_del+0x481/0xd30 [ 209.281240][ T12] usb_disable_device+0x211/0x690 [ 209.286358][ T12] usb_disconnect+0x284/0x8d0 [ 209.291038][ T12] hub_event+0x17ca/0x38f0 [ 209.295481][ T12] process_one_work+0x965/0x16a0 [ 209.301674][ T12] worker_thread+0x96/0xe20 [ 209.306206][ T12] kthread+0x3b5/0x4a0 [ 209.310451][ T12] ret_from_fork+0x24/0x30 [ 209.314869][ T12] [ 209.317188][ T12] The buggy address belongs to the object at ffff888060360000 [ 209.317188][ T12] which belongs to the cache kmalloc-8k of size 8192 [ 209.331498][ T12] The buggy address is located 336 bytes inside of [ 209.331498][ T12] 8192-byte region [ffff888060360000, ffff888060362000) [ 209.345027][ T12] The buggy address belongs to the page: [ 209.350764][ T12] page:ffffea000180d800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea000180d800 order:2 compound_mapcount:0 compound_pincount:0 [ 209.366579][ T12] flags: 0xfffe0000010200(slab|head) [ 209.371895][ T12] raw: 00fffe0000010200 ffffea000180b208 ffffea000176a408 ffff8880aa0021c0 [ 209.381368][ T12] raw: 0000000000000000 ffff888060360000 0000000100000001 0000000000000000 [ 209.390037][ T12] page dumped because: kasan: bad access detected [ 209.396515][ T12] [ 209.398841][ T12] Memory state around the buggy address: [ 209.404720][ T12] ffff888060360000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.413009][ T12] ffff888060360080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.421166][ T12] >ffff888060360100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.429296][ T12] ^ [ 209.435972][ T12] ffff888060360180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.444245][ T12] ffff888060360200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.452410][ T12] ================================================================== [ 209.460465][ T12] Disabling lock debugging due to kernel taint [ 209.489128][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 209.495929][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 209.506778][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.516853][ T12] Workqueue: usb_hub_wq hub_event [ 209.521907][ T12] Call Trace: [ 209.525225][ T12] dump_stack+0x18f/0x20d [ 209.529562][ T12] ? __mutex_lock+0xf50/0x13c0 [ 209.534313][ T12] panic+0x2e3/0x75c [ 209.538188][ T12] ? __warn_printk+0xf3/0xf3 [ 209.542977][ T12] ? preempt_schedule_common+0x5e/0xc0 [ 209.548557][ T12] ? __mutex_lock+0x1033/0x13c0 [ 209.553393][ T12] ? __mutex_lock+0x1033/0x13c0 [ 209.558232][ T12] ? preempt_schedule_thunk+0x16/0x18 [ 209.563588][ T12] ? trace_hardirqs_on+0x55/0x230 [ 209.568601][ T12] ? __mutex_lock+0x1033/0x13c0 [ 209.573460][ T12] ? __mutex_lock+0x1033/0x13c0 [ 209.578345][ T12] end_report+0x4d/0x53 [ 209.582511][ T12] kasan_report.cold+0xd/0x37 06:42:37 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000e80)=ANY=[], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) 06:42:37 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40286608, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000f03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 06:42:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) memfd_create(0x0, 0x0) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x1}) ptrace$setregs(0xd, r6, 0x80, &(0x7f0000000100)="59ec484081a3f5cda16d912f5f270bb668ef9f44e842cbabfce2cb321571eaf25ae8ed9490af4e6b038bdcf6583de8db8a55a92a056c404462b7dc834d43c6a1bbad6180f24b3d0aecbb06cbaa652db04f18cb616c94ab71ae8d7dc54b6048119bb6fa5d90e8f3d3080a707ef9412c1d17146298b97d6fc2d9761dfbede821349a215389ffa0551215f932e918e0c56362fee2fa618705dcaef5c2c4eee19d46e8409a65b114a832b60fc11b7e530a751a7984352b26094b124f0a9663491f6fd54d74") ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x20c200a2, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 06:42:37 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 06:42:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@nls={'nls', 0x3d, 'macroman'}}, {@nls={'nls', 0x3d, 'cp860'}}]}) 06:42:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xc0, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0xd}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5ac}}], 0xc6, 0x0) [ 209.587191][ T12] ? __mutex_lock+0x1033/0x13c0 [ 209.592049][ T12] __mutex_lock+0x1033/0x13c0 [ 209.596932][ T12] ? print_usage_bug+0x240/0x240 [ 209.602012][ T12] ? joydev_cleanup+0x21/0x190 [ 209.606871][ T12] ? trace_hardirqs_off+0x50/0x220 [ 209.612102][ T12] ? mutex_trylock+0x2c0/0x2c0 [ 209.616883][ T12] ? mark_held_locks+0x9f/0xe0 [ 209.622014][ T12] ? kfree+0x1eb/0x2b0 [ 209.626183][ T12] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 209.632170][ T12] ? kfree_const+0x51/0x60 [ 209.636730][ T12] ? dev_attr_show+0x90/0x90 [ 209.641420][ T12] ? joydev_cleanup+0x21/0x190 [ 209.646199][ T12] joydev_cleanup+0x21/0x190 [ 209.650888][ T12] joydev_disconnect+0x45/0xb0 [ 209.655662][ T12] __input_unregister_device+0x1b0/0x430 [ 209.661305][ T12] input_unregister_device+0xb4/0xf0 [ 209.666600][ T12] hidinput_disconnect+0x15e/0x3d0 [ 209.671722][ T12] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 209.677284][ T12] hid_disconnect+0x13f/0x1a0 [ 209.682057][ T12] hid_hw_stop+0x12/0x70 [ 209.686316][ T12] hid_device_remove+0xed/0x240 [ 209.691285][ T12] ? sony_register_touchpad.constprop.0+0x890/0x890 [ 209.697872][ T12] ? hid_compare_device_paths+0xc0/0xc0 [ 209.703671][ T12] device_release_driver_internal+0x231/0x500 [ 209.709756][ T12] bus_remove_device+0x2dc/0x4a0 [ 209.714895][ T12] device_del+0x481/0xd30 [ 209.719304][ T12] ? device_link_add_missing_supplier_links+0x370/0x370 [ 209.726238][ T12] ? mark_held_locks+0x9f/0xe0 [ 209.731263][ T12] ? _raw_spin_unlock_irq+0x1f/0x80 [ 209.736454][ T12] hid_destroy_device+0xe1/0x150 [ 209.741373][ T12] usbhid_disconnect+0x9f/0xe0 [ 209.746146][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 209.751342][ T12] ? __pm_runtime_idle+0xd1/0x320 [ 209.756806][ T12] ? usb_autoresume_device+0x60/0x60 [ 209.762194][ T12] device_release_driver_internal+0x432/0x500 [ 209.768267][ T12] bus_remove_device+0x2dc/0x4a0 [ 209.773195][ T12] device_del+0x481/0xd30 [ 209.777676][ T12] ? device_link_add_missing_supplier_links+0x370/0x370 [ 209.784836][ T12] ? usb_remove_ep_devs+0x3e/0x80 [ 209.790038][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 209.795663][ T12] usb_disable_device+0x211/0x690 [ 209.800954][ T12] usb_disconnect+0x284/0x8d0 [ 209.806009][ T12] hub_event+0x17ca/0x38f0 [ 209.810421][ T12] ? hub_port_debounce+0x260/0x260 [ 209.815944][ T12] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 209.821939][ T12] ? debug_smp_processor_id+0x2f/0x185 [ 209.827588][ T12] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 209.833116][ T12] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 209.839250][ T12] process_one_work+0x965/0x16a0 [ 209.844172][ T12] ? lock_release+0x800/0x800 [ 209.848829][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 209.854196][ T12] ? rwlock_bug.part.0+0x90/0x90 [ 209.859409][ T12] worker_thread+0x96/0xe20 [ 209.863910][ T12] ? process_one_work+0x16a0/0x16a0 [ 209.869089][ T12] kthread+0x3b5/0x4a0 [ 209.873441][ T12] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 209.879146][ T12] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 209.884844][ T12] ret_from_fork+0x24/0x30 [ 209.890651][ T12] Kernel Offset: disabled [ 209.895050][ T12] Rebooting in 86400 seconds..