[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. 2020/05/24 02:48:13 fuzzer started 2020/05/24 02:48:14 dialing manager at 10.128.0.26:34283 2020/05/24 02:48:14 syscalls: 3055 2020/05/24 02:48:14 code coverage: enabled 2020/05/24 02:48:14 comparison tracing: enabled 2020/05/24 02:48:14 extra coverage: enabled 2020/05/24 02:48:14 setuid sandbox: enabled 2020/05/24 02:48:14 namespace sandbox: enabled 2020/05/24 02:48:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/24 02:48:14 fault injection: enabled 2020/05/24 02:48:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/24 02:48:14 net packet injection: enabled 2020/05/24 02:48:14 net device setup: enabled 2020/05/24 02:48:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/24 02:48:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/24 02:48:14 USB emulation: enabled 02:50:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f7934849ac00a80a57802", 0x11, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) syzkaller login: [ 169.209971][ T6824] IPVS: ftp: loaded support on port[0] = 21 [ 169.340997][ T6824] chnl_net:caif_netlink_parms(): no params data found 02:50:05 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 169.422183][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.430716][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.440708][ T6824] device bridge_slave_0 entered promiscuous mode [ 169.457184][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.464414][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.472556][ T6824] device bridge_slave_1 entered promiscuous mode [ 169.500619][ T6824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.513176][ T6824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.545954][ T6824] team0: Port device team_slave_0 added [ 169.558156][ T6824] team0: Port device team_slave_1 added [ 169.586848][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.593838][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.622466][ T6824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.637078][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.644169][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.686581][ T6824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.710551][ T6978] IPVS: ftp: loaded support on port[0] = 21 02:50:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000000c0)=""/95) [ 169.811794][ T6824] device hsr_slave_0 entered promiscuous mode [ 169.874837][ T6824] device hsr_slave_1 entered promiscuous mode [ 169.995457][ T6992] IPVS: ftp: loaded support on port[0] = 21 02:50:06 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) socket(0x5, 0xa, 0xffffffff) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x2010, r0, 0xfffffffffffffffc) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) [ 170.394772][ T6978] chnl_net:caif_netlink_parms(): no params data found 02:50:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000561000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) [ 170.580745][ T6992] chnl_net:caif_netlink_parms(): no params data found [ 170.642355][ T6824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.717693][ T6824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.803751][ T6824] netdevsim netdevsim0 netdevsim2: renamed from eth2 02:50:07 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x3e9, 0x800, 0x0, 0x0, {0xf7, 0x0, 0x2, 0x0, 0x1}}, 0x34}}, 0x2000c040) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 170.869612][ T7256] IPVS: ftp: loaded support on port[0] = 21 [ 170.895676][ T6824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.948912][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.957289][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.973175][ T6978] device bridge_slave_0 entered promiscuous mode [ 171.032853][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.040161][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.050358][ T6978] device bridge_slave_1 entered promiscuous mode [ 171.060655][ T7264] IPVS: ftp: loaded support on port[0] = 21 [ 171.094934][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.102748][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.114012][ T6992] device bridge_slave_0 entered promiscuous mode [ 171.153565][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.161747][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.172345][ T6992] device bridge_slave_1 entered promiscuous mode [ 171.182107][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.195961][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.240477][ T7307] IPVS: ftp: loaded support on port[0] = 21 [ 171.278627][ T6978] team0: Port device team_slave_0 added [ 171.317741][ T6978] team0: Port device team_slave_1 added [ 171.339185][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.352034][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.433594][ T6992] team0: Port device team_slave_0 added [ 171.442844][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.451002][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.478350][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.494907][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.501912][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.528396][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.568315][ T6992] team0: Port device team_slave_1 added [ 171.676822][ T7256] chnl_net:caif_netlink_parms(): no params data found [ 171.757564][ T6978] device hsr_slave_0 entered promiscuous mode [ 171.805112][ T6978] device hsr_slave_1 entered promiscuous mode [ 171.864627][ T6978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.864827][ T6978] Cannot create hsr debugfs directory [ 171.879388][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.886440][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.912562][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.963287][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.970626][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.997379][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.228041][ T6992] device hsr_slave_0 entered promiscuous mode [ 172.295256][ T6992] device hsr_slave_1 entered promiscuous mode [ 172.344697][ T6992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.352423][ T6992] Cannot create hsr debugfs directory [ 172.359762][ T7307] chnl_net:caif_netlink_parms(): no params data found [ 172.410060][ T7264] chnl_net:caif_netlink_parms(): no params data found [ 172.426111][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.433226][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.441956][ T7256] device bridge_slave_0 entered promiscuous mode [ 172.475807][ T6824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.491007][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.499353][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.507835][ T7256] device bridge_slave_1 entered promiscuous mode [ 172.588985][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.630202][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.707287][ T7256] team0: Port device team_slave_0 added [ 172.746245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.761168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.787059][ T6824] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.808353][ T7256] team0: Port device team_slave_1 added [ 172.820393][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.831811][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.840499][ T7307] device bridge_slave_0 entered promiscuous mode [ 172.850540][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.858142][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.867421][ T7307] device bridge_slave_1 entered promiscuous mode [ 172.941280][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.948537][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.976269][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.999175][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.006278][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.036257][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.048174][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.056620][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.066606][ T7264] device bridge_slave_0 entered promiscuous mode [ 173.075697][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.082769][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.091321][ T7264] device bridge_slave_1 entered promiscuous mode [ 173.121736][ T6978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.169943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.178939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.189201][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.196564][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.210238][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.246686][ T6978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.294122][ T6978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.348225][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.359342][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.377246][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.447267][ T7256] device hsr_slave_0 entered promiscuous mode [ 173.485138][ T7256] device hsr_slave_1 entered promiscuous mode [ 173.524628][ T7256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.532237][ T7256] Cannot create hsr debugfs directory [ 173.540584][ T6978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.577878][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.590883][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.600333][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.607503][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.638993][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.661536][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.670666][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.732121][ T7307] team0: Port device team_slave_0 added [ 173.752380][ T7307] team0: Port device team_slave_1 added [ 173.758701][ T6992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.823072][ T6992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.869452][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.878277][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.907411][ T7264] team0: Port device team_slave_0 added [ 173.917483][ T6992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.997400][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.004618][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.031586][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.051730][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.059830][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.070233][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.086335][ T7264] team0: Port device team_slave_1 added [ 174.092292][ T6992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.155388][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.162396][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.190682][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.231843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.241693][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.281394][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.291945][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.323016][ T7264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.335267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.343838][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.386967][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.403480][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.411955][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.444507][ T7264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.538813][ T7307] device hsr_slave_0 entered promiscuous mode [ 174.605065][ T7307] device hsr_slave_1 entered promiscuous mode [ 174.644714][ T7307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.652459][ T7307] Cannot create hsr debugfs directory [ 174.716797][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.729639][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.805428][ T6824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.880061][ T7264] device hsr_slave_0 entered promiscuous mode [ 174.944982][ T7264] device hsr_slave_1 entered promiscuous mode [ 174.984667][ T7264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.994041][ T7264] Cannot create hsr debugfs directory [ 175.003387][ T7256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.085959][ T7256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.138513][ T7256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.219326][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.227471][ T7256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.345771][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.354046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.398383][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.413200][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.425179][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.473852][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.505977][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.520255][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.528870][ T2487] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.536030][ T2487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.551195][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.562203][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.572766][ T2487] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.580755][ T2487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.589675][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.637344][ T7307] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.670248][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.683986][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.719227][ T7307] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.757896][ T7307] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.823250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.837016][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.847556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.857732][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.869902][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.880494][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.900603][ T7307] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.976109][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.989129][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.998066][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.008238][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.017893][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.027238][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.036374][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.043643][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.053717][ T6824] device veth0_vlan entered promiscuous mode [ 176.086216][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.094387][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.109548][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.121545][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.133920][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.143719][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.151726][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.161064][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.171678][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.181781][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.190855][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.214453][ T6824] device veth1_vlan entered promiscuous mode [ 176.280740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.290152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.304639][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.313492][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.324404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.334278][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.343674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.353125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.362579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.374099][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.384439][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.404600][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.412971][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.423639][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.446580][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.514411][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.526771][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.539739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.573360][ T7264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.617658][ T7264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.677668][ T7264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.738414][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.753811][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.778049][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.794840][ T6824] device veth0_macvtap entered promiscuous mode [ 176.804411][ T7264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.863003][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.874126][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.883512][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.894894][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.904029][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.950570][ T7256] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.961227][ T6824] device veth1_macvtap entered promiscuous mode [ 176.999092][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.017423][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.028531][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.038803][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.046010][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.096171][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.109789][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.118970][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.132679][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.142588][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.151413][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.158696][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.186035][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.198644][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.221518][ T6978] device veth0_vlan entered promiscuous mode [ 177.228660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.238306][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.249406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.259136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.267923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.277647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.286520][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.309524][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.332479][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.341673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.356869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.366008][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.375776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.384996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.395474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.415349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.423635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.433426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.442590][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.453070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.489831][ T7256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.506296][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.538604][ T7307] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.548743][ T6978] device veth1_vlan entered promiscuous mode [ 177.566006][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.575690][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.585538][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.594048][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.603666][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.822007][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.856353][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.875609][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.895431][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.902715][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.924960][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.933998][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.959400][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.966629][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.987328][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.020018][ T8078] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.061930][ T6992] device veth0_vlan entered promiscuous mode [ 178.075814][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.083371][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.100623][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.113229][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.135017][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.160925][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.170301][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.180740][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.221130][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.230826][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.241584][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.252417][ T6992] device veth1_vlan entered promiscuous mode [ 178.265324][ T6978] device veth0_macvtap entered promiscuous mode [ 178.283172][ T6978] device veth1_macvtap entered promiscuous mode [ 178.307504][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.315537][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.323934][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.334795][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.342898][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.353545][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.405601][ T7264] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.417672][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.427562][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.436337][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.446843][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.455709][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.464186][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.473624][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.482912][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.492620][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.501939][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.518898][ T7307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.536369][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.549086][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.560894][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.573368][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.587780][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.596914][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.606243][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.613312][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.622549][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.631836][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.641510][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 02:50:14 executing program 0: [ 178.651523][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.662372][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.672234][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.681689][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.688877][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state 02:50:15 executing program 0: [ 178.725137][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 02:50:15 executing program 0: [ 178.776469][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.794757][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.837410][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.855620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.864407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 02:50:15 executing program 0: [ 178.896078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.915437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.924271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:50:15 executing program 0: [ 178.941532][ T6992] device veth0_macvtap entered promiscuous mode [ 178.962693][ T7256] device veth0_vlan entered promiscuous mode 02:50:15 executing program 0: [ 179.036347][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.046446][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.067888][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.076941][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.086857][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.104916][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.128098][ T6992] device veth1_macvtap entered promiscuous mode [ 179.161238][ T7256] device veth1_vlan entered promiscuous mode 02:50:15 executing program 0: [ 179.173869][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.182797][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.191614][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.201976][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.226157][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.239931][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.347363][ T7307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.367977][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.384213][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.400031][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.445093][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.457130][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.467808][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.479558][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.491062][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.511603][ T7264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.534142][ T7264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.607427][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.616936][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.641888][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.679034][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.697294][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.724612][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.744736][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.757656][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.771960][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.803058][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.819691][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:50:16 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 179.915112][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.924126][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.097324][ T7256] device veth0_macvtap entered promiscuous mode [ 180.128216][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.145122][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.154385][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.169155][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.181182][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.217893][ T7256] device veth1_macvtap entered promiscuous mode [ 180.256998][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.268621][ T7307] device veth0_vlan entered promiscuous mode [ 180.280693][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.290010][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 02:50:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000000c0)=""/95) [ 180.316460][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.324298][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.353777][ T7307] device veth1_vlan entered promiscuous mode [ 180.419125][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.438310][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.452080][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.465161][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.480467][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.493114][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.509025][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.537425][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.546370][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.576701][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.587028][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.601803][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.616334][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.627059][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.638408][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.650325][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.662818][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.676160][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.719369][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.729256][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.759575][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.771451][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.851662][ T7307] device veth0_macvtap entered promiscuous mode [ 180.862757][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.872042][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.891923][ T7264] device veth0_vlan entered promiscuous mode [ 180.913280][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.922102][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.930819][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.948746][ T7264] device veth1_vlan entered promiscuous mode [ 181.000033][ T7307] device veth1_macvtap entered promiscuous mode [ 181.010278][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.019422][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.027979][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.036566][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.136082][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.159936][ T7264] device veth0_macvtap entered promiscuous mode [ 181.169247][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.179242][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.196130][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.214425][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.232250][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.243006][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.261015][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.271600][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.285512][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.299894][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.311998][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.327921][ T7264] device veth1_macvtap entered promiscuous mode [ 181.338293][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.348383][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.357130][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.366322][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.412626][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.444653][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.465554][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.492488][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.503084][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 02:50:17 executing program 3: [ 181.514794][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.525387][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.537652][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.549879][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.582093][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.591558][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.610726][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.625290][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.641390][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.652940][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.662966][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.673561][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.683648][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.703889][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.714406][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.725806][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.739397][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.761452][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.773095][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.797034][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.819635][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.832131][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.862527][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.874896][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.887189][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.897675][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.909886][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.920341][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.931318][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.944704][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.990384][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.999202][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.232731][ T8141] ptrace attach of "/root/syz-executor.5"[8140] was attempted by "/root/syz-executor.5"[8141] [ 182.516468][ C1] hrtimer: interrupt took 37756 ns 02:50:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000561000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 02:50:19 executing program 0: 02:50:19 executing program 2: 02:50:19 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:19 executing program 3: 02:50:19 executing program 5: 02:50:19 executing program 3: 02:50:19 executing program 5: 02:50:19 executing program 2: 02:50:19 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:19 executing program 0: 02:50:19 executing program 3: 02:50:20 executing program 3: 02:50:20 executing program 5: 02:50:20 executing program 2: 02:50:20 executing program 0: 02:50:20 executing program 4: 02:50:20 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 02:50:20 executing program 0: 02:50:20 executing program 2: 02:50:20 executing program 3: 02:50:20 executing program 5: 02:50:20 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 02:50:20 executing program 2: 02:50:20 executing program 5: 02:50:20 executing program 0: 02:50:20 executing program 3: 02:50:20 executing program 5: 02:50:20 executing program 4: 02:50:20 executing program 2: 02:50:20 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 02:50:20 executing program 0: 02:50:20 executing program 3: 02:50:20 executing program 5: 02:50:21 executing program 2: 02:50:21 executing program 0: 02:50:21 executing program 3: 02:50:21 executing program 4: 02:50:21 executing program 0: 02:50:21 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:21 executing program 2: 02:50:21 executing program 3: 02:50:21 executing program 0: 02:50:21 executing program 4: 02:50:21 executing program 3: 02:50:21 executing program 5: 02:50:21 executing program 2: 02:50:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:21 executing program 4: 02:50:21 executing program 0: 02:50:21 executing program 3: 02:50:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602344324adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8e", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:50:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) ioperm(0x0, 0x40b1, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_setup(0xb, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={0x0}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x11) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) fallocate(r1, 0x8, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) 02:50:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:21 executing program 0: 02:50:21 executing program 4: 02:50:21 executing program 3: socket(0x0, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x35295) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) clone(0xd48d24434713bd52, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:50:21 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) 02:50:21 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/70, 0x46) 02:50:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) 02:50:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x800001200006) splice(r2, 0x0, r3, 0x0, 0x4000000000003fb, 0x0) 02:50:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) 02:50:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5409, 0x0) 02:50:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) ioperm(0x0, 0x40b1, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_setup(0xb, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={0x0}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x11) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) fallocate(r1, 0x8, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) 02:50:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) ioperm(0x0, 0x40b1, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_setup(0xb, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={0x0}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x11) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) fallocate(r1, 0x8, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) 02:50:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = eventfd2(0x10001, 0x800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) unlink(&(0x7f0000001e00)='./bus\x00') semop(0x0, &(0x7f0000000380)=[{0x1, 0xffff}], 0x1) semop(0x0, &(0x7f0000000380)=[{0x1, 0x2e5, 0x800}], 0x1) 02:50:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 188.618220][ T8308] ptrace attach of "/root/syz-executor.5"[8307] was attempted by "/root/syz-executor.5"[8308] 02:50:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) 02:50:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_setup(0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={0x0}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x11) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) fallocate(r1, 0x8, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYRES16, @ANYBLOB="cb38686a617f4cff00"], 0x3}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 02:50:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:50:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f0000000080)=0xf) 02:50:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) 02:50:25 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 02:50:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) 02:50:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2d, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "0c9e089c1b4a8186010000000000007ea24a65d77f6ea7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300000000000000000079ff89a853e8cb4700"}, 0xd8) 02:50:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 02:50:25 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, 0x17, 0x101, 0x0, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="f6"]}]}, 0x1c}}, 0x0) 02:50:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001740)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close(r0) 02:50:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:50:25 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 02:50:25 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x18ec3, 0x0) 02:50:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) [ 189.713321][ T8360] input: syz1 as /devices/virtual/input/input5 [ 189.759101][ T8357] ================================================================== [ 189.768219][ T8357] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 189.775431][ T8357] Read of size 8 at addr ffff88809f7a8158 by task syz-executor.4/8357 [ 189.783580][ T8357] [ 189.785917][ T8357] CPU: 1 PID: 8357 Comm: syz-executor.4 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 189.795716][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.805949][ T8357] Call Trace: [ 189.809251][ T8357] dump_stack+0x18f/0x20d [ 189.813605][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 189.818477][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 189.823350][ T8357] print_address_description.constprop.0.cold+0xd3/0x413 [ 189.830477][ T8357] ? cdev_device_del+0x69/0x80 [ 189.835262][ T8357] ? evdev_disconnect+0x3d/0xb0 [ 189.840317][ T8357] ? __input_unregister_device+0x1b0/0x430 [ 189.846140][ T8357] ? input_unregister_device+0xb4/0xf0 [ 189.851612][ T8357] ? uinput_destroy_device+0x1e2/0x240 [ 189.857088][ T8357] ? vprintk_func+0x97/0x1a6 [ 189.861704][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 189.866574][ T8357] kasan_report.cold+0x1f/0x37 [ 189.871365][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 189.876234][ T8357] __mutex_lock+0x1033/0x13c0 [ 189.880941][ T8357] ? evdev_cleanup+0x21/0x190 [ 189.885632][ T8357] ? print_usage_bug+0x240/0x240 [ 189.890586][ T8357] ? trace_hardirqs_off+0x50/0x220 [ 189.895716][ T8357] ? mutex_trylock+0x2c0/0x2c0 [ 189.900500][ T8357] ? mark_held_locks+0x9f/0xe0 [ 189.905279][ T8357] ? kfree+0x1eb/0x2b0 02:50:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 02:50:26 executing program 5: 02:50:26 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000300010005}) 02:50:26 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x41, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) [ 189.909365][ T8357] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 189.915360][ T8357] ? kfree_const+0x51/0x60 [ 189.919798][ T8357] ? evdev_cleanup+0x21/0x190 [ 189.924488][ T8357] evdev_cleanup+0x21/0x190 [ 189.929019][ T8357] evdev_disconnect+0x45/0xb0 [ 189.933973][ T8357] __input_unregister_device+0x1b0/0x430 [ 189.939624][ T8357] input_unregister_device+0xb4/0xf0 [ 189.945015][ T8357] uinput_destroy_device+0x1e2/0x240 [ 189.950320][ T8357] ? uinput_destroy_device+0x240/0x240 [ 189.955798][ T8357] uinput_release+0x37/0x50 [ 189.960833][ T8357] __fput+0x33e/0x880 [ 189.964838][ T8357] task_work_run+0xf4/0x1b0 [ 189.969346][ T8357] exit_to_usermode_loop+0x2fa/0x360 [ 189.974637][ T8357] do_syscall_64+0x6b1/0x7d0 [ 189.979226][ T8357] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 189.985735][ T8357] RIP: 0033:0x416621 [ 189.989714][ T8357] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 190.010343][ T8357] RSP: 002b:00007ffcb8672250 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 190.018738][ T8357] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 190.026708][ T8357] RDX: 0000001b2d520000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 190.035616][ T8357] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 190.043597][ T8357] R10: 00007ffcb8672340 R11: 0000000000000293 R12: 000000000078c900 [ 190.051554][ T8357] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 190.059653][ T8357] [ 190.061977][ T8357] Allocated by task 8360: [ 190.066331][ T8357] save_stack+0x1b/0x40 [ 190.070527][ T8357] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 190.076590][ T8357] kmem_cache_alloc_trace+0x153/0x7d0 [ 190.081942][ T8357] evdev_connect+0x80/0x4d0 [ 190.086430][ T8357] input_attach_handler+0x194/0x200 [ 190.091632][ T8357] input_register_device.cold+0xf5/0x246 [ 190.097255][ T8357] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 190.103232][ T8357] ksys_ioctl+0x11a/0x180 [ 190.107564][ T8357] __x64_sys_ioctl+0x6f/0xb0 [ 190.112162][ T8357] do_syscall_64+0xf6/0x7d0 [ 190.116648][ T8357] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 190.122516][ T8357] [ 190.124827][ T8357] Freed by task 8357: [ 190.128800][ T8357] save_stack+0x1b/0x40 [ 190.132939][ T8357] __kasan_slab_free+0xf7/0x140 [ 190.137770][ T8357] kfree+0x109/0x2b0 [ 190.141654][ T8357] device_release+0x71/0x200 [ 190.146231][ T8357] kobject_put+0x1c8/0x2f0 [ 190.150643][ T8357] cdev_device_del+0x69/0x80 [ 190.155231][ T8357] evdev_disconnect+0x3d/0xb0 [ 190.160045][ T8357] __input_unregister_device+0x1b0/0x430 [ 190.165684][ T8357] input_unregister_device+0xb4/0xf0 [ 190.170961][ T8357] uinput_destroy_device+0x1e2/0x240 [ 190.176233][ T8357] uinput_release+0x37/0x50 [ 190.180719][ T8357] __fput+0x33e/0x880 [ 190.184696][ T8357] task_work_run+0xf4/0x1b0 [ 190.189186][ T8357] exit_to_usermode_loop+0x2fa/0x360 [ 190.194453][ T8357] do_syscall_64+0x6b1/0x7d0 [ 190.199028][ T8357] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 190.204909][ T8357] [ 190.207223][ T8357] The buggy address belongs to the object at ffff88809f7a8000 [ 190.207223][ T8357] which belongs to the cache kmalloc-2k of size 2048 [ 190.221369][ T8357] The buggy address is located 344 bytes inside of [ 190.221369][ T8357] 2048-byte region [ffff88809f7a8000, ffff88809f7a8800) [ 190.236643][ T8357] The buggy address belongs to the page: [ 190.242311][ T8357] page:ffffea00027dea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 190.251518][ T8357] flags: 0xfffe0000000200(slab) [ 190.256361][ T8357] raw: 00fffe0000000200 ffffea000251bc08 ffffea0002507f48 ffff8880aa000e00 [ 190.264934][ T8357] raw: 0000000000000000 ffff88809f7a8000 0000000100000001 0000000000000000 [ 190.273512][ T8357] page dumped because: kasan: bad access detected [ 190.279903][ T8357] [ 190.282211][ T8357] Memory state around the buggy address: [ 190.287835][ T8357] ffff88809f7a8000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.295967][ T8357] ffff88809f7a8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.304014][ T8357] >ffff88809f7a8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 02:50:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 190.312144][ T8357] ^ [ 190.319100][ T8357] ffff88809f7a8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.327181][ T8357] ffff88809f7a8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.335749][ T8357] ================================================================== [ 190.343813][ T8357] Disabling lock debugging due to kernel taint 02:50:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 02:50:26 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f00000013c0)={0x0, ""/4111}, 0x106e, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) r1 = msgget$private(0x0, 0xfffffffffffff4b8) msgsnd(r1, &(0x7f0000000440)={0x3, "3b10bd201b7630a5f690a9b351cc8eda1750f912a9e3fae046dc7b9f60da7679f993db0022e3f6c3e023ba7afd21c661eb8a6bf965e7c25105c0137670431b1402b9bec5667e57a149e294ec46a7dccfc108b9d519e4da6586de628e51404bf0e22fb6abf90f09ca6995da7210e88195b04459f21828c434695a5dff0daa44c5310a93b6f46a94282eb2b6ded3329bd3d809de9399222e5d90bf2b98cf9d4a6b09428b7613d21ff358322af4b9b2177f27861803b0727fb65c3c72069a6c02c50b19e5c648c41abe891057eddbce1f082a1579e253997d676dbb74512cec0000000000000000"}, 0xee, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, 0x0, 0x0) msgrcv(r1, &(0x7f0000000040)={0x0, ""/176}, 0xb8, 0x0, 0x1c00) [ 190.377587][ T8382] EXT4-fs (loop3): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 190.428496][ T8357] Kernel panic - not syncing: panic_on_warn set ... [ 190.435134][ T8357] CPU: 0 PID: 8357 Comm: syz-executor.4 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 190.446351][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.456515][ T8357] Call Trace: [ 190.459822][ T8357] dump_stack+0x18f/0x20d [ 190.464247][ T8357] ? __mutex_lock+0xf50/0x13c0 [ 190.469009][ T8357] panic+0x2e3/0x75c [ 190.473098][ T8357] ? __warn_printk+0xf3/0xf3 [ 190.477670][ T8357] ? preempt_schedule_common+0x5e/0xc0 [ 190.483109][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 190.487967][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 190.492826][ T8357] ? preempt_schedule_thunk+0x16/0x18 [ 190.498203][ T8357] ? trace_hardirqs_on+0x55/0x230 [ 190.503383][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 190.508220][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 190.513064][ T8357] end_report+0x4d/0x53 [ 190.517266][ T8357] kasan_report.cold+0xd/0x37 [ 190.521940][ T8357] ? __mutex_lock+0x1033/0x13c0 [ 190.526791][ T8357] __mutex_lock+0x1033/0x13c0 [ 190.531457][ T8357] ? evdev_cleanup+0x21/0x190 [ 190.536112][ T8357] ? print_usage_bug+0x240/0x240 [ 190.541029][ T8357] ? trace_hardirqs_off+0x50/0x220 [ 190.546134][ T8357] ? mutex_trylock+0x2c0/0x2c0 [ 190.550890][ T8357] ? mark_held_locks+0x9f/0xe0 [ 190.555638][ T8357] ? kfree+0x1eb/0x2b0 [ 190.559774][ T8357] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 190.565746][ T8357] ? kfree_const+0x51/0x60 [ 190.570178][ T8357] ? evdev_cleanup+0x21/0x190 [ 190.574830][ T8357] evdev_cleanup+0x21/0x190 [ 190.579372][ T8357] evdev_disconnect+0x45/0xb0 [ 190.584167][ T8357] __input_unregister_device+0x1b0/0x430 [ 190.589938][ T8357] input_unregister_device+0xb4/0xf0 [ 190.595321][ T8357] uinput_destroy_device+0x1e2/0x240 [ 190.600601][ T8357] ? uinput_destroy_device+0x240/0x240 [ 190.606131][ T8357] uinput_release+0x37/0x50 [ 190.610629][ T8357] __fput+0x33e/0x880 [ 190.614610][ T8357] task_work_run+0xf4/0x1b0 [ 190.619202][ T8357] exit_to_usermode_loop+0x2fa/0x360 [ 190.624477][ T8357] do_syscall_64+0x6b1/0x7d0 [ 190.629057][ T8357] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 190.634945][ T8357] RIP: 0033:0x416621 [ 190.638833][ T8357] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 190.659304][ T8357] RSP: 002b:00007ffcb8672250 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 190.667710][ T8357] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 190.675879][ T8357] RDX: 0000001b2d520000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 190.683887][ T8357] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 190.691848][ T8357] R10: 00007ffcb8672340 R11: 0000000000000293 R12: 000000000078c900 [ 190.699812][ T8357] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 190.710578][ T8357] Kernel Offset: disabled [ 190.715077][ T8357] Rebooting in 86400 seconds..