Warning: Permanently added '10.128.0.213' (ECDSA) to the list of known hosts. 2020/05/25 10:02:13 fuzzer started 2020/05/25 10:02:14 dialing manager at 10.128.0.26:38825 2020/05/25 10:02:14 syscalls: 3055 2020/05/25 10:02:14 code coverage: enabled 2020/05/25 10:02:14 comparison tracing: enabled 2020/05/25 10:02:14 extra coverage: enabled 2020/05/25 10:02:14 setuid sandbox: enabled 2020/05/25 10:02:14 namespace sandbox: enabled 2020/05/25 10:02:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/25 10:02:14 fault injection: enabled 2020/05/25 10:02:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/25 10:02:14 net packet injection: enabled 2020/05/25 10:02:14 net device setup: enabled 2020/05/25 10:02:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/25 10:02:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/25 10:02:14 USB emulation: enabled 10:03:57 executing program 0: syzkaller login: [ 165.877599][ T6795] IPVS: ftp: loaded support on port[0] = 21 [ 166.019903][ T6795] chnl_net:caif_netlink_parms(): no params data found 10:03:58 executing program 1: [ 166.117880][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.134774][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.143786][ T6795] device bridge_slave_0 entered promiscuous mode [ 166.179066][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.194856][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.214682][ T6795] device bridge_slave_1 entered promiscuous mode [ 166.273128][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.300948][ T6925] IPVS: ftp: loaded support on port[0] = 21 [ 166.306503][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.359376][ T6795] team0: Port device team_slave_0 added [ 166.380936][ T6795] team0: Port device team_slave_1 added [ 166.438229][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.454608][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 10:03:58 executing program 2: [ 166.483510][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.511841][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.520882][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.549672][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 10:03:58 executing program 3: [ 166.739517][ T6795] device hsr_slave_0 entered promiscuous mode [ 166.775297][ T6795] device hsr_slave_1 entered promiscuous mode [ 166.832050][ T7008] IPVS: ftp: loaded support on port[0] = 21 [ 166.841924][ T6925] chnl_net:caif_netlink_parms(): no params data found [ 167.074118][ T7104] IPVS: ftp: loaded support on port[0] = 21 [ 167.099498][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.108663][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.121800][ T6925] device bridge_slave_0 entered promiscuous mode [ 167.143504][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.161277][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.171339][ T6925] device bridge_slave_1 entered promiscuous mode [ 167.277786][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 10:03:59 executing program 4: [ 167.333632][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.397977][ T7008] chnl_net:caif_netlink_parms(): no params data found [ 167.491691][ T6925] team0: Port device team_slave_0 added [ 167.524570][ T6925] team0: Port device team_slave_1 added [ 167.613018][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.626096][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.652801][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.676972][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.684029][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 10:03:59 executing program 5: [ 167.714264][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.731264][ T6795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.790935][ T6795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.867967][ T6795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.980853][ T6795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.088106][ T6925] device hsr_slave_0 entered promiscuous mode [ 168.145794][ T6925] device hsr_slave_1 entered promiscuous mode [ 168.195415][ T6925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.203307][ T6925] Cannot create hsr debugfs directory [ 168.220779][ T7297] IPVS: ftp: loaded support on port[0] = 21 [ 168.242687][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.250036][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.258672][ T7008] device bridge_slave_0 entered promiscuous mode [ 168.268961][ T7304] IPVS: ftp: loaded support on port[0] = 21 [ 168.287171][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.294241][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.306891][ T7008] device bridge_slave_1 entered promiscuous mode [ 168.330914][ T7104] chnl_net:caif_netlink_parms(): no params data found [ 168.397971][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.439722][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.506552][ T7008] team0: Port device team_slave_0 added [ 168.539274][ T7008] team0: Port device team_slave_1 added [ 168.591748][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.599335][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.626677][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.657070][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.664383][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.673803][ T7104] device bridge_slave_0 entered promiscuous mode [ 168.685417][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.692378][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.720924][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.739376][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.747380][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.756062][ T7104] device bridge_slave_1 entered promiscuous mode [ 168.793799][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.829594][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.934353][ T7104] team0: Port device team_slave_0 added [ 168.998963][ T7008] device hsr_slave_0 entered promiscuous mode [ 169.056390][ T7008] device hsr_slave_1 entered promiscuous mode [ 169.114891][ T7008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.122726][ T7008] Cannot create hsr debugfs directory [ 169.149018][ T7104] team0: Port device team_slave_1 added [ 169.192675][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.199938][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.228914][ T7104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.260038][ T7297] chnl_net:caif_netlink_parms(): no params data found [ 169.291674][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.299144][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.328708][ T7104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.358248][ T6925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.420915][ T6925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.529174][ T6925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.599859][ T7304] chnl_net:caif_netlink_parms(): no params data found [ 169.636373][ T6925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.807499][ T7104] device hsr_slave_0 entered promiscuous mode [ 169.845440][ T7104] device hsr_slave_1 entered promiscuous mode [ 169.895511][ T7104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.903367][ T7104] Cannot create hsr debugfs directory [ 169.990558][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.013516][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.021444][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.030155][ T7297] device bridge_slave_0 entered promiscuous mode [ 170.077233][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.084410][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.094081][ T7297] device bridge_slave_1 entered promiscuous mode [ 170.131136][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.140658][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.170613][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.178512][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.187277][ T7304] device bridge_slave_0 entered promiscuous mode [ 170.208444][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.231732][ T7297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.277216][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.284307][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.292988][ T7304] device bridge_slave_1 entered promiscuous mode [ 170.304408][ T7297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.326771][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.336059][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.344635][ T2486] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.352139][ T2486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.407045][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.456306][ T7297] team0: Port device team_slave_0 added [ 170.469129][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.478436][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.488372][ T2553] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.495525][ T2553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.503343][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.512283][ T7008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.560604][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.578831][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.597338][ T7297] team0: Port device team_slave_1 added [ 170.612737][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.622570][ T7008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.704509][ T7008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.766385][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.779565][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.790609][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.807693][ T7304] team0: Port device team_slave_0 added [ 170.826548][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.833457][ T7008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.877769][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.887866][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.900220][ T7304] team0: Port device team_slave_1 added [ 170.924717][ T6925] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.937257][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.944684][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.972253][ T7297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.987232][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.997346][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.007489][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.016092][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.051228][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.058735][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.086296][ T7297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.102782][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.113734][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.123052][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.132407][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.141659][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.148797][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.163809][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.176528][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.198634][ T7104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.238222][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.247720][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.278681][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.292535][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.300153][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.331101][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.342579][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.354095][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.363640][ T2553] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.370977][ T2553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.405167][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.413954][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.426026][ T7104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.527800][ T7297] device hsr_slave_0 entered promiscuous mode [ 171.555449][ T7297] device hsr_slave_1 entered promiscuous mode [ 171.605250][ T7297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.613102][ T7297] Cannot create hsr debugfs directory [ 171.651278][ T7104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.693593][ T7104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.739781][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.747713][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.756375][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.768280][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.829234][ T7304] device hsr_slave_0 entered promiscuous mode [ 171.885515][ T7304] device hsr_slave_1 entered promiscuous mode [ 171.925137][ T7304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.933178][ T7304] Cannot create hsr debugfs directory [ 171.954071][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.965879][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.973781][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.983537][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.992622][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.002276][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.062579][ T6925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.078376][ T6925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.106684][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.118420][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.227583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.237304][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.248036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.257107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.296862][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.356807][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.372481][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.412450][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.421407][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.449227][ T6795] device veth0_vlan entered promiscuous mode [ 172.460523][ T7008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.489056][ T7297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.557697][ T7297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.578012][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.587559][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.621037][ T7008] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.632490][ T7297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.678847][ T7297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.739465][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.750869][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.767869][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.777117][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.789130][ T2486] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.796596][ T2486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.805627][ T6795] device veth1_vlan entered promiscuous mode [ 172.842578][ T6925] device veth0_vlan entered promiscuous mode [ 172.874313][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.886148][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.894696][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.905912][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.912968][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.922732][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.932075][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.940912][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.980028][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.990656][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.001273][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.010570][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.019908][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.029103][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.041089][ T6925] device veth1_vlan entered promiscuous mode [ 173.057728][ T7304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.113181][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.129813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.140225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.151073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.161148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.171165][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.180213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.189733][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.200535][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.209872][ T7304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.280021][ T7304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.339691][ T7304] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.414121][ T7008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.429957][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.446009][ T6795] device veth0_macvtap entered promiscuous mode [ 173.473040][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.481768][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.495284][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.515463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.523609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.554926][ T7104] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.570601][ T6795] device veth1_macvtap entered promiscuous mode [ 173.598369][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.607414][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.618193][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.640686][ T6925] device veth0_macvtap entered promiscuous mode [ 173.653078][ T6925] device veth1_macvtap entered promiscuous mode [ 173.692110][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.700790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.711273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.721408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.730697][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.737987][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.746791][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.756138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.765748][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.772822][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.781363][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.809386][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.830488][ T7297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.837883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.851189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.859117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.867393][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.877174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.885985][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.900155][ T7008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.916836][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.931735][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.943554][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.966998][ T7297] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.980862][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.992304][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.002924][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.017686][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.030128][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.040591][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.051228][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.061064][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.072827][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.095576][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.142127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.151806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.162974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.172865][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.181959][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.189387][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.199328][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.208408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.217080][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.224238][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.232467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.241931][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.253387][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.266633][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.296590][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.306955][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.316356][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.325782][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.334211][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.371062][ T7008] device veth0_vlan entered promiscuous mode [ 174.420691][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.430045][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.438933][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.449068][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.458634][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.468703][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.478797][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.490713][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.500195][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.510554][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.519799][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.584061][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.603704][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.663276][ T7008] device veth1_vlan entered promiscuous mode 10:04:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0xa4) [ 174.892020][ T7104] 8021q: adding VLAN 0 to HW filter on device batadv0 10:04:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}}) [ 174.939695][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.951265][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.995779][ T8054] FAT-fs (loop0): bogus number of FAT sectors [ 174.995795][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.002900][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.046062][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.051996][ T8054] FAT-fs (loop0): Can't find a valid FAT filesystem [ 175.053643][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.104795][ T28] audit: type=1804 audit(1590401047.216:2): pid=8059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir332177065/syzkaller.7fqZQ7/1/file0/file0" dev="sda1" ino=15738 res=1 10:04:07 executing program 0: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) exit(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000140)={0x3}, 0x0, 0x0, &(0x7f00000001c0)={0x1, 0x10, 0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 175.185654][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.189845][ T28] audit: type=1804 audit(1590401047.256:3): pid=8059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir332177065/syzkaller.7fqZQ7/1/file0/file0" dev="sda1" ino=15738 res=1 [ 175.216620][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.241593][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.251800][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.265333][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.307289][ C0] hrtimer: interrupt took 28988 ns [ 175.339782][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0 10:04:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) [ 175.423083][ T7008] device veth0_macvtap entered promiscuous mode [ 175.496611][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.510182][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.527391][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.542834][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.567141][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.590807][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.628841][ T7008] device veth1_macvtap entered promiscuous mode [ 175.677035][ T7304] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.726761][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.751706][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.772688][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 10:04:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x4, 0x66}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 175.804392][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:04:08 executing program 0: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) exit(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000140)={0x3}, 0x0, 0x0, &(0x7f00000001c0)={0x1, 0x10, 0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 175.924843][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.948097][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.960057][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.967278][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.979641][ T8078] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 175.999139][ T7297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.018753][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 10:04:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffff) ioctl$BLKTRACESETUP(r0, 0x1261, 0x0) [ 176.063944][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.141307][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.156188][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.170003][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_0 10:04:08 executing program 1: r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) accept(r0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 176.190864][ T7104] device veth0_vlan entered promiscuous mode [ 176.212788][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.230576][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.244289][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.262341][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.292379][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.322036][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.347925][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.364608][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.382926][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.405302][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.444425][ T7104] device veth1_vlan entered promiscuous mode [ 176.467416][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.477204][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.494587][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.504819][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.528790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.544619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.553957][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.561167][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.626927][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.646735][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.760339][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.769628][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.780313][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.790463][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.800679][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.885329][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.894385][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.904246][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.914518][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.944418][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 10:04:09 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) chdir(&(0x7f0000000440)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) [ 177.009513][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.037862][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.085874][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.094539][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.139003][ T7104] device veth0_macvtap entered promiscuous mode [ 177.162550][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.173398][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.184092][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.202472][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.212046][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.235091][ T7297] device veth0_vlan entered promiscuous mode [ 177.265803][ T7104] device veth1_macvtap entered promiscuous mode [ 177.283364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.334311][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.358137][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.378222][ T7297] device veth1_vlan entered promiscuous mode [ 177.406811][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.427262][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.438112][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.463008][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.474773][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.487350][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.502168][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.513948][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.537300][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.551723][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.571541][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.588955][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.599967][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.612579][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.622490][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.634251][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.647700][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.666197][ T7297] device veth0_macvtap entered promiscuous mode [ 177.674000][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.686245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.696834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.706185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.731681][ T7297] device veth1_macvtap entered promiscuous mode [ 177.740951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.750255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.912794][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.923891][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:04:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) [ 177.954119][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.975898][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.991121][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.002546][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.014697][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.027185][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.040784][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.062409][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.076741][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.097465][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.150880][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.234255][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.246322][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.257665][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.269608][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.280480][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.292676][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.303261][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.314412][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.327333][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.347234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.358072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.369660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.379148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.399280][ T7304] device veth0_vlan entered promiscuous mode [ 178.410441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.421060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.451386][ T7304] device veth1_vlan entered promiscuous mode 10:04:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x7, {0x2}}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xd8, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x611ed, 0x4b000}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x3}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3ff}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1000}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}, @IFLA_PHYS_PORT_ID={0xb, 0x22, "b63fe6e5b308eb"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xb923}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "4b563a4dd8b67a96bb"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x404c010}, 0x0) [ 178.688910][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.706763][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.719527][ T7304] device veth0_macvtap entered promiscuous mode [ 178.740806][ T7304] device veth1_macvtap entered promiscuous mode [ 178.828593][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.848133][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.862058][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.879858][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.892708][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.913061][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.931143][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.943376][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.958029][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.971377][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.986561][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.032297][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.048403][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.059910][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.072526][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.087550][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.105082][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.115423][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.129916][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.139933][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.152258][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.162462][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.172963][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.183307][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.194427][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.206489][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.271214][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.280278][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:04:11 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x4, 0x66, 0x0, 0xf}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 10:04:11 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601bfc97004d8880fe800001000000000000000000000600ff02000000000000000000000000000101004e20004590"], 0x0) 10:04:11 executing program 1: r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) accept(r0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 10:04:11 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x7, {0x2}}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xd8, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x611ed, 0x4b000}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x3}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3ff}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1000}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}, @IFLA_PHYS_PORT_ID={0xb, 0x22, "b63fe6e5b308eb"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xb923}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "4b563a4dd8b67a96bb"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x404c010}, 0x0) 10:04:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) [ 179.570047][ T8153] input: syz1 as /devices/virtual/input/input5 10:04:11 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x10000}]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000002340)=""/203) 10:04:11 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601bfc97004d8880fe800001000000000000000000000600ff02000000000000000000000000000101004e20004590"], 0x0) [ 179.709949][ T8145] ================================================================== [ 179.718265][ T8145] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 179.725469][ T8145] Read of size 8 at addr ffff8880a7206158 by task syz-executor.2/8145 [ 179.733611][ T8145] [ 179.735949][ T8145] CPU: 1 PID: 8145 Comm: syz-executor.2 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 179.745740][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.760228][ T8145] Call Trace: [ 179.763556][ T8145] dump_stack+0x18f/0x20d [ 179.767928][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 179.773068][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 179.777935][ T8145] print_address_description.constprop.0.cold+0xd3/0x413 [ 179.784967][ T8145] ? cdev_device_del+0x69/0x80 [ 179.789739][ T8145] ? evdev_disconnect+0x3d/0xb0 [ 179.794605][ T8145] ? __input_unregister_device+0x1b0/0x430 [ 179.800419][ T8145] ? input_unregister_device+0xb4/0xf0 [ 179.805886][ T8145] ? uinput_destroy_device+0x1e2/0x240 [ 179.811349][ T8145] ? vprintk_func+0x97/0x1a6 [ 179.815948][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 179.820812][ T8145] kasan_report.cold+0x1f/0x37 [ 179.825582][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 179.830438][ T8145] __mutex_lock+0x1033/0x13c0 [ 179.835120][ T8145] ? evdev_cleanup+0x21/0x190 [ 179.839810][ T8145] ? print_usage_bug+0x240/0x240 [ 179.844758][ T8145] ? trace_hardirqs_off+0x50/0x220 [ 179.849918][ T8145] ? mutex_trylock+0x2c0/0x2c0 [ 179.854692][ T8145] ? mark_held_locks+0x9f/0xe0 [ 179.859463][ T8145] ? kfree+0x1eb/0x2b0 [ 179.863539][ T8145] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 179.869529][ T8145] ? kfree_const+0x51/0x60 [ 179.874009][ T8145] ? evdev_cleanup+0x21/0x190 [ 179.878694][ T8145] evdev_cleanup+0x21/0x190 [ 179.883209][ T8145] evdev_disconnect+0x45/0xb0 [ 179.887895][ T8145] __input_unregister_device+0x1b0/0x430 [ 179.893531][ T8145] input_unregister_device+0xb4/0xf0 [ 179.898828][ T8145] uinput_destroy_device+0x1e2/0x240 [ 179.904148][ T8145] ? uinput_destroy_device+0x240/0x240 [ 179.909609][ T8145] uinput_release+0x37/0x50 [ 179.914112][ T8145] __fput+0x33e/0x880 [ 179.918102][ T8145] task_work_run+0xf4/0x1b0 [ 179.922613][ T8145] exit_to_usermode_loop+0x2fa/0x360 [ 179.927921][ T8145] do_syscall_64+0x6b1/0x7d0 [ 179.932526][ T8145] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 179.938428][ T8145] RIP: 0033:0x416621 [ 179.942336][ T8145] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 179.962732][ T8145] RSP: 002b:00007ffcd7817890 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 179.971154][ T8145] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416621 [ 179.979332][ T8145] RDX: 0000000000000000 RSI: 00000000000000d0 RDI: 0000000000000004 [ 179.987688][ T8145] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 179.996009][ T8145] R10: 00007ffcd7817980 R11: 0000000000000293 R12: 000000000078c900 [ 180.004074][ T8145] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 180.015762][ T8145] [ 180.018264][ T8145] Allocated by task 8153: [ 180.022796][ T8145] save_stack+0x1b/0x40 [ 180.027514][ T8145] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 180.033161][ T8145] kmem_cache_alloc_trace+0x153/0x7d0 [ 180.038893][ T8145] evdev_connect+0x80/0x4d0 [ 180.043422][ T8145] input_attach_handler+0x194/0x200 [ 180.049498][ T8145] input_register_device.cold+0xf5/0x246 [ 180.055142][ T8145] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 180.061133][ T8145] ksys_ioctl+0x11a/0x180 [ 180.065558][ T8145] __x64_sys_ioctl+0x6f/0xb0 [ 180.070158][ T8145] do_syscall_64+0xf6/0x7d0 [ 180.074765][ T8145] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 180.081007][ T8145] [ 180.083443][ T8145] Freed by task 8145: [ 180.090828][ T8145] save_stack+0x1b/0x40 [ 180.094994][ T8145] __kasan_slab_free+0xf7/0x140 [ 180.099857][ T8145] kfree+0x109/0x2b0 [ 180.103769][ T8145] device_release+0x71/0x200 [ 180.108551][ T8145] kobject_put+0x1c8/0x2f0 [ 180.112980][ T8145] cdev_device_del+0x69/0x80 [ 180.117778][ T8145] evdev_disconnect+0x3d/0xb0 [ 180.122494][ T8145] __input_unregister_device+0x1b0/0x430 [ 180.128220][ T8145] input_unregister_device+0xb4/0xf0 [ 180.133521][ T8145] uinput_destroy_device+0x1e2/0x240 [ 180.138847][ T8145] uinput_release+0x37/0x50 [ 180.143360][ T8145] __fput+0x33e/0x880 [ 180.147351][ T8145] task_work_run+0xf4/0x1b0 [ 180.151950][ T8145] exit_to_usermode_loop+0x2fa/0x360 [ 180.157243][ T8145] do_syscall_64+0x6b1/0x7d0 [ 180.161876][ T8145] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 180.167765][ T8145] [ 180.170104][ T8145] The buggy address belongs to the object at ffff8880a7206000 [ 180.170104][ T8145] which belongs to the cache kmalloc-2k of size 2048 [ 180.184278][ T8145] The buggy address is located 344 bytes inside of [ 180.184278][ T8145] 2048-byte region [ffff8880a7206000, ffff8880a7206800) [ 180.197638][ T8145] The buggy address belongs to the page: [ 180.203280][ T8145] page:ffffea00029c8180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 180.212389][ T8145] flags: 0xfffe0000000200(slab) [ 180.217345][ T8145] raw: 00fffe0000000200 ffffea0002223fc8 ffffea00028c9648 ffff8880aa000e00 [ 180.226027][ T8145] raw: 0000000000000000 ffff8880a7206000 0000000100000001 0000000000000000 [ 180.234700][ T8145] page dumped because: kasan: bad access detected [ 180.241122][ T8145] [ 180.243450][ T8145] Memory state around the buggy address: [ 180.249088][ T8145] ffff8880a7206000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.257503][ T8145] ffff8880a7206080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.265574][ T8145] >ffff8880a7206100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.275591][ T8145] ^ [ 180.282530][ T8145] ffff8880a7206180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.290624][ T8145] ffff8880a7206200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.298687][ T8145] ================================================================== [ 180.306761][ T8145] Disabling lock debugging due to kernel taint 10:04:12 executing program 1: clone(0x83ea1900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:04:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001010000000000000002000100f8beffff0000000200010000030005000000000002"], 0x60}}, 0x0) 10:04:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x7, {0x2}}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xd8, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x611ed, 0x4b000}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x3}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3ff}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1000}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}, @IFLA_PHYS_PORT_ID={0xb, 0x22, "b63fe6e5b308eb"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xb923}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "4b563a4dd8b67a96bb"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x404c010}, 0x0) 10:04:12 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0}, 0xa0) fallocate(r0, 0x3, 0x0, 0x4) [ 180.449572][ T8145] Kernel panic - not syncing: panic_on_warn set ... [ 180.456211][ T8145] CPU: 1 PID: 8145 Comm: syz-executor.2 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 180.467422][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.477494][ T8145] Call Trace: [ 180.481318][ T8145] dump_stack+0x18f/0x20d [ 180.485744][ T8145] ? __mutex_lock+0xf50/0x13c0 [ 180.491031][ T8145] panic+0x2e3/0x75c [ 180.494931][ T8145] ? __warn_printk+0xf3/0xf3 [ 180.499526][ T8145] ? preempt_schedule_common+0x5e/0xc0 [ 180.504985][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 180.509836][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 180.514678][ T8145] ? preempt_schedule_thunk+0x16/0x18 [ 180.520148][ T8145] ? trace_hardirqs_on+0x55/0x230 [ 180.525154][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 180.529979][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 180.534819][ T8145] end_report+0x4d/0x53 [ 180.538971][ T8145] kasan_report.cold+0xd/0x37 [ 180.543627][ T8145] ? __mutex_lock+0x1033/0x13c0 [ 180.548464][ T8145] __mutex_lock+0x1033/0x13c0 [ 180.553121][ T8145] ? evdev_cleanup+0x21/0x190 [ 180.557778][ T8145] ? print_usage_bug+0x240/0x240 [ 180.562708][ T8145] ? trace_hardirqs_off+0x50/0x220 [ 180.567795][ T8145] ? mutex_trylock+0x2c0/0x2c0 [ 180.572556][ T8145] ? mark_held_locks+0x9f/0xe0 [ 180.577307][ T8145] ? kfree+0x1eb/0x2b0 [ 180.581369][ T8145] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 180.587424][ T8145] ? kfree_const+0x51/0x60 [ 180.592003][ T8145] ? evdev_cleanup+0x21/0x190 [ 180.596660][ T8145] evdev_cleanup+0x21/0x190 [ 180.601141][ T8145] evdev_disconnect+0x45/0xb0 [ 180.605796][ T8145] __input_unregister_device+0x1b0/0x430 [ 180.611426][ T8145] input_unregister_device+0xb4/0xf0 [ 180.616702][ T8145] uinput_destroy_device+0x1e2/0x240 [ 180.621975][ T8145] ? uinput_destroy_device+0x240/0x240 [ 180.627407][ T8145] uinput_release+0x37/0x50 [ 180.631898][ T8145] __fput+0x33e/0x880 [ 180.636392][ T8145] task_work_run+0xf4/0x1b0 [ 180.640888][ T8145] exit_to_usermode_loop+0x2fa/0x360 [ 180.646189][ T8145] do_syscall_64+0x6b1/0x7d0 [ 180.650804][ T8145] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 180.656670][ T8145] RIP: 0033:0x416621 [ 180.660564][ T8145] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 180.680156][ T8145] RSP: 002b:00007ffcd7817890 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 180.688591][ T8145] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416621 [ 180.696541][ T8145] RDX: 0000000000000000 RSI: 00000000000000d0 RDI: 0000000000000004 [ 180.704492][ T8145] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 180.712453][ T8145] R10: 00007ffcd7817980 R11: 0000000000000293 R12: 000000000078c900 [ 180.720419][ T8145] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 180.729688][ T8145] Kernel Offset: disabled [ 180.734359][ T8145] Rebooting in 86400 seconds..