[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 47.264935][ T6719] sshd (6719) used greatest stack depth: 22192 bytes left Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. 2020/06/18 02:36:12 fuzzer started 2020/06/18 02:36:12 dialing manager at 10.128.0.26:45851 2020/06/18 02:36:12 syscalls: 3085 2020/06/18 02:36:12 code coverage: enabled 2020/06/18 02:36:12 comparison tracing: enabled 2020/06/18 02:36:12 extra coverage: enabled 2020/06/18 02:36:12 setuid sandbox: enabled 2020/06/18 02:36:12 namespace sandbox: enabled 2020/06/18 02:36:12 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/18 02:36:12 fault injection: enabled 2020/06/18 02:36:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/18 02:36:12 net packet injection: enabled 2020/06/18 02:36:12 net device setup: enabled 2020/06/18 02:36:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/18 02:36:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/18 02:36:12 USB emulation: enabled 02:37:29 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x36c, 0x0, 0x228, 0x0, 0x0, 0x228, 0x2d8, 0x2d8, 0x2d8, 0x2d8, 0x2d8, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'ip6tnl0\x00', {0x0, 0x0, 0x60, 0x0, 0x0, 0x7ff, 0x5}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c8) syzkaller login: [ 132.692590][ T6828] IPVS: ftp: loaded support on port[0] = 21 02:37:30 executing program 1: close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f9c0100ff7f4e32f61bcdf1e422000000000100804824cabecc4b38945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff00000000", 0x53}, {&(0x7f0000000140)="04880d12cd", 0x5}], 0x2) [ 132.836361][ T6828] chnl_net:caif_netlink_parms(): no params data found [ 132.932076][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.939824][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.951101][ T6828] device bridge_slave_0 entered promiscuous mode [ 132.961154][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.970958][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.980030][ T6828] device bridge_slave_1 entered promiscuous mode [ 133.020446][ T6828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.051812][ T6828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.093966][ T6828] team0: Port device team_slave_0 added [ 133.125027][ T6966] IPVS: ftp: loaded support on port[0] = 21 [ 133.135598][ T6828] team0: Port device team_slave_1 added [ 133.190371][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.197349][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.238101][ T6828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.260104][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_1 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="230000005e0081aee4050c00000f0000008bc609f6d804ffbeffffff9e000000000000", 0x23}], 0x1}, 0x0) [ 133.267075][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.299018][ T6828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.433181][ T6828] device hsr_slave_0 entered promiscuous mode 02:37:30 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002bc0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)='t', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x14, 0x84, 0x5, {0x20}}], 0x14}], 0x1, 0x0) [ 133.498118][ T6828] device hsr_slave_1 entered promiscuous mode [ 133.635829][ T7018] IPVS: ftp: loaded support on port[0] = 21 02:37:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db"}, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 133.904251][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 134.033992][ T7130] IPVS: ftp: loaded support on port[0] = 21 02:37:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="230000005e0081aee4050c00000f0000008bc609f6d804ffbeffffff9e000000000000", 0x23}], 0x1}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000140)={0x1000005}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) [ 134.263899][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.287943][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.295676][ T6966] device bridge_slave_0 entered promiscuous mode [ 134.348280][ T6828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.350616][ T7176] IPVS: ftp: loaded support on port[0] = 21 [ 134.383392][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.391370][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.402839][ T6966] device bridge_slave_1 entered promiscuous mode [ 134.413872][ T7018] chnl_net:caif_netlink_parms(): no params data found [ 134.436975][ T6828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.497589][ T6828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.562823][ T6828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.637903][ T7298] IPVS: ftp: loaded support on port[0] = 21 [ 134.673314][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.693472][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.757853][ T6966] team0: Port device team_slave_0 added [ 134.793084][ T6966] team0: Port device team_slave_1 added [ 134.903254][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.913146][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.941118][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.982849][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.996857][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.005378][ T7018] device bridge_slave_0 entered promiscuous mode [ 135.019646][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.026716][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.035900][ T7018] device bridge_slave_1 entered promiscuous mode [ 135.052082][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.059281][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.086269][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.113879][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 135.135232][ T7018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.172645][ T7018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.182003][ T7176] chnl_net:caif_netlink_parms(): no params data found [ 135.252813][ T7018] team0: Port device team_slave_0 added [ 135.296161][ T7018] team0: Port device team_slave_1 added [ 135.371482][ T6966] device hsr_slave_0 entered promiscuous mode [ 135.418738][ T6966] device hsr_slave_1 entered promiscuous mode [ 135.457966][ T6966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.465732][ T6966] Cannot create hsr debugfs directory [ 135.535612][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.543177][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.570309][ T7018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.582618][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.589964][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.599152][ T7130] device bridge_slave_0 entered promiscuous mode [ 135.618700][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 135.630489][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.640769][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.668488][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.680611][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.691711][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.700386][ T7130] device bridge_slave_1 entered promiscuous mode [ 135.789747][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.881468][ T7018] device hsr_slave_0 entered promiscuous mode [ 135.937783][ T7018] device hsr_slave_1 entered promiscuous mode [ 135.977458][ T7018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.985052][ T7018] Cannot create hsr debugfs directory [ 135.993601][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.003756][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.010997][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.020188][ T7176] device bridge_slave_0 entered promiscuous mode [ 136.073620][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.081066][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.090708][ T7176] device bridge_slave_1 entered promiscuous mode [ 136.166576][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.184774][ T7130] team0: Port device team_slave_0 added [ 136.220633][ T7176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.233877][ T7176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.249870][ T7130] team0: Port device team_slave_1 added [ 136.345732][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.359842][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.375885][ T6828] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.404148][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.411731][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.420376][ T7298] device bridge_slave_0 entered promiscuous mode [ 136.429062][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.435999][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.467719][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.487924][ T7176] team0: Port device team_slave_0 added [ 136.494273][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.504545][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.530583][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.543907][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.553577][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.562756][ T7298] device bridge_slave_1 entered promiscuous mode [ 136.591036][ T7176] team0: Port device team_slave_1 added [ 136.618125][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.632371][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.649715][ T6966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.704746][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.714047][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.723245][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.730500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.752861][ T6966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.796230][ T6966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.867476][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.876058][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.886256][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.895900][ T2484] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.903014][ T2484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.922903][ T7298] team0: Port device team_slave_0 added [ 136.959751][ T7130] device hsr_slave_0 entered promiscuous mode [ 137.008395][ T7130] device hsr_slave_1 entered promiscuous mode [ 137.077618][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.085192][ T7130] Cannot create hsr debugfs directory [ 137.091736][ T6966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.161532][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.168757][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.195646][ T7176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.208995][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.229450][ T7298] team0: Port device team_slave_1 added [ 137.250845][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.258220][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.285040][ T7176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.305132][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.362220][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.375341][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.409804][ T7018] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.439824][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.446873][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.473807][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.485975][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.498176][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.506921][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.522184][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.531505][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.548679][ T6828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.561133][ T6828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.622111][ T7176] device hsr_slave_0 entered promiscuous mode [ 137.667906][ T7176] device hsr_slave_1 entered promiscuous mode [ 137.707821][ T7176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.715388][ T7176] Cannot create hsr debugfs directory [ 137.721119][ T7018] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.780638][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.787654][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.813763][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.826974][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.840272][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.881545][ T7018] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.963200][ T7018] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 138.091230][ T7298] device hsr_slave_0 entered promiscuous mode [ 138.147842][ T7298] device hsr_slave_1 entered promiscuous mode [ 138.207444][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.215133][ T7298] Cannot create hsr debugfs directory [ 138.236809][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.244525][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.274760][ T6828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.439023][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.449973][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.485075][ T7130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.564887][ T7130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 138.625089][ T7130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 138.682884][ T7130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 138.778842][ T7176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.836644][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.848605][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.864052][ T7018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.880494][ T7176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.929847][ T6828] device veth0_vlan entered promiscuous mode [ 138.950855][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.958768][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.966824][ T7176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.045170][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.062528][ T6828] device veth1_vlan entered promiscuous mode [ 139.090376][ T7176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.151403][ T7018] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.159011][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.173421][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.181630][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.194069][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.202311][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.214318][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.238068][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.260231][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.269615][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.281075][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.288222][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.295844][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.305045][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.313701][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.320864][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.332843][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.358336][ T7298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.404690][ T7298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.451348][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.460532][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.473137][ T2477] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.480311][ T2477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.488127][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.496882][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.505432][ T2477] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.512594][ T2477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.520260][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.529197][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.537925][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.572221][ T6828] device veth0_macvtap entered promiscuous mode [ 139.580364][ T7298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.612383][ T7298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.659904][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.671813][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.680328][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.689579][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.699609][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.719665][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.729002][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.737943][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.746468][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.755448][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.764656][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.774396][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.782787][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.795435][ T6828] device veth1_macvtap entered promiscuous mode [ 139.828881][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.836957][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.849902][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.866017][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.881517][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.916698][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.928269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.936980][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.947549][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.956087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.985311][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.003342][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.039635][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.049139][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.059136][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.068705][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.076905][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.086116][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.121928][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.191911][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.362959][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.387895][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.395355][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.414181][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.428329][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:37:37 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x10000, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6tnl0\x00', 0x100}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17) unshare(0x40040400) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x28}, 0x1, 0xfffffff0}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x800, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 140.471557][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.568527][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.576819][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.593153][ C1] hrtimer: interrupt took 38223 ns [ 140.602614][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.612557][ T8091] IPVS: ftp: loaded support on port[0] = 21 [ 140.636140][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.653460][ T3842] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.660650][ T3842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.673204][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.682502][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.695581][ T3842] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.702746][ T3842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.723996][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.753355][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.769824][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.794796][ T7176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.801789][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.837000][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.872008][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.883693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.895118][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.904748][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.912901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.962050][ T7176] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.975396][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.983497][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.992432][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.001986][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.011049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.019831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.028791][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.036980][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.046412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.055382][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.062499][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.070975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.079007][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.086701][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.095590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.104245][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.111381][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.144565][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.152776][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.166072][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.174735][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.186434][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.195535][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.204533][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.214162][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.224622][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.244222][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.291154][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.318879][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.341108][ T8094] enable_cpucache failed for nfsd_drc, error 12 [ 141.348542][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.363704][ T8094] kmem_cache_create(nfsd_drc) failed with error -12 [ 141.372877][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.378417][ T8094] CPU: 1 PID: 8094 Comm: syz-executor.0 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 141.379980][ T7895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.389701][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.389706][ T8094] Call Trace: [ 141.389728][ T8094] dump_stack+0x18f/0x20d [ 141.389752][ T8094] kmem_cache_create_usercopy.cold+0x4c/0x6e [ 141.389773][ T8094] kmem_cache_create+0xd/0x10 [ 141.389786][ T8094] nfsd_reply_cache_init+0x22d/0x520 [ 141.389807][ T8094] nfsd_init_net+0x20c/0x6c0 [ 141.413238][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.414604][ T8094] ? write_maxblksize+0x550/0x550 [ 141.447559][ T8094] ops_init+0xaf/0x420 [ 141.451603][ T8094] setup_net+0x2de/0x860 [ 141.455819][ T8094] ? ops_init+0x420/0x420 [ 141.460136][ T8094] copy_net_ns+0x293/0x590 [ 141.464530][ T8094] create_new_namespaces+0x3fb/0xb30 [ 141.469795][ T8094] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 141.475440][ T8094] ksys_unshare+0x43d/0x8e0 [ 141.479917][ T8094] ? walk_process_tree+0x2c0/0x2c0 [ 141.485007][ T8094] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.491171][ T8094] __x64_sys_unshare+0x2d/0x40 [ 141.495906][ T8094] do_syscall_64+0x60/0xe0 [ 141.500298][ T8094] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 141.506161][ T8094] RIP: 0033:0x45ca59 [ 141.510030][ T8094] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 141.529865][ T8094] RSP: 002b:00007f2732e3ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 141.538247][ T8094] RAX: ffffffffffffffda RBX: 000000000050ad20 RCX: 000000000045ca59 [ 141.546190][ T8094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040400 [ 141.554152][ T8094] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 141.562112][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 141.570056][ T8094] R13: 0000000000000c6d R14: 00000000004cec40 R15: 00007f2732e3b6d4 [ 141.604429][ T6966] device veth0_vlan entered promiscuous mode [ 141.621107][ T408] tipc: TX() has been purged, node left! [ 141.644385][ T8094] nfsd: failed to allocate reply cache [ 141.675574][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.685072][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.695421][ T2484] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.702570][ T2484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.713253][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.722825][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.731558][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.740378][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.749366][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.759433][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.768378][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.776739][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.786932][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.796218][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.805473][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.814521][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.826047][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.834726][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.843611][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.852018][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.860760][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.871815][ T7018] device veth0_vlan entered promiscuous mode [ 141.954715][ T7018] device veth1_vlan entered promiscuous mode [ 141.978504][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.991166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.004557][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.022970][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.033417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.045411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.055541][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.067197][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.080355][ T7298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.090432][ T6966] device veth1_vlan entered promiscuous mode [ 142.109306][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:37:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xfd, &(0x7f0000000300)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 142.186483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.206428][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.243441][ T7176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.258496][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.275188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.295369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.316460][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.334572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.348065][ T6966] device veth0_macvtap entered promiscuous mode [ 142.364730][ T7018] device veth0_macvtap entered promiscuous mode [ 142.403012][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.413204][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.423913][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.443740][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.452799][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.468622][ T6966] device veth1_macvtap entered promiscuous mode [ 142.495752][ T7018] device veth1_macvtap entered promiscuous mode [ 142.508049][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.516793][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.526254][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.536376][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.548072][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.556934][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.604711][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.625950][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.639236][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.651880][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.663848][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.678217][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.695932][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.705839][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.716304][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.726413][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.736350][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.746327][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.835214][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.843688][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.852852][ T7130] device veth0_vlan entered promiscuous mode [ 142.864465][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.875550][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.885944][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.897729][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.910200][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.945122][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.953272][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.965640][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.975272][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.985167][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.994517][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.007808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.021299][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.030609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.042782][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.123343][ T7176] device veth0_vlan entered promiscuous mode [ 143.138677][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.152309][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.163110][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.176598][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.192474][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.203366][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.221139][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.230678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.239848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.252343][ T7298] device veth0_vlan entered promiscuous mode [ 143.273547][ T7130] device veth1_vlan entered promiscuous mode [ 143.329149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.338331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.360197][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 02:37:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x91}, 0x0) r0 = getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\xee\xa9\x8bCc\xad\x89\x9c\xf9\xd1(k\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x18\x93?\x88k\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\x1b\x8e3~\xaa\x14\xf6\xe3\xab\xb6\xa5$4\xd6\xfe\xb9\x00\x00\x00\x00\x00\x00\x00N\xc79J\x1b\xa7G8\x80\xa0\x1dMGJ\xe8\xf0\xe1\xab\xe1[\xddh\xddT\xe3q\xc2\xe5\aW\x82\xa1\xd3\xa5\xd4\xff\xfc\xee\xbf\v\x80w9(\x9fc\xaf\xebY0^\xe4\xb2\xfe\xbeE\x81\xae\xd4\xcd\x1c\r\xfb\xaeL\x9c2Lc\x9fc\xfb\x9al\xcd\x85;\x1b\xcd\xca\xd8\xbf\xcc\xb5\xbfL\xd0,R\xd0\xcd\xbb7\xa9L\xde\x84\xc4\x05ziT\xfdM\x88z\xaa\xd6\x17[4\xa2\xad!_\xce\x83\x8a\x9e=jA\xd2\x84\xfd\xcd\x03\x19G\x8f\xc3\xc1\xa8\x00\xa0\x05\n\xa7\x96\xaa\xa6>\x1a\xfb\x13c6\x8cC\xa7\n\xed\xe8\xe5\xe6\x05\x0f\x8d}\x18Z\xd63/\x03O\x9cp)\xe2\xdcQ\x1a\xd7m\x11\xb2\xbb\xf0g\x94\xe5\xe2\x8f\xa4\xc6\xdadD\xc7\xda\x89\xcdj~\x98\'\x93\x90M\xbbk+\x1c\xdb\xe9\x93\xb8\a\xe3\xd4\xcfo\xc2\xf5\x10\x90\xdb\x95\"\x85\xab\xf3\x90\xb9^9\xec\x06\xe2^\xf5\x9f\xda\x95JR\x82\x002\a\x17S\xb1\xfe\x15\x9d\xcd\x0e[\xb0q2\xd8\xb46\xa9\x86\x8f\xa2\a\xfbF+\xe5\x00'/391, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x94, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x94}}, 0x0) write(r5, &(0x7f00000004c0)='1', 0x1) sendfile(r5, r5, &(0x7f0000000200), 0xff8) [ 143.396743][ T7298] device veth1_vlan entered promiscuous mode [ 143.430109][ T7176] device veth1_vlan entered promiscuous mode [ 143.730443][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.738741][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.746852][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.755654][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.764341][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.773391][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.783018][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.892935][ T7130] device veth0_macvtap entered promiscuous mode [ 143.903825][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.915938][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.933734][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.963994][ T7298] device veth0_macvtap entered promiscuous mode [ 143.983727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.000895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.021447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.047893][ T7176] device veth0_macvtap entered promiscuous mode 02:37:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="230000005e0081aee4050c00000f0000008bc609f6d804ffbeffffff9e000000000000", 0x23}], 0x1}, 0x0) [ 144.100545][ T7298] device veth1_macvtap entered promiscuous mode [ 144.116395][ T7130] device veth1_macvtap entered promiscuous mode [ 144.120326][ T0] NOHZ: local_softirq_pending 08 [ 144.180797][ T7176] device veth1_macvtap entered promiscuous mode 02:37:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socket$inet6(0xa, 0x1, 0x0) [ 144.274166][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 02:37:41 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18}, 0x18) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) read$FUSE(r2, &(0x7f0000003340), 0x60) close(r1) [ 144.315403][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.367950][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.404317][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.429940][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.452151][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.477441][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.531727][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 02:37:41 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000)) [ 144.572734][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.638895][ T8166] syz-executor.1 uses old SIOCAX25GETINFO [ 144.651273][ T27] audit: type=1800 audit(1592447861.877:2): pid=8159 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15750 res=0 02:37:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x121041) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) write$evdev(r0, &(0x7f0000000040), 0xc00) 02:37:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r0, r1, 0x0) [ 144.679963][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.737776][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.785591][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.806912][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.844410][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.866901][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.899119][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.906512][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.920133][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.945028][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.968200][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.978224][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.008210][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.037205][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.048844][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.075793][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.117121][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.136693][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.159573][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.175983][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.189436][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.218633][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.228599][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.239125][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.251180][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.261635][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.273260][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.292142][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.314027][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.325690][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.344714][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.368462][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.404590][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.416703][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.427890][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.438874][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.449259][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.461017][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.472345][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.483408][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.508849][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.516202][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.535869][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.548288][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.563181][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.572189][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.584748][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.650111][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.676908][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.686763][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.699091][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.716112][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.735256][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.745697][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.764578][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.775048][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.799781][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.819917][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.872387][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.891920][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:37:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:37:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xbb, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2ee2e32a3b88aaf3c06f4970e85a63c9a4b0d8b9aad9c9ba4c998db2f64eb12c07af20200169c864e1d5f8179cba2e431126de0592738cb993815a7d1b1ce34144ce1487e311e84395a80adbe3e7f3622703c353de8e6928bfd5a5f2cc05e4b942d6ed155b67a555f06be4b2e2b0cd0e93e41c330f70401e3d96f546e65fab4fae51bb3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 02:37:43 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x10000, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6tnl0\x00', 0x100}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40040400) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x800, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:37:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x0, 0x2}, 0x20) 02:37:43 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00') read$char_usb(r0, &(0x7f00000000c0)=""/143, 0x8f) 02:37:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 02:37:43 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003700), 0xc, &(0x7f00000037c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="08002bbd7000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000080) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x58}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x2b, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x0, 'rr\x00', 0x21, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x0, 0x210c1266, 0x6d}}, 0x44) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100004, 0x0) 02:37:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r3, &(0x7f0000000480), 0x100000000000022c, 0xd000000) [ 146.788346][ T8207] IPVS: ftp: loaded support on port[0] = 21 02:37:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@check_normal='check=normal'}]}) [ 147.342049][ T8250] FAT-fs (loop5): bogus number of reserved sectors [ 147.365452][ T8250] FAT-fs (loop5): Can't find a valid FAT filesystem [ 147.392194][ T8214] IPVS: ftp: loaded support on port[0] = 21 02:37:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x503, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc029968edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51abec23b50c3362201a307df03000", 0x6a, r6) keyctl$assume_authority(0x10, r6) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x101) [ 147.703607][ T8272] Option 'µ 3b 0}ð0' to dns_resolver key: bad/missing value [ 147.709097][ T8273] general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN [ 147.722706][ T8273] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 147.731115][ T8273] CPU: 0 PID: 8273 Comm: syz-executor.5 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 147.740902][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.750963][ T8273] RIP: 0010:__tipc_sendstream+0xbc1/0x11d0 [ 147.756763][ T8273] Code: 00 00 00 00 48 39 5c 24 28 48 0f 44 d8 e8 87 1a cf f9 48 b8 00 00 00 00 00 fc ff df 48 8d bb c8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e2 04 00 00 48 8b 9b c8 00 00 00 48 b8 00 00 00 [ 147.776558][ T8273] RSP: 0018:ffffc9001722f808 EFLAGS: 00010202 [ 147.782620][ T8273] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87a3e0d0 [ 147.790606][ T8273] RDX: 0000000000000019 RSI: ffffffff87a3e119 RDI: 00000000000000c8 [ 147.798568][ T8273] RBP: ffff888059fab440 R08: ffff888059918440 R09: 0000000000000001 [ 147.806524][ T8273] R10: ffffffff8c588b4f R11: fffffbfff18b1169 R12: ffff888059fab97e [ 147.814484][ T8273] R13: 0000000000000000 R14: ffff888086b6e540 R15: 0000000000000000 [ 147.822452][ T8273] FS: 00007f1dd98c7700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 147.831377][ T8273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.837956][ T8273] CR2: 0000000020236fc8 CR3: 000000008e1b8000 CR4: 00000000001406f0 [ 147.845940][ T8273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.853903][ T8273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.861864][ T8273] Call Trace: [ 147.865239][ T8273] ? tipc_connect+0xa70/0xa70 [ 147.869906][ T8273] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 147.875697][ T8273] ? __local_bh_enable_ip+0x159/0x270 [ 147.881056][ T8273] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 147.887022][ T8273] ? lock_sock_nested+0x94/0x110 [ 147.891948][ T8273] ? lock_sock_nested+0x94/0x110 [ 147.896872][ T8273] tipc_sendstream+0x4c/0x70 [ 147.901448][ T8273] tipc_send_packet+0x3c/0x60 [ 147.906106][ T8273] ? tipc_sendstream+0x70/0x70 [ 147.910858][ T8273] sock_sendmsg+0xcf/0x120 [ 147.915261][ T8273] ____sys_sendmsg+0x32f/0x810 [ 147.920013][ T8273] ? kernel_sendmsg+0x50/0x50 [ 147.924678][ T8273] ? __lock_acquire+0x2224/0x48b0 [ 147.929692][ T8273] ___sys_sendmsg+0x100/0x170 [ 147.934370][ T8273] ? sendmsg_copy_msghdr+0x70/0x70 [ 147.939475][ T8273] ? __fget_files+0x277/0x400 [ 147.944145][ T8273] ? find_held_lock+0x2d/0x110 [ 147.948897][ T8273] ? __might_fault+0x11f/0x1d0 [ 147.953649][ T8273] ? lock_downgrade+0x840/0x840 [ 147.958516][ T8273] __sys_sendmmsg+0x195/0x480 [ 147.963180][ T8273] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 147.968193][ T8273] ? ktime_get_ts64+0x110/0x3e0 [ 147.973037][ T8273] ? _copy_to_user+0x126/0x160 [ 147.977792][ T8273] ? put_timespec64+0xcb/0x120 [ 147.982543][ T8273] ? ns_to_kernel_old_timeval+0x100/0x100 [ 147.988248][ T8273] ? check_preemption_disabled+0x38/0x220 [ 147.993953][ T8273] ? do_syscall_64+0x17/0xe0 [ 147.998530][ T8273] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 148.004063][ T8273] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 148.010030][ T8273] __x64_sys_sendmmsg+0x99/0x100 [ 148.014957][ T8273] do_syscall_64+0x60/0xe0 [ 148.019363][ T8273] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.025240][ T8273] RIP: 0033:0x45ca59 [ 148.029122][ T8273] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:37:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@file_umask={'file_umask'}}]}) [ 148.048715][ T8273] RSP: 002b:00007f1dd98c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.057120][ T8273] RAX: ffffffffffffffda RBX: 00000000004fcf20 RCX: 000000000045ca59 [ 148.065086][ T8273] RDX: 04924924924926c8 RSI: 0000000020236fc8 RDI: 0000000000000004 [ 148.073047][ T8273] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 148.081010][ T8273] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 148.089061][ T8273] R13: 00000000000008f5 R14: 00000000004cbc3e R15: 00007f1dd98c76d4 [ 148.097024][ T8273] Modules linked in: 02:37:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000240)='tmpfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@size={'size'}, 0x25}]}) [ 148.160670][ T8280] hfs: can't find a HFS filesystem on dev loop1 [ 148.167793][ T8273] ---[ end trace 73a1624775f4e6a4 ]--- [ 148.173468][ T8273] RIP: 0010:__tipc_sendstream+0xbc1/0x11d0 [ 148.179656][ T8273] Code: 00 00 00 00 48 39 5c 24 28 48 0f 44 d8 e8 87 1a cf f9 48 b8 00 00 00 00 00 fc ff df 48 8d bb c8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e2 04 00 00 48 8b 9b c8 00 00 00 48 b8 00 00 00 [ 148.200332][ T8273] RSP: 0018:ffffc9001722f808 EFLAGS: 00010202 [ 148.206638][ T8273] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87a3e0d0 [ 148.219806][ T8273] RDX: 0000000000000019 RSI: ffffffff87a3e119 RDI: 00000000000000c8 [ 148.239357][ T8273] RBP: ffff888059fab440 R08: ffff888059918440 R09: 0000000000000001 [ 148.260651][ T8273] R10: ffffffff8c588b4f R11: fffffbfff18b1169 R12: ffff888059fab97e [ 148.270398][ T8273] R13: 0000000000000000 R14: ffff888086b6e540 R15: 0000000000000000 [ 148.279064][ T8273] FS: 00007f1dd98c7700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 148.292274][ T8273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.299176][ T8273] CR2: 00000000026a29b8 CR3: 000000008e1b8000 CR4: 00000000001406f0 [ 148.307706][ T8273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.315870][ T8273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.324964][ T8273] Kernel panic - not syncing: Fatal exception [ 148.332187][ T8273] Kernel Offset: disabled [ 148.336510][ T8273] Rebooting in 86400 seconds..