[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2020/05/23 04:15:51 fuzzer started 2020/05/23 04:15:51 dialing manager at 10.128.0.26:38661 2020/05/23 04:15:51 syscalls: 3055 2020/05/23 04:15:51 code coverage: enabled 2020/05/23 04:15:51 comparison tracing: enabled 2020/05/23 04:15:51 extra coverage: enabled 2020/05/23 04:15:51 setuid sandbox: enabled 2020/05/23 04:15:51 namespace sandbox: enabled 2020/05/23 04:15:51 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 04:15:51 fault injection: enabled 2020/05/23 04:15:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 04:15:51 net packet injection: enabled 2020/05/23 04:15:51 net device setup: enabled 2020/05/23 04:15:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 04:15:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 04:15:51 USB emulation: enabled 04:18:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syzkaller login: [ 212.677281][ T6867] IPVS: ftp: loaded support on port[0] = 21 04:18:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) [ 212.910811][ T6867] chnl_net:caif_netlink_parms(): no params data found 04:18:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4030ae7b, &(0x7f0000000000)) [ 213.102205][ T6987] IPVS: ftp: loaded support on port[0] = 21 [ 213.113561][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.130401][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.144241][ T6867] device bridge_slave_0 entered promiscuous mode [ 213.175180][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.182687][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.194129][ T6867] device bridge_slave_1 entered promiscuous mode [ 213.266135][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.295510][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.357560][ T6867] team0: Port device team_slave_0 added [ 213.370112][ T6867] team0: Port device team_slave_1 added 04:18:21 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000040)=0x18) [ 213.460083][ T7032] IPVS: ftp: loaded support on port[0] = 21 [ 213.535011][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.542520][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.598760][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.653196][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.660541][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.689633][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.707836][ T6987] chnl_net:caif_netlink_parms(): no params data found [ 213.725692][ T7120] IPVS: ftp: loaded support on port[0] = 21 04:18:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 213.851472][ T6867] device hsr_slave_0 entered promiscuous mode [ 213.928451][ T6867] device hsr_slave_1 entered promiscuous mode [ 214.121932][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.139599][ T7194] IPVS: ftp: loaded support on port[0] = 21 [ 214.148369][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.156997][ T6987] device bridge_slave_0 entered promiscuous mode [ 214.181162][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.197602][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.209688][ T6987] device bridge_slave_1 entered promiscuous mode 04:18:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000240)={0x0, 0x0, 0x4, "2f46d8fd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 214.440778][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.476438][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 214.506597][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.539812][ T7326] IPVS: ftp: loaded support on port[0] = 21 [ 214.593089][ T6987] team0: Port device team_slave_0 added [ 214.604649][ T6987] team0: Port device team_slave_1 added [ 214.709161][ T7120] chnl_net:caif_netlink_parms(): no params data found [ 214.794147][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.801379][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.830601][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.889848][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.896831][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.924892][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.973969][ T7194] chnl_net:caif_netlink_parms(): no params data found [ 214.992379][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.000199][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.008505][ T7032] device bridge_slave_0 entered promiscuous mode [ 215.020593][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.027855][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.035910][ T7032] device bridge_slave_1 entered promiscuous mode [ 215.044258][ T6867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.139934][ T6867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.179543][ T6867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.302345][ T6987] device hsr_slave_0 entered promiscuous mode [ 215.347730][ T6987] device hsr_slave_1 entered promiscuous mode [ 215.387480][ T6987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.395303][ T6987] Cannot create hsr debugfs directory [ 215.402178][ T6867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.456890][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.475990][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.514574][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.523015][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.532779][ T7120] device bridge_slave_0 entered promiscuous mode [ 215.542626][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.551131][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.560140][ T7120] device bridge_slave_1 entered promiscuous mode [ 215.599534][ T7032] team0: Port device team_slave_0 added [ 215.629654][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.645742][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.668761][ T7032] team0: Port device team_slave_1 added [ 215.709866][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.716966][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.728555][ T7194] device bridge_slave_0 entered promiscuous mode [ 215.771662][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.780190][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.790018][ T7194] device bridge_slave_1 entered promiscuous mode [ 215.847558][ T7120] team0: Port device team_slave_0 added [ 215.862657][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.881119][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.908114][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.953824][ T7120] team0: Port device team_slave_1 added [ 215.970428][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.977685][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.005316][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.080942][ T7032] device hsr_slave_0 entered promiscuous mode [ 216.148621][ T7032] device hsr_slave_1 entered promiscuous mode [ 216.187403][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.195942][ T7032] Cannot create hsr debugfs directory [ 216.204412][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.224645][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.233346][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.260395][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.271787][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 216.298607][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.320688][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.328588][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.355803][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.438708][ T7194] team0: Port device team_slave_0 added [ 216.531496][ T7120] device hsr_slave_0 entered promiscuous mode [ 216.587898][ T7120] device hsr_slave_1 entered promiscuous mode [ 216.627506][ T7120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.635104][ T7120] Cannot create hsr debugfs directory [ 216.644248][ T7194] team0: Port device team_slave_1 added [ 216.703530][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.711194][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.738667][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.755129][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.762900][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.789751][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.946215][ T6987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.003341][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.010860][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.020333][ T7326] device bridge_slave_0 entered promiscuous mode [ 217.032143][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.040724][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.049744][ T7326] device bridge_slave_1 entered promiscuous mode [ 217.102156][ T7194] device hsr_slave_0 entered promiscuous mode [ 217.157835][ T7194] device hsr_slave_1 entered promiscuous mode [ 217.207266][ T7194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.214962][ T7194] Cannot create hsr debugfs directory [ 217.222683][ T6987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.285555][ T6987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.339496][ T6987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.463592][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.487959][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.528717][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.582076][ T7326] team0: Port device team_slave_0 added [ 217.616934][ T7032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.644051][ T7032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.695336][ T7326] team0: Port device team_slave_1 added [ 217.720410][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.730304][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.746605][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.758686][ T7032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.810148][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.817917][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.845290][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.875535][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.887554][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.899171][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.906583][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.915493][ T7032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.966037][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.975248][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.001874][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.029546][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.038668][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.048025][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.056406][ T2727] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.063553][ T2727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.076092][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.085357][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.110834][ T7120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.251631][ T7326] device hsr_slave_0 entered promiscuous mode [ 218.308838][ T7326] device hsr_slave_1 entered promiscuous mode [ 218.368883][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.376580][ T7326] Cannot create hsr debugfs directory [ 218.401255][ T7120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.451008][ T7120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.509918][ T7120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.623977][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.633760][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.677190][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.685423][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.702340][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.748575][ T7194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.804870][ T7194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.860743][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.870497][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.880528][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.890856][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.904697][ T6987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.929962][ T7194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.982954][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.008716][ T7194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.093009][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.102116][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.164954][ T6987] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.189017][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.198251][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.230516][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.290384][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.303302][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.313110][ T2714] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.320280][ T2714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.353498][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.365210][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.374207][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.383309][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.393429][ T2611] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.400589][ T2611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.410415][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.430138][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.468630][ T7326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.502053][ T7326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.562240][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.590094][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.600783][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.610742][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.620377][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.630240][ T7326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.679622][ T7120] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.699224][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.709528][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.718686][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.726446][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.735411][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.744115][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.753786][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.762763][ T2622] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.769913][ T2622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.778282][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.786938][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.795955][ T7326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.856865][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.893163][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.903589][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.913881][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.923657][ T2714] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.930971][ T2714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.939734][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.949794][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.958869][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.967970][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.979565][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.007171][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.021140][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.029862][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.036909][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.049393][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.059619][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.072831][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.080020][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.094985][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.133361][ T6867] device veth0_vlan entered promiscuous mode [ 220.160693][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.170251][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.180091][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.190341][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.199080][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.235585][ T6867] device veth1_vlan entered promiscuous mode [ 220.243479][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.252330][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.262174][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.272257][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.282657][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.330349][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.353660][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.361892][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.374487][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.382860][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.392263][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.401516][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.411332][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.419790][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.428501][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.439827][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.450672][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.460889][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.470121][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.508636][ T7194] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.523108][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.536539][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.551701][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.559811][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.570668][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.579752][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.588786][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.598196][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.606639][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.613804][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.623525][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.643669][ T6867] device veth0_macvtap entered promiscuous mode [ 220.674383][ T7120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.689161][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.698796][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.708612][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.717944][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.726394][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.735845][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.745360][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.752549][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.761881][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.783362][ T6867] device veth1_macvtap entered promiscuous mode [ 220.804905][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.818513][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.828370][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.838305][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.848182][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.856862][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.871946][ T7032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.905040][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.925650][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.933657][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.942833][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.953193][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.963802][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.015581][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.035838][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.045372][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.054875][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.064028][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.073177][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.082133][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.092381][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.116294][ T6987] device veth0_vlan entered promiscuous mode [ 221.143125][ T7120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.150994][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.164581][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.173599][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.185727][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.195481][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.209500][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.234839][ T6987] device veth1_vlan entered promiscuous mode [ 221.245263][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.254629][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.266499][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.305404][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.315883][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.328319][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.366773][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.379253][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.457964][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.469310][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.495070][ T7120] device veth0_vlan entered promiscuous mode [ 221.509304][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.632640][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.641629][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.676488][ T6987] device veth0_macvtap entered promiscuous mode [ 221.697296][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.717758][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.725813][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.736838][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.748333][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.756426][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.782311][ T6987] device veth1_macvtap entered promiscuous mode [ 221.804914][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.825052][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 04:18:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='veth1_vlan\x00') mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400020000806010200000000000000000c0000080500010007000000050001000700000005000700000005000100070000000900020073797a3200000000dd52fcc51d719b675c21bb8490c11b42aaf9374cd1c9d8a417ae7d05336f0d55a2c2170fb296dd693d177521b291f0c2cf9927e14acbd8b68aaa6e5ce90600000000000000f17802f05c7448cfe5602e97e99b80636747756db1e0368f663b97e464893ec2c3cf6d9043a6d0ee425762e76644b790beb3481d7d10ab7b3cbfafafccbbf79857f3ccfa52f7714c62cee913ae587023f4cb0a00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r8 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r7, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r5, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4baf508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b962533a7e663d3b15928e8f3a40eea3df808012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9f24f0c5b18ad52b897157db7a7c22f429958f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc0e766e2b23ea91a40bd87b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea52aeaf643f4c2dbdaf7e5637429d"], 0x20}}, 0x0) [ 221.838122][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.861416][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.881798][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.903661][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.920325][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.953859][ T7194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.027352][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.041339][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.056915][ C0] hrtimer: interrupt took 63654 ns [ 222.074067][ T2726] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.081264][ T2726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.104486][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.115215][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.124532][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.133782][ T2726] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.141140][ T2726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.162219][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.182417][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.195267][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.208115][ T8128] device veth0_macvtap left promiscuous mode [ 222.446010][ T7120] device veth1_vlan entered promiscuous mode [ 222.472122][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.481312][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.491755][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.504381][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.515496][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.542491][ T7032] device veth0_vlan entered promiscuous mode [ 222.554418][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.566237][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.581038][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.588668][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.596724][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.609583][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.621166][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.631161][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.640060][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.649141][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.691941][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.700439][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.710513][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.720095][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.729489][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.738693][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.748048][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.781010][ T7032] device veth1_vlan entered promiscuous mode [ 222.809524][ T7120] device veth0_macvtap entered promiscuous mode 04:18:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='veth1_vlan\x00') mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400020000806010200000000000000000c0000080500010007000000050001000700000005000700000005000100070000000900020073797a3200000000dd52fcc51d719b675c21bb8490c11b42aaf9374cd1c9d8a417ae7d05336f0d55a2c2170fb296dd693d177521b291f0c2cf9927e14acbd8b68aaa6e5ce90600000000000000f17802f05c7448cfe5602e97e99b80636747756db1e0368f663b97e464893ec2c3cf6d9043a6d0ee425762e76644b790beb3481d7d10ab7b3cbfafafccbbf79857f3ccfa52f7714c62cee913ae587023f4cb0a00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r8 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r7, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r5, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4baf508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b962533a7e663d3b15928e8f3a40eea3df808012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9f24f0c5b18ad52b897157db7a7c22f429958f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc0e766e2b23ea91a40bd87b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea52aeaf643f4c2dbdaf7e5637429d"], 0x20}}, 0x0) [ 222.855537][ T7120] device veth1_macvtap entered promiscuous mode [ 222.885571][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.901910][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.912083][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.921318][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.930113][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.960708][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.985039][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.003886][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.020761][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.059435][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.106212][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.191214][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.207944][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.216733][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.227040][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.239235][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.251954][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.262471][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.273583][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.286730][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.305643][ T7194] device veth0_vlan entered promiscuous mode [ 223.327078][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 04:18:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='veth1_vlan\x00') mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400020000806010200000000000000000c0000080500010007000000050001000700000005000700000005000100070000000900020073797a3200000000dd52fcc51d719b675c21bb8490c11b42aaf9374cd1c9d8a417ae7d05336f0d55a2c2170fb296dd693d177521b291f0c2cf9927e14acbd8b68aaa6e5ce90600000000000000f17802f05c7448cfe5602e97e99b80636747756db1e0368f663b97e464893ec2c3cf6d9043a6d0ee425762e76644b790beb3481d7d10ab7b3cbfafafccbbf79857f3ccfa52f7714c62cee913ae587023f4cb0a00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r8 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r7, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r5, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4baf508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b962533a7e663d3b15928e8f3a40eea3df808012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9f24f0c5b18ad52b897157db7a7c22f429958f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc0e766e2b23ea91a40bd87b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea52aeaf643f4c2dbdaf7e5637429d"], 0x20}}, 0x0) [ 223.335057][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.347600][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.356571][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.367561][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.376584][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.493690][ T7032] device veth0_macvtap entered promiscuous mode [ 223.569211][ T7194] device veth1_vlan entered promiscuous mode [ 223.598228][ T7032] device veth1_macvtap entered promiscuous mode [ 223.607715][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.627824][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.671577][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.685682][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.696296][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.750768][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.776003][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 04:18:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='veth1_vlan\x00') mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400020000806010200000000000000000c0000080500010007000000050001000700000005000700000005000100070000000900020073797a3200000000dd52fcc51d719b675c21bb8490c11b42aaf9374cd1c9d8a417ae7d05336f0d55a2c2170fb296dd693d177521b291f0c2cf9927e14acbd8b68aaa6e5ce90600000000000000f17802f05c7448cfe5602e97e99b80636747756db1e0368f663b97e464893ec2c3cf6d9043a6d0ee425762e76644b790beb3481d7d10ab7b3cbfafafccbbf79857f3ccfa52f7714c62cee913ae587023f4cb0a00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r8 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r7, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r5, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4baf508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b962533a7e663d3b15928e8f3a40eea3df808012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9f24f0c5b18ad52b897157db7a7c22f429958f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc0e766e2b23ea91a40bd87b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea52aeaf643f4c2dbdaf7e5637429d"], 0x20}}, 0x0) [ 223.854513][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.875756][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.886546][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.897948][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.908975][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.920145][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.933430][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 04:18:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x82, @fixed, 0x0, 0x1}, 0xe) [ 223.961564][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.987615][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 04:18:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x82, @fixed, 0x0, 0x1}, 0xe) [ 224.017051][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.017095][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.017123][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.017129][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.019105][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.239011][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.255463][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 04:18:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x82, @fixed, 0x0, 0x1}, 0xe) [ 224.280284][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 04:18:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x82, @fixed, 0x0, 0x1}, 0xe) [ 224.322448][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.434444][ T7194] device veth0_macvtap entered promiscuous mode [ 224.477126][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.491707][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.536285][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.554067][ T7194] device veth1_macvtap entered promiscuous mode [ 224.666376][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.681780][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.708389][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.737237][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.757701][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.777071][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.806139][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.836898][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.859231][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.937019][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.945390][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.955573][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.969074][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.983298][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.993378][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.004004][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.014288][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.024828][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.035630][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.047137][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.059804][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.120126][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.140950][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.158116][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.175017][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.186165][ T8195] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.264468][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.281834][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 04:18:33 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x6000) socket$caif_seqpacket(0x25, 0x5, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 04:18:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='veth1_vlan\x00') mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400020000806010200000000000000000c0000080500010007000000050001000700000005000700000005000100070000000900020073797a3200000000dd52fcc51d719b675c21bb8490c11b42aaf9374cd1c9d8a417ae7d05336f0d55a2c2170fb296dd693d177521b291f0c2cf9927e14acbd8b68aaa6e5ce90600000000000000f17802f05c7448cfe5602e97e99b80636747756db1e0368f663b97e464893ec2c3cf6d9043a6d0ee425762e76644b790beb3481d7d10ab7b3cbfafafccbbf79857f3ccfa52f7714c62cee913ae587023f4cb0a00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r8 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r7, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r5, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4baf508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b962533a7e663d3b15928e8f3a40eea3df808012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9f24f0c5b18ad52b897157db7a7c22f429958f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc0e766e2b23ea91a40bd87b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea52aeaf643f4c2dbdaf7e5637429d"], 0x20}}, 0x0) [ 225.338303][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.346574][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.429574][ T7326] device veth0_vlan entered promiscuous mode [ 225.499526][ T7326] device veth1_vlan entered promiscuous mode 04:18:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000640)=""/208) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000001e, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)=0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}, 0xffffffff}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58ab16f0900668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded0a41d0d8d5e649caab8d914916ee79d501a3aa5f0972e376bb9f94c52d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adffffff7f00"/172], 0x10}}, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) exit(0xc964) [ 225.660864][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.700265][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.735515][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.777256][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.816580][ T7326] device veth0_macvtap entered promiscuous mode [ 225.883841][ T7326] device veth1_macvtap entered promiscuous mode [ 225.948099][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.956506][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.101720][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.143660][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.260436][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.305523][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.329677][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.374543][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.410847][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.426113][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.444891][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.455560][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.473559][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.494700][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.511237][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.533892][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.556350][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.570029][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.587179][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.598672][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.613161][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.655891][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.667724][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.677839][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.689536][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.701782][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.757416][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.779758][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.316974][ T2727] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 227.586979][ T2727] usb 6-1: Using ep0 maxpacket: 16 [ 227.847857][ T2727] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 227.857316][ T2727] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 227.866207][ T2727] usb 6-1: Manufacturer: syz [ 227.871767][ T2727] usb 6-1: SerialNumber: syz [ 227.879531][ T2727] usb 6-1: config 0 descriptor?? [ 227.929778][ T2727] i2c-tiny-usb 6-1:0.0: version 63.ce found at bus 006 address 002 [ 228.586947][ T2727] i2c i2c-0: failure reading functionality [ 228.604131][ T2727] i2c i2c-0: connected i2c-tiny-usb device [ 228.614610][ T2727] usb 6-1: USB disconnect, device number 2 [ 228.639743][ T2727] ================================================================== [ 228.648181][ T2727] BUG: KASAN: use-after-free in kobject_put+0x296/0x2f0 [ 228.655152][ T2727] Read of size 1 at addr ffff88808f59e054 by task kworker/1:12/2727 [ 228.663760][ T2727] [ 228.666249][ T2727] CPU: 1 PID: 2727 Comm: kworker/1:12 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 228.675885][ T2727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.685978][ T2727] Workqueue: usb_hub_wq hub_event [ 228.691017][ T2727] Call Trace: [ 228.694412][ T2727] dump_stack+0x18f/0x20d [ 228.698841][ T2727] ? kobject_put+0x296/0x2f0 [ 228.703437][ T2727] ? kobject_put+0x296/0x2f0 [ 228.708028][ T2727] print_address_description.constprop.0.cold+0xd3/0x413 [ 228.715053][ T2727] ? kfree+0x1eb/0x2b0 [ 228.719125][ T2727] ? vprintk_func+0x97/0x1a6 [ 228.723715][ T2727] ? kobject_put+0x296/0x2f0 [ 228.728301][ T2727] kasan_report.cold+0x1f/0x37 [ 228.733080][ T2727] ? kobject_put+0x1d0/0x2f0 [ 228.737672][ T2727] ? kobject_put+0x296/0x2f0 [ 228.742260][ T2727] kobject_put+0x296/0x2f0 [ 228.747551][ T2727] ? cdev_device_del+0x69/0x80 [ 228.752321][ T2727] put_device+0x1b/0x30 [ 228.756524][ T2727] i2cdev_detach_adapter.part.0+0x53/0x70 [ 228.762635][ T2727] i2cdev_notifier_call+0xad/0xc0 [ 228.767679][ T2727] notifier_call_chain+0xc0/0x230 [ 228.772723][ T2727] blocking_notifier_call_chain+0x85/0xa0 [ 228.778464][ T2727] device_del+0x17e/0xd30 [ 228.782801][ T2727] ? mark_held_locks+0x9f/0xe0 [ 228.787573][ T2727] ? device_link_add_missing_supplier_links+0x370/0x370 [ 228.794507][ T2727] ? lockdep_init_map_waits+0x26a/0x890 [ 228.800069][ T2727] ? lockdep_init_map_waits+0x26a/0x890 [ 228.805800][ T2727] ? __raw_spin_lock_init+0x34/0x100 [ 228.811092][ T2727] device_unregister+0x11/0x30 [ 228.815958][ T2727] i2c_del_adapter+0x42b/0x590 [ 228.820730][ T2727] ? usb_disable_interface+0x7b/0x1a0 [ 228.826106][ T2727] i2c_tiny_usb_disconnect+0x3a/0xb0 [ 228.831390][ T2727] usb_unbind_interface+0x1bd/0x8a0 [ 228.836604][ T2727] ? __pm_runtime_idle+0xd1/0x320 [ 228.841628][ T2727] ? usb_autoresume_device+0x60/0x60 [ 228.847033][ T2727] device_release_driver_internal+0x432/0x500 [ 228.853113][ T2727] bus_remove_device+0x2dc/0x4a0 [ 228.858061][ T2727] device_del+0x481/0xd30 [ 228.862507][ T2727] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 228.869622][ T2727] ? device_link_add_missing_supplier_links+0x370/0x370 [ 228.876574][ T2727] ? remove_intf_ep_devs+0x13f/0x1d0 [ 228.881868][ T2727] usb_disable_device+0x211/0x690 [ 228.888385][ T2727] usb_disconnect+0x284/0x8d0 [ 228.893087][ T2727] hub_event+0x17ca/0x38f0 [ 228.897536][ T2727] ? hub_port_debounce+0x260/0x260 [ 228.902652][ T2727] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 228.908563][ T2727] ? debug_smp_processor_id+0x2f/0x185 [ 228.914152][ T2727] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 228.919732][ T2727] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 228.925746][ T2727] process_one_work+0x965/0x16a0 [ 228.930772][ T2727] ? lock_release+0x800/0x800 [ 228.936607][ T2727] ? pwq_dec_nr_in_flight+0x310/0x310 [ 228.942107][ T2727] ? rwlock_bug.part.0+0x90/0x90 [ 228.947085][ T2727] worker_thread+0x7ab/0xe20 [ 228.951730][ T2727] ? process_one_work+0x16a0/0x16a0 [ 228.956939][ T2727] kthread+0x3b5/0x4a0 [ 228.961014][ T2727] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 228.966742][ T2727] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 228.972485][ T2727] ret_from_fork+0x24/0x30 [ 228.976915][ T2727] [ 228.979243][ T2727] Allocated by task 2727: [ 228.983600][ T2727] save_stack+0x1b/0x40 [ 228.987754][ T2727] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 228.993431][ T2727] kmem_cache_alloc_trace+0x153/0x7d0 [ 228.999117][ T2727] i2cdev_attach_adapter.part.0+0x9a/0x3f0 [ 229.004945][ T2727] i2cdev_notifier_call+0x9b/0xc0 [ 229.009975][ T2727] notifier_call_chain+0xc0/0x230 [ 229.014989][ T2727] blocking_notifier_call_chain+0x85/0xa0 [ 229.020745][ T2727] device_add+0xa6e/0x1900 [ 229.025192][ T2727] i2c_register_adapter+0x30d/0xb00 [ 229.030385][ T2727] i2c_add_adapter+0xba/0x100 [ 229.035075][ T2727] i2c_tiny_usb_probe+0x3a8/0x528 [ 229.040119][ T2727] usb_probe_interface+0x305/0x7a0 [ 229.045227][ T2727] really_probe+0x281/0x6d0 [ 229.049861][ T2727] driver_probe_device+0xfe/0x1d0 [ 229.054891][ T2727] __device_attach_driver+0x1c2/0x220 [ 229.060259][ T2727] bus_for_each_drv+0x162/0x1e0 [ 229.065121][ T2727] __device_attach+0x21a/0x360 [ 229.069904][ T2727] bus_probe_device+0x1e4/0x290 [ 229.074741][ T2727] device_add+0xaf1/0x1900 [ 229.079168][ T2727] usb_set_configuration+0xec5/0x1740 [ 229.084550][ T2727] usb_generic_driver_probe+0x9d/0xe0 [ 229.090127][ T2727] usb_probe_device+0xc6/0x1f0 [ 229.094876][ T2727] really_probe+0x281/0x6d0 [ 229.099376][ T2727] driver_probe_device+0xfe/0x1d0 [ 229.104397][ T2727] __device_attach_driver+0x1c2/0x220 [ 229.109762][ T2727] bus_for_each_drv+0x162/0x1e0 [ 229.114613][ T2727] __device_attach+0x21a/0x360 [ 229.119386][ T2727] bus_probe_device+0x1e4/0x290 [ 229.124320][ T2727] device_add+0xaf1/0x1900 [ 229.128781][ T2727] usb_new_device.cold+0x753/0x103d [ 229.133975][ T2727] hub_event+0x1eca/0x38f0 [ 229.138397][ T2727] process_one_work+0x965/0x16a0 [ 229.143342][ T2727] worker_thread+0x96/0xe20 [ 229.147850][ T2727] kthread+0x3b5/0x4a0 [ 229.151993][ T2727] ret_from_fork+0x24/0x30 [ 229.156456][ T2727] [ 229.158779][ T2727] Freed by task 2727: [ 229.162769][ T2727] save_stack+0x1b/0x40 [ 229.167055][ T2727] __kasan_slab_free+0xf7/0x140 [ 229.171905][ T2727] kfree+0x109/0x2b0 [ 229.176272][ T2727] device_release+0x71/0x200 [ 229.180862][ T2727] kobject_put+0x1c8/0x2f0 [ 229.185427][ T2727] cdev_device_del+0x69/0x80 [ 229.190024][ T2727] put_i2c_dev+0x160/0x1b0 [ 229.194461][ T2727] i2cdev_detach_adapter.part.0+0x53/0x70 [ 229.200360][ T2727] i2cdev_notifier_call+0xad/0xc0 [ 229.205386][ T2727] notifier_call_chain+0xc0/0x230 [ 229.210400][ T2727] blocking_notifier_call_chain+0x85/0xa0 [ 229.216114][ T2727] device_del+0x17e/0xd30 [ 229.220449][ T2727] device_unregister+0x11/0x30 [ 229.225234][ T2727] i2c_del_adapter+0x42b/0x590 [ 229.229995][ T2727] i2c_tiny_usb_disconnect+0x3a/0xb0 [ 229.235276][ T2727] usb_unbind_interface+0x1bd/0x8a0 [ 229.240479][ T2727] device_release_driver_internal+0x432/0x500 [ 229.246551][ T2727] bus_remove_device+0x2dc/0x4a0 [ 229.251501][ T2727] device_del+0x481/0xd30 [ 229.255846][ T2727] usb_disable_device+0x211/0x690 [ 229.260878][ T2727] usb_disconnect+0x284/0x8d0 [ 229.265546][ T2727] hub_event+0x17ca/0x38f0 [ 229.269961][ T2727] process_one_work+0x965/0x16a0 [ 229.274892][ T2727] worker_thread+0x7ab/0xe20 [ 229.279472][ T2727] kthread+0x3b5/0x4a0 [ 229.283537][ T2727] ret_from_fork+0x24/0x30 [ 229.287936][ T2727] [ 229.290258][ T2727] The buggy address belongs to the object at ffff88808f59e000 [ 229.290258][ T2727] which belongs to the cache kmalloc-2k of size 2048 [ 229.304298][ T2727] The buggy address is located 84 bytes inside of [ 229.304298][ T2727] 2048-byte region [ffff88808f59e000, ffff88808f59e800) [ 229.317586][ T2727] The buggy address belongs to the page: [ 229.323311][ T2727] page:ffffea00023d6780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 229.332432][ T2727] flags: 0xfffe0000000200(slab) [ 229.337281][ T2727] raw: 00fffe0000000200 ffffea0002756e88 ffffea00027ffdc8 ffff8880aa000e00 [ 229.345891][ T2727] raw: 0000000000000000 ffff88808f59e000 0000000100000001 0000000000000000 [ 229.354462][ T2727] page dumped because: kasan: bad access detected [ 229.360861][ T2727] [ 229.363191][ T2727] Memory state around the buggy address: [ 229.368834][ T2727] ffff88808f59df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.376901][ T2727] ffff88808f59df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.385093][ T2727] >ffff88808f59e000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.393135][ T2727] ^ [ 229.399811][ T2727] ffff88808f59e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.408035][ T2727] ffff88808f59e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.416280][ T2727] ================================================================== [ 229.424349][ T2727] Disabling lock debugging due to kernel taint [ 229.438976][ T2727] Kernel panic - not syncing: panic_on_warn set ... [ 229.445642][ T2727] CPU: 1 PID: 2727 Comm: kworker/1:12 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 229.457036][ T2727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.467746][ T2727] Workqueue: usb_hub_wq hub_event [ 229.472779][ T2727] Call Trace: [ 229.476120][ T2727] dump_stack+0x18f/0x20d [ 229.480460][ T2727] ? kobject_put+0x1d0/0x2f0 [ 229.485057][ T2727] panic+0x2e3/0x75c [ 229.488958][ T2727] ? __warn_printk+0xf3/0xf3 [ 229.493546][ T2727] ? preempt_schedule_common+0x5e/0xc0 [ 229.499086][ T2727] ? kobject_put+0x296/0x2f0 [ 229.503759][ T2727] ? kobject_put+0x296/0x2f0 [ 229.508438][ T2727] ? preempt_schedule_thunk+0x16/0x18 [ 229.513826][ T2727] ? trace_hardirqs_on+0x55/0x230 [ 229.518852][ T2727] ? kobject_put+0x296/0x2f0 [ 229.523422][ T2727] ? kobject_put+0x296/0x2f0 [ 229.528134][ T2727] end_report+0x4d/0x53 [ 229.532279][ T2727] kasan_report.cold+0xd/0x37 [ 229.536956][ T2727] ? kobject_put+0x1d0/0x2f0 [ 229.541583][ T2727] ? kobject_put+0x296/0x2f0 [ 229.546169][ T2727] kobject_put+0x296/0x2f0 [ 229.550824][ T2727] ? cdev_device_del+0x69/0x80 [ 229.555579][ T2727] put_device+0x1b/0x30 [ 229.559741][ T2727] i2cdev_detach_adapter.part.0+0x53/0x70 [ 229.565443][ T2727] i2cdev_notifier_call+0xad/0xc0 [ 229.570481][ T2727] notifier_call_chain+0xc0/0x230 [ 229.575495][ T2727] blocking_notifier_call_chain+0x85/0xa0 [ 229.581221][ T2727] device_del+0x17e/0xd30 [ 229.585557][ T2727] ? mark_held_locks+0x9f/0xe0 [ 229.590445][ T2727] ? device_link_add_missing_supplier_links+0x370/0x370 [ 229.597564][ T2727] ? lockdep_init_map_waits+0x26a/0x890 [ 229.603155][ T2727] ? lockdep_init_map_waits+0x26a/0x890 [ 229.608786][ T2727] ? __raw_spin_lock_init+0x34/0x100 [ 229.614078][ T2727] device_unregister+0x11/0x30 [ 229.618850][ T2727] i2c_del_adapter+0x42b/0x590 [ 229.623608][ T2727] ? usb_disable_interface+0x7b/0x1a0 [ 229.629126][ T2727] i2c_tiny_usb_disconnect+0x3a/0xb0 [ 229.634410][ T2727] usb_unbind_interface+0x1bd/0x8a0 [ 229.639629][ T2727] ? __pm_runtime_idle+0xd1/0x320 [ 229.644662][ T2727] ? usb_autoresume_device+0x60/0x60 [ 229.649972][ T2727] device_release_driver_internal+0x432/0x500 [ 229.656022][ T2727] bus_remove_device+0x2dc/0x4a0 [ 229.660957][ T2727] device_del+0x481/0xd30 [ 229.665288][ T2727] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 229.671269][ T2727] ? device_link_add_missing_supplier_links+0x370/0x370 [ 229.678204][ T2727] ? remove_intf_ep_devs+0x13f/0x1d0 [ 229.683517][ T2727] usb_disable_device+0x211/0x690 [ 229.688551][ T2727] usb_disconnect+0x284/0x8d0 [ 229.693226][ T2727] hub_event+0x17ca/0x38f0 [ 229.697726][ T2727] ? hub_port_debounce+0x260/0x260 [ 229.702829][ T2727] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 229.708714][ T2727] ? debug_smp_processor_id+0x2f/0x185 [ 229.714174][ T2727] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 229.719707][ T2727] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 229.725897][ T2727] process_one_work+0x965/0x16a0 [ 229.731013][ T2727] ? lock_release+0x800/0x800 [ 229.735685][ T2727] ? pwq_dec_nr_in_flight+0x310/0x310 [ 229.741047][ T2727] ? rwlock_bug.part.0+0x90/0x90 [ 229.745975][ T2727] worker_thread+0x7ab/0xe20 [ 229.750579][ T2727] ? process_one_work+0x16a0/0x16a0 [ 229.755757][ T2727] kthread+0x3b5/0x4a0 [ 229.759807][ T2727] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 229.765523][ T2727] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 229.771226][ T2727] ret_from_fork+0x24/0x30 [ 229.777064][ T2727] Kernel Offset: disabled [ 229.781396][ T2727] Rebooting in 86400 seconds..