[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. 2020/03/27 01:28:09 fuzzer started 2020/03/27 01:28:11 dialing manager at 10.128.0.26:33655 2020/03/27 01:28:11 syscalls: 3028 2020/03/27 01:28:11 code coverage: enabled 2020/03/27 01:28:11 comparison tracing: enabled 2020/03/27 01:28:11 extra coverage: enabled 2020/03/27 01:28:11 setuid sandbox: enabled 2020/03/27 01:28:11 namespace sandbox: enabled 2020/03/27 01:28:11 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/27 01:28:11 fault injection: enabled 2020/03/27 01:28:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/27 01:28:11 net packet injection: enabled 2020/03/27 01:28:11 net device setup: enabled 2020/03/27 01:28:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/27 01:28:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:29:30 executing program 0: syzkaller login: [ 121.794038][ T7171] IPVS: ftp: loaded support on port[0] = 21 01:29:30 executing program 1: [ 121.943526][ T7171] chnl_net:caif_netlink_parms(): no params data found [ 122.056243][ T7291] IPVS: ftp: loaded support on port[0] = 21 [ 122.069045][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.076566][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.088984][ T7171] device bridge_slave_0 entered promiscuous mode [ 122.123926][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.155128][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.177529][ T7171] device bridge_slave_1 entered promiscuous mode 01:29:31 executing program 2: [ 122.238883][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.277268][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.375070][ T7171] team0: Port device team_slave_0 added [ 122.391367][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 122.411548][ T7171] team0: Port device team_slave_1 added [ 122.457389][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.477984][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.512307][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.543275][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 01:29:31 executing program 3: [ 122.552658][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.580729][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.605160][ T7438] IPVS: ftp: loaded support on port[0] = 21 [ 122.720707][ T7171] device hsr_slave_0 entered promiscuous mode [ 122.749827][ T7171] device hsr_slave_1 entered promiscuous mode [ 122.796877][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.809817][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.817756][ T7291] device bridge_slave_0 entered promiscuous mode 01:29:31 executing program 4: [ 122.860116][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.867196][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.886364][ T7291] device bridge_slave_1 entered promiscuous mode [ 122.905238][ T7478] IPVS: ftp: loaded support on port[0] = 21 [ 123.047097][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 01:29:32 executing program 5: [ 123.134368][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.165982][ T7438] chnl_net:caif_netlink_parms(): no params data found [ 123.223216][ T7291] team0: Port device team_slave_0 added [ 123.259459][ T7291] team0: Port device team_slave_1 added [ 123.266393][ T7615] IPVS: ftp: loaded support on port[0] = 21 [ 123.439684][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.446636][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.473251][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.488676][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.497398][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.524366][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.550049][ T7171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.602806][ T7171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.607459][ T7680] IPVS: ftp: loaded support on port[0] = 21 [ 123.641260][ T7171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.709557][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.716683][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.725814][ T7438] device bridge_slave_0 entered promiscuous mode [ 123.734236][ T7478] chnl_net:caif_netlink_parms(): no params data found [ 123.755710][ T7171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.782450][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.790270][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.798222][ T7438] device bridge_slave_1 entered promiscuous mode [ 123.860812][ T7291] device hsr_slave_0 entered promiscuous mode [ 123.908411][ T7291] device hsr_slave_1 entered promiscuous mode [ 123.968041][ T7291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.975728][ T7291] Cannot create hsr debugfs directory [ 124.039885][ T7438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.058993][ T7438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.139652][ T7438] team0: Port device team_slave_0 added [ 124.174427][ T7438] team0: Port device team_slave_1 added [ 124.189531][ T7615] chnl_net:caif_netlink_parms(): no params data found [ 124.233423][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.240700][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.267052][ T7438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.278559][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.285645][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.294541][ T7478] device bridge_slave_0 entered promiscuous mode [ 124.307667][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.316147][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.325487][ T7478] device bridge_slave_1 entered promiscuous mode [ 124.343962][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.351421][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.377666][ T7438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.521654][ T7438] device hsr_slave_0 entered promiscuous mode [ 124.598224][ T7438] device hsr_slave_1 entered promiscuous mode [ 124.658412][ T7438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.666003][ T7438] Cannot create hsr debugfs directory [ 124.682949][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.696663][ T7680] chnl_net:caif_netlink_parms(): no params data found [ 124.714921][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.722757][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.731528][ T7615] device bridge_slave_0 entered promiscuous mode [ 124.744899][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.773841][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.781088][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.790487][ T7615] device bridge_slave_1 entered promiscuous mode [ 124.819147][ T7478] team0: Port device team_slave_0 added [ 124.865609][ T7478] team0: Port device team_slave_1 added [ 124.875175][ T7291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.904245][ T7291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.963195][ T7615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.976518][ T7615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.010443][ T7291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.078375][ T7615] team0: Port device team_slave_0 added [ 125.092509][ T7291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.143765][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.151085][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.178184][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.194201][ T7615] team0: Port device team_slave_1 added [ 125.207648][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.215649][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.223924][ T7680] device bridge_slave_0 entered promiscuous mode [ 125.235035][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.243372][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.251373][ T7680] device bridge_slave_1 entered promiscuous mode [ 125.259554][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.266490][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.292778][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.390748][ T7478] device hsr_slave_0 entered promiscuous mode [ 125.438271][ T7478] device hsr_slave_1 entered promiscuous mode [ 125.487972][ T7478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.495541][ T7478] Cannot create hsr debugfs directory [ 125.509063][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.518894][ T7615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.525843][ T7615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.553324][ T7615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.580599][ T7680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.602096][ T7615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.609537][ T7615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.636170][ T7615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.675209][ T7680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.693603][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.702707][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.712429][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.771815][ T7615] device hsr_slave_0 entered promiscuous mode [ 125.828595][ T7615] device hsr_slave_1 entered promiscuous mode [ 125.887976][ T7615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.895538][ T7615] Cannot create hsr debugfs directory [ 125.920745][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.930316][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.939586][ T3044] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.946700][ T3044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.964948][ T7438] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.023375][ T7438] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.072582][ T7680] team0: Port device team_slave_0 added [ 126.083454][ T7680] team0: Port device team_slave_1 added [ 126.093841][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.102858][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.112169][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.121385][ T3038] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.128478][ T3038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.136610][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.160066][ T7438] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.204087][ T7438] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.303723][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.312585][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.321659][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.330105][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.338988][ T7680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.345930][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.373883][ T7680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.412523][ T7680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.422405][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.450402][ T7680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.467010][ T7171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.478501][ T7171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.490119][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.499036][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.507284][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.516091][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.524979][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.533774][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.545047][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.634606][ T7478] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.672183][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.729780][ T7680] device hsr_slave_0 entered promiscuous mode [ 126.768406][ T7680] device hsr_slave_1 entered promiscuous mode [ 126.808745][ T7680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.816547][ T7680] Cannot create hsr debugfs directory [ 126.836899][ T7478] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.893517][ T7478] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.951830][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.959477][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.986997][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.004607][ T7478] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.073206][ T7615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.130616][ T7615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.189334][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.197106][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.212835][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.229433][ T7615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.265613][ T7615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.318094][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.328632][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.363680][ T7171] device veth0_vlan entered promiscuous mode [ 127.379469][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.388453][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.397126][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.404262][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.412689][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.421568][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.430178][ T3038] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.437264][ T3038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.445374][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.453787][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.462154][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.477127][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.493960][ T7171] device veth1_vlan entered promiscuous mode [ 127.510346][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.518789][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.526447][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.535254][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.544614][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.554206][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.599813][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.607547][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.616886][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.626315][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.635067][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.643752][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.653773][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.690815][ T7291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.707266][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.716340][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.725892][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.734331][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.743923][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.760587][ T7171] device veth0_macvtap entered promiscuous mode [ 127.790323][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.799751][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.810475][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.819934][ T2781] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.826992][ T2781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.835027][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.844395][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.853247][ T2781] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.860405][ T2781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.886220][ T7171] device veth1_macvtap entered promiscuous mode [ 127.910659][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.919174][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.926973][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.975189][ T7680] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.043039][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.051771][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.063410][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.072370][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.081624][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.090597][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.099189][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.112502][ T7438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.124672][ T7438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.153110][ T7680] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.191761][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.199115][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.206981][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.216700][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.225473][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.233485][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.245706][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.266084][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.275894][ T7680] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.332066][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.340804][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.349977][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.357489][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.367915][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.383421][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.395615][ T7680] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.440658][ T7615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.452170][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.460969][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.505705][ T7478] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.527498][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.535653][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.564882][ T7615] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.604534][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.613884][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.622331][ T2751] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.629577][ T2751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.637266][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.646005][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.654522][ T2751] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.661650][ T2751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.669996][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.677606][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.685409][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.694034][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.702862][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.711642][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.752049][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.762239][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.771051][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.779794][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.787967][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.796109][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.805441][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.813974][ T2781] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.821130][ T2781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.829484][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.838120][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.846424][ T2781] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.853520][ T2781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.870618][ T7291] device veth0_vlan entered promiscuous mode [ 128.923053][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.938319][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.946108][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.955280][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.964594][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 01:29:37 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) [ 128.974312][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.989375][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.002111][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.028494][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.036839][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.057219][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.078382][ T7291] device veth1_vlan entered promiscuous mode [ 129.102672][ T7438] device veth0_vlan entered promiscuous mode [ 129.117360][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 01:29:37 executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./bus\x00') [ 129.125958][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.134204][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.158310][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.166518][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.178474][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.186827][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.195806][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.220739][ T7438] device veth1_vlan entered promiscuous mode [ 129.240034][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 01:29:38 executing program 0: unshare(0x24020400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCGDEV(r0, 0x541d, 0x0) [ 129.288110][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.296187][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.310899][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.322786][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.333062][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.342775][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.358432][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.367069][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 01:29:38 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) [ 129.382182][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.391521][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.400382][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.408832][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.453344][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.483355][ T7680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.496369][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.508422][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.517013][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.526403][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.536307][ T7438] device veth0_macvtap entered promiscuous mode [ 129.547439][ T7291] device veth0_macvtap entered promiscuous mode 01:29:38 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) [ 129.568543][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.576465][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.601266][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:29:38 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) [ 129.625336][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.643971][ T7438] device veth1_macvtap entered promiscuous mode [ 129.660949][ T7291] device veth1_macvtap entered promiscuous mode [ 129.681819][ T7478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.698323][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.705848][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.750708][ T7680] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.769687][ T7615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.790719][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 01:29:38 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) [ 129.802375][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.814485][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.822140][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.845652][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.861543][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.878317][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.903056][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.914378][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.924638][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.935358][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.946433][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.968383][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.977057][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.987375][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.997028][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.012522][ T2703] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.019685][ T2703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.030274][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.040306][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.049760][ T2703] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.056821][ T2703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.065617][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.074792][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.084870][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.098502][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.110988][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.126657][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.135327][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.145627][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.154632][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.169226][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.181394][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.194683][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.205210][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.216131][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.247899][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.256376][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.265886][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.279701][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.288301][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.300539][ T7478] device veth0_vlan entered promiscuous mode [ 130.360373][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.368630][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.386534][ T7478] device veth1_vlan entered promiscuous mode [ 130.442399][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.451072][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.460627][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.469993][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.478809][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.487249][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.496546][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.505700][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.514640][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.523344][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.532879][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.653895][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.664749][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 01:29:39 executing program 1: unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) [ 130.714983][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.728622][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.744110][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.816446][ T7478] device veth0_macvtap entered promiscuous mode [ 130.843214][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.856578][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 01:29:39 executing program 2: unshare(0x24020400) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) [ 130.879278][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.905665][ T7615] device veth0_vlan entered promiscuous mode [ 130.922188][ T7478] device veth1_macvtap entered promiscuous mode [ 130.939326][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.947406][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.972659][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.983459][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.996074][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.026512][ T7680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.039880][ T7615] device veth1_vlan entered promiscuous mode [ 131.071380][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.083377][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.095669][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.106714][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.117107][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.128684][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.145055][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.163566][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.172907][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.182042][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.192022][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.204345][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.215884][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.227097][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.237966][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.248528][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.259331][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.270883][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.286566][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.295498][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.322405][ T7615] device veth0_macvtap entered promiscuous mode [ 131.335049][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.344870][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.354025][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.363273][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.372334][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.385562][ T7615] device veth1_macvtap entered promiscuous mode [ 131.442372][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.452939][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.463559][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.474325][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.485195][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.496206][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.506532][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.517550][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.529992][ T7615] batman_adv: batadv0: Interface activated: batadv_slave_0 01:29:40 executing program 3: mkdir(&(0x7f0000000100)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 131.608446][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.616448][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.632274][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.670333][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.699097][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.717696][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.737703][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.751556][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.762905][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.773241][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.784845][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.796840][ T7615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.807899][ T7680] device veth0_vlan entered promiscuous mode [ 131.820036][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.828403][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.836640][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.846091][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.855284][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.864508][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.881513][ T7680] device veth1_vlan entered promiscuous mode 01:29:40 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$rfkill(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) [ 132.063128][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.074934][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.099281][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.114602][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.133022][ T7680] device veth0_macvtap entered promiscuous mode [ 132.175007][ T7680] device veth1_macvtap entered promiscuous mode [ 132.226293][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.237390][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.249149][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.260438][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.270663][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.281534][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.291870][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.302729][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.312683][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.323157][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.334617][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.344801][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.353768][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.362093][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.371192][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.382823][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.394834][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.405073][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.415811][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.430583][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.441107][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.450999][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.461470][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.471375][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.481831][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.492992][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.507485][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.516975][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:29:41 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:41 executing program 0: unshare(0x24020400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:41 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/223, 0xdf) 01:29:41 executing program 2: unshare(0x24020400) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 01:29:41 executing program 3: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) listxattr(&(0x7f0000000100)='./bus\x00', 0x0, 0x18) 01:29:41 executing program 4: unshare(0x40600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) inotify_add_watch(r3, 0x0, 0x4) 01:29:41 executing program 3: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x728df551}) 01:29:41 executing program 4: unshare(0x24020400) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 01:29:41 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:41 executing program 0: unshare(0x24020400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:41 executing program 1: unshare(0x24020400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080), 0x0, 0x0) 01:29:41 executing program 2: unshare(0x24020400) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 01:29:41 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:41 executing program 0: unshare(0x24020400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001540)="6653070000053c27bc333900000000000000d12f0000000000ae47a825d86800278dcff47d010000805acf4f9a870563b2b62b415bcee00a06dc9d8e99adaf81dcfc6afd983f79c0eb00000000000000000000002af8bdd1a0354a6eb8bc9e5631e9e61a338b630c3bd7663488d7ce8048947befedfd2454b6c94a5a114f2478729e5fb037da172e7424d83f30bafa1e88abe51a03da94bf39d2f3ecb5685da8e5470e7269e86793e7648aa6e5d9bcf36a5ec9ae61ab01382a5cb01757a655f40f21dabcbacf1223a2e7c8b60cd92df06ed42a26e62110df9d37dc0a9d60ee244505cd56d7", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 01:29:41 executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) unshare(0x40600) pivot_root(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./bus\x00') 01:29:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:41 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) [ 133.121624][ T8543] overlayfs: failed to verify upper (3/file0, ino=16391, err=-28) [ 133.134945][ T8547] ptrace attach of "/root/syz-executor.4"[8546] was attempted by "/root/syz-executor.4"[8547] 01:29:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000002680)=[@tclass={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x30}}], 0x2, 0x0) 01:29:42 executing program 4: mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='devpts\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pivot_root(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./bus\x00') 01:29:42 executing program 5: unshare(0x24020400) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x43}) [ 133.157922][ T27] audit: type=1804 audit(1585272581.968:2): pid=8548 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400035934/syzkaller.Hnijbp/3/bus/file0" dev="sda1" ino=15766 res=1 [ 133.211453][ T8543] overlayfs: failed to verify index dir 'upper' xattr [ 133.254023][ T8543] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. 01:29:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:42 executing program 3: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000180)='devtmpfs\x00') 01:29:42 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) 01:29:42 executing program 1: unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 01:29:42 executing program 5: unshare(0x24020400) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x43}) [ 133.403901][ T8567] cgroup: Unknown subsys name 'devtmpfs' 01:29:42 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:42 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001540)="6653070000053c27bc333900000000000000d12f0000000000ae47a825d86800278dcff47d010000805acf4f9a870563b2b62b415bcee00a06dc9d8e99adaf81dcfc6afd983f79c0eb00000000000000000000002af8bdd1a0354a6eb8bc9e5631e9e61a338b630c3bd7663488d7ce8048947befedfd2454b6c94a5a114f2478729e5fb037da172e7424d83f30bafa1e88abe51a03da94bf39d2f3ecb5685da8e5470e7269e86793e7648aa6e5d9bcf36a5ec9ae61ab01382a5cb01757a655f4", 0xc0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 01:29:42 executing program 5: unshare(0x24020400) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:42 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) [ 133.593198][ T8585] ptrace attach of "/root/syz-executor.1"[8583] was attempted by "/root/syz-executor.1"[8585] [ 135.780037][ T7] tipc: TX() has been purged, node left! [ 136.096450][ T8636] IPVS: ftp: loaded support on port[0] = 21 [ 136.185465][ T8636] chnl_net:caif_netlink_parms(): no params data found [ 136.232344][ T8636] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.241208][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.252344][ T8636] device bridge_slave_0 entered promiscuous mode [ 136.264057][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.271760][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.283859][ T8636] device bridge_slave_1 entered promiscuous mode [ 136.308438][ T8636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.320817][ T8636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.346477][ T8636] team0: Port device team_slave_0 added [ 136.413612][ T8636] team0: Port device team_slave_1 added [ 136.432670][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.440882][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.468106][ T8636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.481272][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.488808][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.517125][ T8636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.570004][ T8636] device hsr_slave_0 entered promiscuous mode [ 136.600854][ T8636] device hsr_slave_1 entered promiscuous mode [ 136.647704][ T8636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.655369][ T8636] Cannot create hsr debugfs directory [ 136.779579][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.786751][ T8636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.794562][ T8636] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.801709][ T8636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.844087][ T8636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.858962][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.867262][ T2687] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.876126][ T2687] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.885458][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 136.899041][ T8636] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.911461][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.921945][ T2790] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.929040][ T2790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.001738][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.010067][ T2703] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.017183][ T2703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.040817][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.050884][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.059501][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.072598][ T8636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.085601][ T8636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.096103][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.103833][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.125973][ T8636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.133798][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.142464][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.249758][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.258507][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.280462][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.288784][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.302233][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.310030][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.323251][ T8636] device veth0_vlan entered promiscuous mode [ 137.336296][ T8636] device veth1_vlan entered promiscuous mode [ 137.360123][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.369786][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.378237][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.386695][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.398642][ T8636] device veth0_macvtap entered promiscuous mode [ 137.408536][ T8636] device veth1_macvtap entered promiscuous mode [ 137.484230][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.495552][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.506163][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.517139][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.528222][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.539276][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.549682][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.560745][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.571092][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.582052][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.592416][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.604102][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.615839][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.632474][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.641155][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.650635][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.659433][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.694832][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.706646][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.718469][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.729541][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.739519][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.750048][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.760004][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.770478][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.781019][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.792057][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.801977][ T8636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.812518][ T8636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.823891][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.833337][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.842197][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:29:46 executing program 4: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 01:29:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/194, 0xc2}], 0x1) 01:29:46 executing program 0: unshare(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:46 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="72fef2fb6977000000000000ea941fc84f6655ab623dc55b000000000000000700000000000990000000000000000008f517f80000030000003003000098020000000000000000000080000000000000009802000098"], 0x1) 01:29:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:47 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:47 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) 01:29:47 executing program 0: unshare(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000002680)=[@tclass={{0x14}}, @dontfrag={{0x14, 0x29, 0xe}}], 0x30}}], 0x2, 0x0) 01:29:47 executing program 3: unshare(0x24020400) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 01:29:47 executing program 3: unshare(0x24020400) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:47 executing program 0: unshare(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:47 executing program 1: 01:29:47 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo={0x12}}}}}, 0x0) 01:29:47 executing program 2: 01:29:47 executing program 5: unshare(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:47 executing program 3: unshare(0x24020400) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:47 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:47 executing program 2: 01:29:47 executing program 1: 01:29:47 executing program 4: 01:29:47 executing program 5: unshare(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:47 executing program 1: 01:29:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:47 executing program 1: 01:29:47 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:47 executing program 4: 01:29:47 executing program 2: 01:29:47 executing program 5: unshare(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:47 executing program 1: 01:29:47 executing program 4: 01:29:47 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:47 executing program 2: 01:29:47 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:47 executing program 4: 01:29:47 executing program 1: 01:29:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:47 executing program 0: unshare(0x24020400) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:47 executing program 2: 01:29:48 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:48 executing program 1: 01:29:48 executing program 4: 01:29:48 executing program 2: 01:29:48 executing program 1: 01:29:48 executing program 3: unshare(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:48 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:48 executing program 4: 01:29:48 executing program 2: 01:29:48 executing program 1: 01:29:48 executing program 0: unshare(0x24020400) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/254) 01:29:48 executing program 3: unshare(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:48 executing program 5: unshare(0x24020400) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:48 executing program 4: 01:29:48 executing program 1: 01:29:48 executing program 2: [ 139.473524][ T7] batman_adv: batadv0: Interface deactivated: batadv_slave_0 01:29:48 executing program 1: 01:29:48 executing program 3: unshare(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:48 executing program 4: [ 139.520258][ T7] batman_adv: batadv0: Removing interface: batadv_slave_0 01:29:48 executing program 5: unshare(0x24020400) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:48 executing program 0: unshare(0x24020400) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/254) [ 139.596290][ T7] batman_adv: batadv0: Interface deactivated: batadv_slave_1 01:29:48 executing program 4: 01:29:48 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:48 executing program 2: 01:29:48 executing program 5: unshare(0x24020400) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x43}) 01:29:48 executing program 2: 01:29:48 executing program 1: [ 139.673554][ T7] batman_adv: batadv0: Removing interface: batadv_slave_1 01:29:48 executing program 4: [ 139.748045][ T7] device bridge_slave_1 left promiscuous mode [ 139.769481][ T7] bridge0: port 2(bridge_slave_1) entered disabled state 01:29:48 executing program 1: 01:29:48 executing program 2: 01:29:48 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:48 executing program 4: [ 139.856503][ T7] device bridge_slave_0 left promiscuous mode [ 139.887570][ T7] bridge0: port 1(bridge_slave_0) entered disabled state 01:29:48 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 01:29:48 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 01:29:48 executing program 4: 01:29:48 executing program 2: 01:29:48 executing program 1: 01:29:48 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:48 executing program 4: 01:29:48 executing program 2: 01:29:48 executing program 1: 01:29:48 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 140.043977][ T7] device veth1_macvtap left promiscuous mode [ 140.073705][ T7] device veth0_macvtap left promiscuous mode 01:29:48 executing program 3: unshare(0x24020400) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:48 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 01:29:48 executing program 4: 01:29:49 executing program 2: [ 140.108061][ T7] device veth1_vlan left promiscuous mode [ 140.141986][ T7] device veth0_vlan left promiscuous mode 01:29:49 executing program 1: 01:29:49 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 01:29:49 executing program 3: unshare(0x24020400) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:49 executing program 2: 01:29:49 executing program 4: 01:29:49 executing program 1: 01:29:49 executing program 0: unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 01:29:49 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 01:29:49 executing program 1: 01:29:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) 01:29:49 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 01:29:49 executing program 3: unshare(0x24020400) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:29:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 01:29:49 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 01:29:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d800000018008109e00f80ecdb4cb9140a4465ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a800050040003cc00200001203ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 01:29:49 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, 0x0) 01:29:49 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) [ 140.607526][ C1] hrtimer: interrupt took 62664 ns 01:29:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 01:29:49 executing program 5: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 01:29:49 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, 0x0) 01:29:49 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 01:29:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 01:29:49 executing program 3: unshare(0x24020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, 0x0) 01:29:49 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) [ 140.923164][ T9046] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 01:29:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 01:29:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) [ 141.106241][ T9046] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 141.114075][ T9046] #PF: supervisor instruction fetch in kernel mode [ 141.120591][ T9046] #PF: error_code(0x0010) - not-present page [ 141.126603][ T9046] PGD 91c8d067 P4D 91c8d067 PUD a4d26067 PMD 0 [ 141.132854][ T9046] Oops: 0010 [#1] PREEMPT SMP KASAN [ 141.138051][ T9046] CPU: 0 PID: 9046 Comm: syz-executor.5 Not tainted 5.6.0-rc7-syzkaller #0 [ 141.146664][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.156729][ T9046] RIP: 0010:0x86 [ 141.160286][ T9046] Code: Bad RIP value. [ 141.164345][ T9046] RSP: 0018:ffffc90005557998 EFLAGS: 00010086 [ 141.170437][ T9046] RAX: ffffc900055579c8 RBX: fffffe0000000000 RCX: 0000000000040000 [ 141.178401][ T9046] RDX: ffffc900144bd000 RSI: 000000000001060f RDI: 0000000000010610 [ 141.186371][ T9046] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca [ 141.194337][ T9046] R10: ffff88804ec642c0 R11: 0000000000000002 R12: dffffc0000000000 [ 141.202308][ T9046] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb [ 141.210279][ T9046] FS: 00007f34ee645700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 141.219220][ T9046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.225795][ T9046] CR2: 000000000000005c CR3: 00000000a440a000 CR4: 00000000001426f0 [ 141.233756][ T9046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.241714][ T9046] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.249668][ T9046] Call Trace: [ 141.252964][ T9046] ? handle_external_interrupt_irqoff+0x154/0x280 [ 141.259380][ T9046] ? handle_external_interrupt_irqoff+0x132/0x280 [ 141.265786][ T9046] ? __irqentry_text_start+0x8/0x8 [ 141.270886][ T9046] ? vcpu_enter_guest+0x6c77/0x9290 [ 141.276087][ T9046] ? __kasan_slab_free+0x12e/0x1e0 [ 141.281186][ T9046] ? kfree+0x10a/0x220 [ 141.285238][ T9046] ? tomoyo_path_number_perm+0x525/0x690 [ 141.290864][ T9046] ? security_file_ioctl+0x55/0xb0 [ 141.295985][ T9046] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 141.302052][ T9046] ? __lock_acquire+0xc5a/0x1bc0 [ 141.307002][ T9046] ? mark_lock+0x107/0x1650 [ 141.311506][ T9046] ? lock_acquire+0x154/0x250 [ 141.316171][ T9046] ? rcu_lock_acquire+0x9/0x30 [ 141.320934][ T9046] ? kvm_check_async_pf_completion+0x34e/0x360 [ 141.327080][ T9046] ? vcpu_run+0x3a3/0xd50 [ 141.331404][ T9046] ? kvm_arch_vcpu_ioctl_run+0x419/0x880 [ 141.337032][ T9046] ? kvm_vcpu_ioctl+0x67c/0xa80 [ 141.341871][ T9046] ? kvm_vm_release+0x50/0x50 [ 141.346605][ T9046] ? __se_sys_ioctl+0xf9/0x160 [ 141.351369][ T9046] ? do_syscall_64+0xf3/0x1b0 [ 141.356038][ T9046] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 141.362108][ T9046] Modules linked in: [ 141.365999][ T9046] CR2: 0000000000000086 [ 141.370151][ T9046] ---[ end trace 9470bae292a00295 ]--- [ 141.375620][ T9046] RIP: 0010:0x86 [ 141.379172][ T9046] Code: Bad RIP value. [ 141.383226][ T9046] RSP: 0018:ffffc90005557998 EFLAGS: 00010086 [ 141.389285][ T9046] RAX: ffffc900055579c8 RBX: fffffe0000000000 RCX: 0000000000040000 [ 141.397262][ T9046] RDX: ffffc900144bd000 RSI: 000000000001060f RDI: 0000000000010610 [ 141.405226][ T9046] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca [ 141.413200][ T9046] R10: ffff88804ec642c0 R11: 0000000000000002 R12: dffffc0000000000 [ 141.421179][ T9046] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb [ 141.429137][ T9046] FS: 00007f34ee645700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 141.438048][ T9046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.444627][ T9046] CR2: 000000000000005c CR3: 00000000a440a000 CR4: 00000000001426f0 [ 141.452584][ T9046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.460544][ T9046] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.468515][ T9046] Kernel panic - not syncing: Fatal exception [ 141.475659][ T9046] Kernel Offset: disabled [ 141.479980][ T9046] Rebooting in 86400 seconds..