[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.5' (ECDSA) to the list of known hosts. 2020/06/26 16:53:43 fuzzer started 2020/06/26 16:53:44 dialing manager at 10.128.0.26:45395 2020/06/26 16:53:44 syscalls: 3118 2020/06/26 16:53:44 code coverage: enabled 2020/06/26 16:53:44 comparison tracing: enabled 2020/06/26 16:53:44 extra coverage: enabled 2020/06/26 16:53:44 setuid sandbox: enabled 2020/06/26 16:53:44 namespace sandbox: enabled 2020/06/26 16:53:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/26 16:53:44 fault injection: enabled 2020/06/26 16:53:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/26 16:53:44 net packet injection: enabled 2020/06/26 16:53:44 net device setup: enabled 2020/06/26 16:53:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/26 16:53:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/26 16:53:44 USB emulation: enabled 16:55:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x43, 0x0) syzkaller login: [ 157.262085][ T6795] IPVS: ftp: loaded support on port[0] = 21 16:55:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160555, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) [ 157.438565][ T6795] chnl_net:caif_netlink_parms(): no params data found [ 157.594508][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.602392][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.612587][ T6795] device bridge_slave_0 entered promiscuous mode [ 157.623864][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.632840][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state 16:55:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000020a090100000000000000000000000014000000110001"], 0x88}}, 0x0) [ 157.641502][ T6795] device bridge_slave_1 entered promiscuous mode [ 157.680352][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.682509][ T6922] IPVS: ftp: loaded support on port[0] = 21 [ 157.691849][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.732551][ T6795] team0: Port device team_slave_0 added [ 157.741320][ T6795] team0: Port device team_slave_1 added [ 157.791642][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.807010][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.858253][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.897771][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.904729][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.939109][ T6961] IPVS: ftp: loaded support on port[0] = 21 [ 157.953588][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 16:55:27 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 158.060867][ T6795] device hsr_slave_0 entered promiscuous mode [ 158.127454][ T6795] device hsr_slave_1 entered promiscuous mode 16:55:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) [ 158.424871][ T7002] IPVS: ftp: loaded support on port[0] = 21 [ 158.584382][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 158.635661][ T6961] chnl_net:caif_netlink_parms(): no params data found 16:55:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 158.723534][ T6795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.825088][ T6795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.879760][ T6795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.931123][ T6795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.054424][ T7249] IPVS: ftp: loaded support on port[0] = 21 [ 159.067411][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.074475][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.084399][ T6922] device bridge_slave_0 entered promiscuous mode [ 159.095012][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.102719][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.112424][ T6922] device bridge_slave_1 entered promiscuous mode [ 159.127413][ T7237] IPVS: ftp: loaded support on port[0] = 21 [ 159.235471][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.243324][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.251722][ T6961] device bridge_slave_0 entered promiscuous mode [ 159.265221][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.280916][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 159.306569][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.314834][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.323647][ T6961] device bridge_slave_1 entered promiscuous mode [ 159.332573][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.378604][ T6922] team0: Port device team_slave_0 added [ 159.431291][ T6922] team0: Port device team_slave_1 added [ 159.448114][ T6961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.460087][ T6961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.526110][ T6961] team0: Port device team_slave_0 added [ 159.555738][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.562755][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.591011][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.609698][ T6961] team0: Port device team_slave_1 added [ 159.620221][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.628030][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.635717][ T7002] device bridge_slave_0 entered promiscuous mode [ 159.645338][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.653241][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.661925][ T7002] device bridge_slave_1 entered promiscuous mode [ 159.683506][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.690779][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.718238][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.801090][ T7249] chnl_net:caif_netlink_parms(): no params data found [ 159.846605][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.854501][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.881765][ T6961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.894435][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.901403][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.927336][ T6961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.959662][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.031337][ T6922] device hsr_slave_0 entered promiscuous mode [ 160.067397][ T6922] device hsr_slave_1 entered promiscuous mode [ 160.117273][ T6922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.125130][ T6922] Cannot create hsr debugfs directory [ 160.140995][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.170500][ T7002] team0: Port device team_slave_0 added [ 160.196481][ T7002] team0: Port device team_slave_1 added [ 160.220967][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.228291][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.255769][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.285856][ T7237] chnl_net:caif_netlink_parms(): no params data found [ 160.305653][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.316525][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.343348][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.399423][ T6961] device hsr_slave_0 entered promiscuous mode [ 160.427503][ T6961] device hsr_slave_1 entered promiscuous mode [ 160.477015][ T6961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.484573][ T6961] Cannot create hsr debugfs directory [ 160.535908][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.545190][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.554434][ T7249] device bridge_slave_0 entered promiscuous mode [ 160.575383][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.584845][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.595136][ T7249] device bridge_slave_1 entered promiscuous mode [ 160.680928][ T7002] device hsr_slave_0 entered promiscuous mode [ 160.747329][ T7002] device hsr_slave_1 entered promiscuous mode [ 160.796986][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.804585][ T7002] Cannot create hsr debugfs directory [ 160.817058][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.824106][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.833090][ T7237] device bridge_slave_0 entered promiscuous mode [ 160.863222][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.872857][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.881011][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.889169][ T7237] device bridge_slave_1 entered promiscuous mode [ 160.929628][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.954955][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.991759][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.053379][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.070759][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.080582][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.097720][ T7249] team0: Port device team_slave_0 added [ 161.105296][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.142853][ T7249] team0: Port device team_slave_1 added [ 161.162504][ T7237] team0: Port device team_slave_0 added [ 161.175171][ T7237] team0: Port device team_slave_1 added [ 161.184126][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.194463][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.203224][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.210480][ T3839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.238905][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.245856][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.273638][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.315070][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.336726][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.344503][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.374031][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.388451][ T6922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.450090][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.457168][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.483830][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.497343][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.504279][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.531946][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.570773][ T6922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.629591][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.638476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.648089][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.655127][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.684178][ T6922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.715905][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.750394][ T6922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.859557][ T7249] device hsr_slave_0 entered promiscuous mode [ 161.877442][ T7249] device hsr_slave_1 entered promiscuous mode [ 161.916932][ T7249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.924507][ T7249] Cannot create hsr debugfs directory [ 162.000727][ T7237] device hsr_slave_0 entered promiscuous mode [ 162.057430][ T7237] device hsr_slave_1 entered promiscuous mode [ 162.117019][ T7237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.124581][ T7237] Cannot create hsr debugfs directory [ 162.133218][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.142748][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.152072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.161521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.206317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.215118][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.252405][ T6961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.299503][ T7002] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.349113][ T7002] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.388589][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.401681][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.424041][ T6795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.435931][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.446286][ T6961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.488728][ T7002] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.528432][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.538020][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.573313][ T6961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.631512][ T7002] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.708233][ T6961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.867940][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.875470][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.919225][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.033993][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.044310][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.061439][ T7237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.124441][ T7237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.191777][ T7237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.273564][ T6922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.297629][ T7237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.367748][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.375956][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.405834][ T7249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.451132][ T7249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.521353][ T7249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.579286][ T7249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.634086][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.642564][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.651819][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.661035][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.674643][ T6922] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.687483][ T6795] device veth0_vlan entered promiscuous mode [ 163.750291][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.758768][ T6795] device veth1_vlan entered promiscuous mode [ 163.787322][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.795327][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.805394][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.814362][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.823315][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.830408][ T2475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.838774][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.847680][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.855943][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.863031][ T2475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.886211][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.894255][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.903722][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.913132][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.931702][ T6961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.952400][ T6795] device veth0_macvtap entered promiscuous mode [ 163.970482][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.980857][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.991303][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.000790][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.010108][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.018782][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.027575][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.062104][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.082010][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.092653][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.102094][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.114987][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.124263][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.136280][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.151527][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.160060][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.184528][ T6961] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.192226][ T6795] device veth1_macvtap entered promiscuous mode [ 164.207067][ T6922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.216396][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.225189][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.234246][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.243050][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.250174][ T3839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.258003][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.293152][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.329575][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.338811][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.347760][ T2556] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.354829][ T2556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.364372][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.373919][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.383319][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.392222][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.401335][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.410409][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.419723][ T2556] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.426852][ T2556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.434588][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.444162][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.452819][ T2556] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.459926][ T2556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.483486][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.511647][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.520621][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.529380][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.537154][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.544538][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.554944][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.564026][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.572861][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.582006][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.591904][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.600687][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.609383][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.618435][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.638926][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.649310][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.664843][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.685365][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.694368][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.702336][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.713297][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.722466][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.731144][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.740185][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.749212][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.759340][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.772389][ T7237] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.786926][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.803879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.812053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.823362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.871666][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.880720][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.889967][ T2556] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.897076][ T2556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.905458][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.914606][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.923016][ T2556] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.930136][ T2556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.940540][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.949632][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.959004][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.967774][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.975988][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.984959][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.995792][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.004993][ T2556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.078285][ T7249] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.103338][ T6922] device veth0_vlan entered promiscuous mode [ 165.150046][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.158193][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.165772][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.175126][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.184823][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.194751][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.207582][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.215025][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.223148][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.231512][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.260751][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.364958][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.373720][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.383212][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.400955][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.416430][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.436267][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.456461][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.466877][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.473949][ T3839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.487338][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.495877][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.512314][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.519566][ T3839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.527392][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.535703][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.544147][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.555232][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.562788][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.570301][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.582379][ T6922] device veth1_vlan entered promiscuous mode [ 165.597652][ T7237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.612810][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.621183][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.630897][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.640722][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.670561][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0 16:55:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) dup2(r0, r1) [ 165.733978][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.748787][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.757881][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.766204][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.800206][ T7249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.818256][ T7249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:55:35 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000003010101000000000000000000000000000000000000000000000000002e04e05b055c857036c564e707f091f2b94c38c05668cf431c8f0cc61adfea6c576683329784a0888a0b03a1b252bdce094e516b5e63c73f67c1c5754393364279bc8d6d387ffb83315e9000dd9b45971608a6239dce1cc635d5139ef928e7249da8ec04d3fa494bfd14f4e59fd010f305c571711891b1d4c0a3f316f4db105e2e88134b5500"/177], 0x2c}}, 0x0) [ 165.851927][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.860572][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.879726][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.895860][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.906153][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.915455][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.924767][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.960757][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.980867][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.021374][ T6922] device veth0_macvtap entered promiscuous mode [ 166.039031][ T8065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.056979][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.066343][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.074717][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.114837][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.140541][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.158194][ T6922] device veth1_macvtap entered promiscuous mode [ 166.170732][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.194997][ T7002] device veth0_vlan entered promiscuous mode [ 166.212855][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.225242][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.244431][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.263904][ T7002] device veth1_vlan entered promiscuous mode 16:55:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd}}]}}]}, 0x44}}, 0x0) [ 166.283254][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.301732][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.314521][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.348850][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.367097][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.374934][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.385425][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.394906][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.404295][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.414098][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.425520][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.440193][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.450775][ T6961] device veth0_vlan entered promiscuous mode [ 166.516117][ T6961] device veth1_vlan entered promiscuous mode [ 166.526324][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.542269][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.554589][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_1 16:55:36 executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfe40, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x11, 0x0, 0x40002) [ 166.573353][ T7002] device veth0_macvtap entered promiscuous mode [ 166.589325][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.599781][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.610201][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.620856][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.630835][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.666449][ T7002] device veth1_macvtap entered promiscuous mode 16:55:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @empty}, @in=@multicast1}, 0x2}}, 0x50}, 0x8}, 0x0) [ 166.819685][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.828118][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.836777][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.847469][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.856917][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.873970][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.887278][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.898277][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.909098][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:55:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0xad) r1 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xba) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth1_macvtap\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'ip_vti0\x00'}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0xc045) [ 166.920568][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.936453][ T6961] device veth0_macvtap entered promiscuous mode [ 167.004433][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.013531][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.031104][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.069187][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.081425][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.092641][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.104667][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.117334][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.132509][ T6961] device veth1_macvtap entered promiscuous mode [ 167.215336][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.224821][ T8099] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 167.224922][ T8098] IPVS: stopping master sync thread 8099 ... [ 167.237922][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.264403][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.320916][ T8103] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 167.338122][ T2475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.348045][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 16:55:37 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) [ 167.366143][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.428993][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.459869][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.474542][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.475329][ C1] hrtimer: interrupt took 26250 ns [ 167.493331][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.512723][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 16:55:37 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x200) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0/file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x87a01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000080)='./file0\x00') r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='./file1\x00', r4, &(0x7f0000000140)='./file0/file0\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)={0x60000010}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x280000b, 0x1010, r3, 0x90227000) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) get_thread_area(&(0x7f0000000240)={0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 167.525105][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.544695][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.555564][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.568913][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.587427][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.604401][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.617858][ T7237] device veth0_vlan entered promiscuous mode [ 167.723641][ T7249] device veth0_vlan entered promiscuous mode [ 167.734052][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.755402][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.774219][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.785021][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.832390][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.867176][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.884256][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.895079][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.914437][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.925024][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.939373][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.951120][ T7249] device veth1_vlan entered promiscuous mode [ 167.963557][ T7237] device veth1_vlan entered promiscuous mode [ 167.974510][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.984102][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.995700][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.003921][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.013053][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.249500][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.258076][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.267456][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.276049][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.292807][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.313614][ T7237] device veth0_macvtap entered promiscuous mode [ 168.324947][ T7249] device veth0_macvtap entered promiscuous mode 16:55:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000020a090100000000000000000000000014000000110001"], 0x88}}, 0x0) 16:55:38 executing program 0: perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) [ 168.375364][ T7237] device veth1_macvtap entered promiscuous mode [ 168.382777][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.392413][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.398568][ T7249] device veth1_macvtap entered promiscuous mode [ 168.512902][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.549647][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.560322][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.571341][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.581752][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.593822][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.604092][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.615265][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.632565][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.658968][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.668556][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.676464][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.694404][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.703790][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.712986][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.733179][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.744669][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.755715][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.768181][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.778668][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.789205][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.799530][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.810049][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.820036][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.830562][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.841972][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.859388][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.873522][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.884940][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.896596][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.906412][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.918765][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.929357][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.941440][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.953935][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.963793][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.977713][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.986291][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.999467][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.025809][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.039135][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.050552][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.061372][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.071822][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.082840][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.093101][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.104534][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.114654][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.125334][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.137018][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.157025][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.165733][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.418138][ T2475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.426261][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:55:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000706f164ffffe2a66fa900d4da5da2260c00010006"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x207ffd, 0x0) [ 169.825745][ T3833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.864143][ T8164] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 169.872460][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.892424][ T8164] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 170.151465][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:55:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000004000240007800c00028008000140000000000c0001800800014000000000080008400000003005000500020000000500010006"], 0x6c}}, 0x0) 16:55:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'}) 16:55:39 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f569d8773cb2", @rand_addr, @dev, @multicast2}}}}, 0x0) 16:55:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000020a090100000000000000000000000014000000110001"], 0x88}}, 0x0) 16:55:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000020a090100000000000000000000000014000000110001"], 0x88}}, 0x0) 16:55:40 executing program 3: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061400052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x2, &(0x7f0000000180)='\x00\x00') 16:55:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000030010000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000004000048014000300626f6e645f736c6176655f310000000014000300766c616e3000000000000000000000001400030076657468305f766972745f77696669001400048008000140", @ANYRES64], 0x18c}}, 0x0) [ 170.297103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:55:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@umask={'umask'}}]}) 16:55:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:40 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000020a090100000000000000000000000014000000110001"], 0x88}}, 0x0) [ 170.434936][ T8193] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.457654][ T8048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.472187][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.496744][ T8192] exFAT-fs (loop1): invalid boot record signature [ 170.509598][ T8192] exFAT-fs (loop1): failed to recognize exfat type 16:55:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ptype\x00') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) 16:55:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') 16:55:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:40 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000020a090100000000000000000000000014000000110001"], 0x88}}, 0x0) 16:55:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@umask={'umask'}}]}) 16:55:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x6100, 0x40, 0x40000, 0x7, 0x7ff, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x100, &(0x7f0000000580)) geteuid() sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000811) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x44035) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) getpgid(0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x181602) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x4, 0x5, 0x5b3, 0x20000000005, 0x20000006}) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x2003, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x0, 0x0, 0x200, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000300)}, 0x2c77, 0x0, 0x3, 0x8, 0x2, 0x8000fff, 0xc26}, 0x0, 0xd, 0xffffffffffffffff, 0xb) io_setup(0x1, &(0x7f00000004c0)) socket$inet(0x2, 0x7, 0x0) [ 170.697798][ T2556] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 170.790288][ T8219] exFAT-fs (loop1): invalid boot record signature [ 170.798305][ T8219] exFAT-fs (loop1): failed to recognize exfat type [ 170.966545][ T2556] usb 4-1: Using ep0 maxpacket: 8 [ 171.107494][ T2556] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.119596][ T2556] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.132397][ T2556] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 171.155365][ T2556] usb 4-1: config 1 interface 0 has no altsetting 0 [ 171.340871][ T2556] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 171.361371][ T2556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.373387][ T2556] usb 4-1: Product: syz [ 171.381485][ T2556] usb 4-1: Manufacturer: syz [ 171.386155][ T2556] usb 4-1: SerialNumber: syz [ 171.497379][ T8048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.666895][ C1] ================================================================== [ 171.675357][ C1] BUG: KASAN: slab-out-of-bounds in snd_usb_mixer_notify_id+0x219/0x2a0 [ 171.683658][ C1] Write of size 4 at addr ffff88809f6817e0 by task swapper/1/0 [ 171.691176][ C1] [ 171.693514][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 171.702626][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.712653][ C1] Call Trace: [ 171.715918][ C1] dump_stack+0x18f/0x20d [ 171.720224][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 171.725824][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 171.731444][ C1] print_address_description.constprop.0.cold+0xd3/0x413 [ 171.738476][ C1] ? vprintk_func+0x97/0x1a6 [ 171.743058][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 171.748678][ C1] kasan_report.cold+0x1f/0x37 [ 171.753432][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 171.759038][ C1] snd_usb_mixer_notify_id+0x219/0x2a0 [ 171.764471][ C1] snd_usb_mixer_interrupt+0x416/0x980 [ 171.769918][ C1] ? kcov_remote_softirq_start+0x11/0x90 [ 171.775539][ C1] __usb_hcd_giveback_urb+0x2af/0x4b0 [ 171.780889][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 171.786062][ C1] dummy_timer+0x1246/0x2fe4 [ 171.790668][ C1] ? __lock_acquire+0x2224/0x48b0 [ 171.795690][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 171.800430][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 171.805950][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 171.811923][ C1] call_timer_fn+0x1ac/0x760 [ 171.816505][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 171.821260][ C1] ? msleep_interruptible+0x130/0x130 [ 171.826624][ C1] ? lock_downgrade+0x840/0x840 [ 171.831487][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 171.836670][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 171.842620][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 171.847368][ C1] run_timer_softirq+0x60f/0x15d0 [ 171.852399][ C1] ? add_timer+0x830/0x830 [ 171.856807][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 171.862327][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 171.868298][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 171.874273][ C1] __do_softirq+0x268/0x9ee [ 171.878760][ C1] irq_exit_rcu+0x13c/0x170 [ 171.883240][ C1] sysvec_apic_timer_interrupt+0xef/0x260 [ 171.888952][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 171.894920][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 171.900270][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 74 5f 66 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 64 5f 66 00 fb f4 cc 41 56 41 55 41 54 55 53 e8 73 96 7e f9 e8 9e 66 fd ff 0f 1f [ 171.920110][ C1] RSP: 0018:ffffc90000d3fc70 EFLAGS: 00000293 [ 171.926172][ C1] RAX: ffff8880a95f2340 RBX: 0000000000000000 RCX: 1ffffffff155ba76 [ 171.934123][ C1] RDX: 0000000000000000 RSI: ffffffff87e25348 RDI: ffff8880a95f2bc8 [ 171.942071][ C1] RBP: ffff88821af31864 R08: 0000000000000000 R09: 0000000000000001 [ 171.950038][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88821af31864 [ 171.958005][ C1] R13: 1ffff920001a7f99 R14: ffff88821af31865 R15: 0000000000000001 [ 171.965969][ C1] ? acpi_safe_halt+0x88/0x110 [ 171.970739][ C1] acpi_safe_halt+0x8d/0x110 [ 171.975320][ C1] acpi_idle_do_entry+0xa9/0xe0 [ 171.980151][ C1] acpi_idle_enter+0x437/0xb20 [ 171.984912][ C1] ? acpi_idle_enter_bm+0x2d0/0x2d0 [ 171.990100][ C1] ? kvm_clock_read+0x14/0x30 [ 171.994764][ C1] ? kvm_sched_clock_read+0x5/0x10 [ 171.999851][ C1] ? sched_clock+0x2a/0x40 [ 172.004244][ C1] ? sched_clock_cpu+0x18/0x1b0 [ 172.009083][ C1] ? check_preemption_disabled+0x38/0x220 [ 172.014794][ C1] cpuidle_enter_state+0xdb/0xd50 [ 172.019793][ C1] ? check_preemption_disabled+0x38/0x220 [ 172.025485][ C1] cpuidle_enter+0x4a/0xa0 [ 172.029894][ C1] do_idle+0x42f/0x690 [ 172.034042][ C1] ? arch_cpu_idle_exit+0x70/0x70 [ 172.039047][ C1] cpu_startup_entry+0x14/0x20 [ 172.043788][ C1] start_secondary+0x2f8/0x410 [ 172.048544][ C1] ? set_cpu_sibling_map+0x1ed0/0x1ed0 [ 172.053998][ C1] secondary_startup_64+0xa4/0xb0 [ 172.059006][ C1] [ 172.061314][ C1] Allocated by task 2556: [ 172.065624][ C1] save_stack+0x1b/0x40 [ 172.069758][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 172.075379][ C1] kmem_cache_alloc_trace+0x153/0x7d0 [ 172.080730][ C1] add_single_ctl_with_resume+0x53/0x1d0 [ 172.086342][ C1] snd_usb_mixer_apply_create_quirk+0x17ac/0x2000 [ 172.092908][ C1] snd_usb_create_mixer+0x7de/0x18c0 [ 172.098172][ C1] create_standard_mixer_quirk+0x57/0x70 [ 172.103782][ C1] snd_usb_create_quirk+0x9f/0xd0 [ 172.108786][ C1] create_composite_quirk+0x1d5/0x420 [ 172.114135][ C1] snd_usb_create_quirk+0x9f/0xd0 [ 172.119145][ C1] usb_audio_probe+0x57a/0x2240 [ 172.124058][ C1] usb_probe_interface+0x305/0x7a0 [ 172.129148][ C1] really_probe+0x281/0x6d0 [ 172.133645][ C1] driver_probe_device+0xfe/0x1d0 [ 172.138651][ C1] __device_attach_driver+0x1c2/0x220 [ 172.144162][ C1] bus_for_each_drv+0x162/0x1e0 [ 172.148991][ C1] __device_attach+0x21a/0x360 [ 172.153840][ C1] bus_probe_device+0x1e4/0x290 [ 172.158667][ C1] device_add+0xaf1/0x1900 [ 172.163063][ C1] usb_set_configuration+0xec5/0x1740 [ 172.168410][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 172.173758][ C1] usb_probe_device+0xc6/0x1f0 [ 172.178586][ C1] really_probe+0x281/0x6d0 [ 172.183113][ C1] driver_probe_device+0xfe/0x1d0 [ 172.188114][ C1] __device_attach_driver+0x1c2/0x220 [ 172.193465][ C1] bus_for_each_drv+0x162/0x1e0 [ 172.198294][ C1] __device_attach+0x21a/0x360 [ 172.203031][ C1] bus_probe_device+0x1e4/0x290 [ 172.207858][ C1] device_add+0xaf1/0x1900 [ 172.212250][ C1] usb_new_device.cold+0x753/0x103d [ 172.217428][ C1] hub_event+0x1eca/0x38f0 [ 172.221820][ C1] process_one_work+0x965/0x1690 [ 172.226734][ C1] worker_thread+0x96/0xe20 [ 172.231210][ C1] kthread+0x3b5/0x4a0 [ 172.235255][ C1] ret_from_fork+0x1f/0x30 [ 172.239650][ C1] [ 172.241963][ C1] Freed by task 0: [ 172.245669][ C1] save_stack+0x1b/0x40 [ 172.249805][ C1] __kasan_slab_free+0xf7/0x140 [ 172.254634][ C1] kfree+0x109/0x2b0 [ 172.258521][ C1] sctp_addr_wq_timeout_handler+0x262/0x450 [ 172.264393][ C1] call_timer_fn+0x1ac/0x760 [ 172.268959][ C1] run_timer_softirq+0x60f/0x15d0 [ 172.273961][ C1] __do_softirq+0x268/0x9ee [ 172.278444][ C1] [ 172.280754][ C1] The buggy address belongs to the object at ffff88809f681780 [ 172.280754][ C1] which belongs to the cache kmalloc-64 of size 64 [ 172.294720][ C1] The buggy address is located 32 bytes to the right of [ 172.294720][ C1] 64-byte region [ffff88809f681780, ffff88809f6817c0) [ 172.308312][ C1] The buggy address belongs to the page: [ 172.313930][ C1] page:ffffea00027da040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 172.323011][ C1] flags: 0xfffe0000000200(slab) [ 172.327850][ C1] raw: 00fffe0000000200 ffffea00029b7108 ffffea00027c4d08 ffff8880aa000380 [ 172.336423][ C1] raw: 0000000000000000 ffff88809f681000 0000000100000020 0000000000000000 [ 172.344982][ C1] page dumped because: kasan: bad access detected [ 172.351380][ C1] [ 172.353683][ C1] Memory state around the buggy address: [ 172.359292][ C1] ffff88809f681680: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 172.367329][ C1] ffff88809f681700: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 172.375366][ C1] >ffff88809f681780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 172.383401][ C1] ^ [ 172.390571][ C1] ffff88809f681800: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 172.398616][ C1] ffff88809f681880: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 172.407257][ C1] ================================================================== [ 172.415293][ C1] Disabling lock debugging due to kernel taint [ 172.421432][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 172.428005][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.7.0-rc7-next-20200529-syzkaller #0 [ 172.438470][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.448493][ C1] Call Trace: [ 172.451762][ C1] dump_stack+0x18f/0x20d [ 172.456157][ C1] ? snd_usb_mixer_notify_id+0x180/0x2a0 [ 172.461766][ C1] panic+0x2e3/0x75c [ 172.465636][ C1] ? __warn_printk+0xf3/0xf3 [ 172.470203][ C1] ? trace_hardirqs_off+0x50/0x210 [ 172.475289][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 172.480899][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 172.486507][ C1] end_report+0x4d/0x53 [ 172.490640][ C1] kasan_report.cold+0xd/0x37 [ 172.495295][ C1] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 172.500901][ C1] snd_usb_mixer_notify_id+0x219/0x2a0 [ 172.506352][ C1] snd_usb_mixer_interrupt+0x416/0x980 [ 172.511785][ C1] ? kcov_remote_softirq_start+0x11/0x90 [ 172.517394][ C1] __usb_hcd_giveback_urb+0x2af/0x4b0 [ 172.522753][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 172.528110][ C1] dummy_timer+0x1246/0x2fe4 [ 172.532699][ C1] ? __lock_acquire+0x2224/0x48b0 [ 172.537709][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 172.542450][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 172.547973][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 172.553928][ C1] call_timer_fn+0x1ac/0x760 [ 172.558491][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 172.563226][ C1] ? msleep_interruptible+0x130/0x130 [ 172.568570][ C1] ? lock_downgrade+0x840/0x840 [ 172.573399][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 172.578594][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 172.584549][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 172.589289][ C1] run_timer_softirq+0x60f/0x15d0 [ 172.594297][ C1] ? add_timer+0x830/0x830 [ 172.598689][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 172.604209][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 172.610162][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 172.616116][ C1] __do_softirq+0x268/0x9ee [ 172.620602][ C1] irq_exit_rcu+0x13c/0x170 [ 172.625080][ C1] sysvec_apic_timer_interrupt+0xef/0x260 [ 172.630791][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 172.636746][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 172.642094][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 74 5f 66 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 64 5f 66 00 fb f4 cc 41 56 41 55 41 54 55 53 e8 73 96 7e f9 e8 9e 66 fd ff 0f 1f [ 172.661671][ C1] RSP: 0018:ffffc90000d3fc70 EFLAGS: 00000293 [ 172.667707][ C1] RAX: ffff8880a95f2340 RBX: 0000000000000000 RCX: 1ffffffff155ba76 [ 172.675656][ C1] RDX: 0000000000000000 RSI: ffffffff87e25348 RDI: ffff8880a95f2bc8 [ 172.683601][ C1] RBP: ffff88821af31864 R08: 0000000000000000 R09: 0000000000000001 [ 172.691547][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88821af31864 [ 172.699507][ C1] R13: 1ffff920001a7f99 R14: ffff88821af31865 R15: 0000000000000001 [ 172.707473][ C1] ? acpi_safe_halt+0x88/0x110 [ 172.712212][ C1] acpi_safe_halt+0x8d/0x110 [ 172.716778][ C1] acpi_idle_do_entry+0xa9/0xe0 [ 172.721600][ C1] acpi_idle_enter+0x437/0xb20 [ 172.726349][ C1] ? acpi_idle_enter_bm+0x2d0/0x2d0 [ 172.731520][ C1] ? kvm_clock_read+0x14/0x30 [ 172.736170][ C1] ? kvm_sched_clock_read+0x5/0x10 [ 172.741257][ C1] ? sched_clock+0x2a/0x40 [ 172.745649][ C1] ? sched_clock_cpu+0x18/0x1b0 [ 172.750475][ C1] ? check_preemption_disabled+0x38/0x220 [ 172.756251][ C1] cpuidle_enter_state+0xdb/0xd50 [ 172.761269][ C1] ? check_preemption_disabled+0x38/0x220 [ 172.766963][ C1] cpuidle_enter+0x4a/0xa0 [ 172.771443][ C1] do_idle+0x42f/0x690 [ 172.775578][ C1] ? arch_cpu_idle_exit+0x70/0x70 [ 172.780583][ C1] cpu_startup_entry+0x14/0x20 [ 172.785323][ C1] start_secondary+0x2f8/0x410 [ 172.790059][ C1] ? set_cpu_sibling_map+0x1ed0/0x1ed0 [ 172.795494][ C1] secondary_startup_64+0xa4/0xb0 [ 172.801679][ C1] Kernel Offset: disabled [ 172.805990][ C1] Rebooting in 86400 seconds..