Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.122' (ECDSA) to the list of known hosts. 2020/05/22 16:21:43 fuzzer started 2020/05/22 16:21:43 dialing manager at 10.128.0.26:38661 2020/05/22 16:21:46 syscalls: 3055 2020/05/22 16:21:46 code coverage: enabled 2020/05/22 16:21:46 comparison tracing: enabled 2020/05/22 16:21:46 extra coverage: enabled 2020/05/22 16:21:46 setuid sandbox: enabled 2020/05/22 16:21:46 namespace sandbox: enabled 2020/05/22 16:21:46 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/22 16:21:46 fault injection: enabled 2020/05/22 16:21:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/22 16:21:46 net packet injection: enabled 2020/05/22 16:21:46 net device setup: enabled 2020/05/22 16:21:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/22 16:21:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/22 16:21:46 USB emulation: enabled 16:22:24 executing program 0: futex(&(0x7f0000000100), 0x800000000005, 0x0, 0x0, 0x0, 0x0) syzkaller login: [ 96.993216][ T6818] IPVS: ftp: loaded support on port[0] = 21 16:22:24 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0xffffffffffffffff) [ 97.138483][ T6818] chnl_net:caif_netlink_parms(): no params data found [ 97.286325][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.302652][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.316967][ T6818] device bridge_slave_0 entered promiscuous mode [ 97.327943][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.335572][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.344963][ T6818] device bridge_slave_1 entered promiscuous mode [ 97.375871][ T6818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.389090][ T6818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.393215][ T6948] IPVS: ftp: loaded support on port[0] = 21 [ 97.456372][ T6818] team0: Port device team_slave_0 added [ 97.467545][ T6818] team0: Port device team_slave_1 added 16:22:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) socketpair$unix(0x1, 0x40000000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) [ 97.500751][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.508063][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.536192][ T6818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.561215][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.581887][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.651372][ T6818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 16:22:25 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x0, 0x0}) [ 97.796061][ T6818] device hsr_slave_0 entered promiscuous mode [ 97.852468][ T6818] device hsr_slave_1 entered promiscuous mode [ 98.000689][ T7043] IPVS: ftp: loaded support on port[0] = 21 [ 98.037948][ T7052] IPVS: ftp: loaded support on port[0] = 21 [ 98.047142][ T6948] chnl_net:caif_netlink_parms(): no params data found 16:22:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050033000318000005002f0001000000080034000600000008000300", @ANYRES32=r2], 0x34}}, 0x0) [ 98.476816][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.488471][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.499803][ T6948] device bridge_slave_0 entered promiscuous mode [ 98.532429][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.539908][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.554578][ T7203] IPVS: ftp: loaded support on port[0] = 21 [ 98.572256][ T6948] device bridge_slave_1 entered promiscuous mode [ 98.583109][ T7043] chnl_net:caif_netlink_parms(): no params data found 16:22:25 executing program 5: r0 = eventfd2(0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) read(r0, &(0x7f00000001c0)=""/75, 0x4b) r2 = socket(0x10, 0x80002, 0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) [ 98.658266][ T6818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.720311][ T6818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.764535][ T6818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.818026][ T6818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.885796][ T6948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.898992][ T6948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.026169][ T6948] team0: Port device team_slave_0 added [ 99.026322][ T7314] IPVS: ftp: loaded support on port[0] = 21 [ 99.054245][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 99.095762][ T6948] team0: Port device team_slave_1 added [ 99.136497][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.146033][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.155516][ T7043] device bridge_slave_0 entered promiscuous mode [ 99.179080][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.186985][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.215743][ T6948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.262078][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.269409][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.285777][ T7043] device bridge_slave_1 entered promiscuous mode [ 99.306390][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.313494][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.340622][ T6948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.407691][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.449153][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.506827][ T6948] device hsr_slave_0 entered promiscuous mode [ 99.551576][ T6948] device hsr_slave_1 entered promiscuous mode [ 99.591240][ T6948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.599095][ T6948] Cannot create hsr debugfs directory [ 99.612377][ T7203] chnl_net:caif_netlink_parms(): no params data found [ 99.638990][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.646361][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.655556][ T7052] device bridge_slave_0 entered promiscuous mode [ 99.695837][ T7043] team0: Port device team_slave_0 added [ 99.703602][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.710689][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.719986][ T7052] device bridge_slave_1 entered promiscuous mode [ 99.742044][ T7043] team0: Port device team_slave_1 added [ 99.808159][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.822145][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.849743][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.856973][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.883009][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.896206][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.903237][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.929236][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.968566][ T7052] team0: Port device team_slave_0 added [ 99.977611][ T7052] team0: Port device team_slave_1 added [ 100.146808][ T7043] device hsr_slave_0 entered promiscuous mode [ 100.191590][ T7043] device hsr_slave_1 entered promiscuous mode [ 100.231379][ T7043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.239218][ T7043] Cannot create hsr debugfs directory [ 100.255612][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.263567][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.272168][ T7203] device bridge_slave_0 entered promiscuous mode [ 100.282204][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.289267][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.298879][ T7203] device bridge_slave_1 entered promiscuous mode [ 100.311412][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.318363][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.346858][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.359780][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.367187][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.393589][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.418333][ T7314] chnl_net:caif_netlink_parms(): no params data found [ 100.514472][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.535451][ T6818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.574022][ T7052] device hsr_slave_0 entered promiscuous mode [ 100.601371][ T7052] device hsr_slave_1 entered promiscuous mode [ 100.651036][ T7052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.658647][ T7052] Cannot create hsr debugfs directory [ 100.687282][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.778752][ T6948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.859166][ T7203] team0: Port device team_slave_0 added [ 100.877531][ T6948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.939251][ T6818] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.948352][ T7203] team0: Port device team_slave_1 added [ 100.986857][ T6948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.025210][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.035305][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.057917][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.066451][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.093856][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.109470][ T6948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.154982][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.162817][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.171763][ T7314] device bridge_slave_0 entered promiscuous mode [ 101.183484][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.190443][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.220705][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.233413][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.246265][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.255770][ T2658] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.263075][ T2658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.272271][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.281436][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.289845][ T2658] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.296960][ T2658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.308281][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.320876][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.327993][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.337223][ T7314] device bridge_slave_1 entered promiscuous mode [ 101.429276][ T7203] device hsr_slave_0 entered promiscuous mode [ 101.471249][ T7203] device hsr_slave_1 entered promiscuous mode [ 101.511151][ T7203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.518735][ T7203] Cannot create hsr debugfs directory [ 101.525334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.535737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.594925][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.610012][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.637544][ T7043] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.677532][ T7043] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.724728][ T7043] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.778722][ T7043] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.833117][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.843055][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.854160][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.888090][ T7314] team0: Port device team_slave_0 added [ 101.897506][ T7314] team0: Port device team_slave_1 added [ 101.956375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.965757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.998798][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.007562][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.035939][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.052908][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.059876][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.087391][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.133473][ T7052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.174699][ T7052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.224066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.232532][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.315452][ T7314] device hsr_slave_0 entered promiscuous mode [ 102.372485][ T7314] device hsr_slave_1 entered promiscuous mode [ 102.411041][ T7314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.418622][ T7314] Cannot create hsr debugfs directory [ 102.436324][ T7052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.493471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.505786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.544136][ T7052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.679141][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.687902][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.771365][ T6818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.788035][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.809940][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.837805][ T7203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.905690][ T7203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.945782][ T7203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.002856][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.015044][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.023938][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.037213][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.051930][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.092630][ T7203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.142236][ T6948] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.153550][ T7314] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.207592][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.215884][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.224845][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.234527][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.243995][ T2658] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.251325][ T2658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.259072][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.268252][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.277266][ T2658] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.284576][ T2658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.313774][ T7314] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.367665][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.375918][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.384509][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.395685][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.405020][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.412185][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.420178][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.429974][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.438547][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.445674][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.454382][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.489509][ T7314] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.538859][ T7314] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.585057][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.594401][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.602973][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.611748][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.620297][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.630380][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.639037][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.648839][ T6818] device veth0_vlan entered promiscuous mode [ 103.675369][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.694044][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.704291][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.713760][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.723393][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.732202][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.740076][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.783903][ T6818] device veth1_vlan entered promiscuous mode [ 103.799718][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.809856][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.824070][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.833879][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.842740][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.851278][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.861010][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.869699][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.879152][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.891044][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.899446][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.926537][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.935518][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.958550][ T7043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.972534][ T7043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.995166][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.003725][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.023580][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.058129][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.067994][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.098963][ T6948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.114646][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.125493][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.135669][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.146039][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.155700][ T2658] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.162836][ T2658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.172263][ T6818] device veth0_macvtap entered promiscuous mode [ 104.213565][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.224014][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.233562][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.244749][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.254006][ T2653] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.261282][ T2653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.269397][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.278985][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.287936][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.297032][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.309402][ T6818] device veth1_macvtap entered promiscuous mode [ 104.336470][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.358767][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.367464][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.376227][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.386315][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.396740][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.431935][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.442454][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.451461][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.460313][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.471383][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.479695][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.492737][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.513227][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.523146][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.533149][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.542789][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.551594][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.570686][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.579364][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.608075][ T7203] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.623217][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.648342][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.657609][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.666736][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.676685][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.710731][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.735058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.744678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.753234][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.760298][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.767956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.776929][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.788367][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.795523][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.803660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.829290][ T7043] device veth0_vlan entered promiscuous mode [ 104.854166][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.863022][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.871920][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.882192][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.891285][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.899547][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.908057][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.923560][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.941471][ T6948] device veth0_vlan entered promiscuous mode [ 105.003582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.011775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.019512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.028503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.036639][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.044833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.053006][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.067414][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.093859][ T7043] device veth1_vlan entered promiscuous mode [ 105.103380][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.114147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.123780][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.132700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.142345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.151483][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.158534][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.167307][ T6948] device veth1_vlan entered promiscuous mode [ 105.242786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.251317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.259500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.268400][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.277050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.286567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.296140][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.303306][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.312268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 16:22:32 executing program 0: futex(&(0x7f0000000100), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 105.470317][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.478719][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.489732][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.505552][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 16:22:32 executing program 0: futex(&(0x7f0000000100), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 105.526652][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.558597][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.575246][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.596607][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.608193][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 16:22:32 executing program 0: futex(&(0x7f0000000100), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 105.624898][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.649705][ T7043] device veth0_macvtap entered promiscuous mode 16:22:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x5, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 105.676974][ T7203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 16:22:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x5, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 105.748255][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.818573][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.847061][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 16:22:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x5, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 105.867121][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.877720][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.895468][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.915562][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.927676][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 16:22:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x5, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 105.965078][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.976814][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.987513][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.997137][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.010032][ T7043] device veth1_macvtap entered promiscuous mode [ 106.029230][ T6948] device veth0_macvtap entered promiscuous mode [ 106.081886][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.096219][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.108504][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.148206][ T6948] device veth1_macvtap entered promiscuous mode [ 106.162129][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.191633][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.199950][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.214776][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.226116][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.237646][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.262073][ T7052] device veth0_vlan entered promiscuous mode [ 106.271500][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.279226][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.289895][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.299324][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.309389][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.317304][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.335135][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.345898][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.359631][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.382334][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.391309][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.414653][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.427382][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.444125][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.455922][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.467701][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.481710][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.489189][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.498093][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.506145][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.515636][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.529831][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.544251][ T7052] device veth1_vlan entered promiscuous mode [ 106.566733][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.582989][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.596874][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.607384][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.618769][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.743711][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.752443][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.761317][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.770345][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.943151][ T29] audit: type=1800 audit(1590164554.140:2): pid=8106 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="mqueue" ino=35832 res=0 [ 106.993442][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.007027][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.032949][ T7052] device veth0_macvtap entered promiscuous mode [ 107.111671][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.119879][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.141297][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 16:22:34 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0xffffffffffffffff) 16:22:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x298, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'ip6_vti0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) [ 107.194125][ T7052] device veth1_macvtap entered promiscuous mode [ 107.248346][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.262332][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.290932][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.299458][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.302046][ T8119] xt_TCPMSS: Only works on TCP SYN packets [ 107.368209][ T7203] device veth0_vlan entered promiscuous mode [ 107.389206][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.396750][ T8120] xt_TCPMSS: Only works on TCP SYN packets [ 107.410420][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.422057][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.451492][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.485038][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.519798][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.540124][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.560035][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.582079][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.613880][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.635802][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.648953][ T7203] device veth1_vlan entered promiscuous mode [ 107.676206][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.694916][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.706722][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.717319][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.727308][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.737847][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.749843][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.770081][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.778180][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.788095][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.797752][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.808056][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.821724][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.829887][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.838217][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.856517][ T7314] device veth0_vlan entered promiscuous mode [ 107.889406][ T7314] device veth1_vlan entered promiscuous mode [ 107.951346][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.963311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.972883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.055772][ T7203] device veth0_macvtap entered promiscuous mode [ 108.070536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.078833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.117201][ T7203] device veth1_macvtap entered promiscuous mode [ 108.131541][ T8126] md: invalid raid superblock magic on ram0 [ 108.137657][ T8126] md: ram0 does not have a valid v0.0 superblock, not importing! [ 108.151990][ T8126] md: md_import_device returned -22 [ 108.161653][ T8127] md: invalid raid superblock magic on ram0 [ 108.167703][ T8127] md: ram0 does not have a valid v0.0 superblock, not importing! [ 108.175807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.185300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.194231][ T8127] md: md_import_device returned -22 [ 108.205466][ T7314] device veth0_macvtap entered promiscuous mode 16:22:35 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x0, 0x0}) [ 108.236824][ T7314] device veth1_macvtap entered promiscuous mode [ 108.299035][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.312689][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.324079][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.336273][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.347049][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.359071][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.370634][ T8133] md: invalid raid superblock magic on ram0 [ 108.376543][ T8133] md: ram0 does not have a valid v0.0 superblock, not importing! [ 108.387728][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.399105][ T8133] md: md_import_device returned -22 [ 108.404358][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.406563][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.440221][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.448565][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.458560][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.468491][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.493577][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.516775][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.527645][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.547446][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.559827][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.578781][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.589526][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.603080][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.613519][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.625977][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.638460][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.646855][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.657785][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.669434][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.680046][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.690102][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.701036][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.711205][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.721802][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.733513][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.752332][ T2649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.765710][ T2649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.776466][ T2649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.791414][ T2649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.802723][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.813947][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.825504][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.836030][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.845931][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.856422][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.873284][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.884661][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.894596][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.905122][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.917016][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.931278][ T2649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.946803][ T2649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:22:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050033000318000005002f0001000000080034000600000008000300", @ANYRES32=r2], 0x34}}, 0x0) 16:22:36 executing program 5: r0 = eventfd2(0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) read(r0, &(0x7f00000001c0)=""/75, 0x4b) r2 = socket(0x10, 0x80002, 0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 16:22:36 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) socketpair$unix(0x1, 0x40000000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) 16:22:36 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0xffffffffffffffff) 16:22:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x298, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'ip6_vti0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) 16:22:36 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x0, 0x0}) 16:22:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050033000318000005002f0001000000080034000600000008000300", @ANYRES32=r2], 0x34}}, 0x0) [ 109.658295][ T8158] xt_TCPMSS: Only works on TCP SYN packets [ 109.683790][ T8160] md: invalid raid superblock magic on ram0 16:22:36 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0xffffffffffffffff) 16:22:37 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) socketpair$unix(0x1, 0x40000000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) 16:22:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050033000318000005002f0001000000080034000600000008000300", @ANYRES32=r2], 0x34}}, 0x0) [ 109.714707][ T8160] md: ram0 does not have a valid v0.0 superblock, not importing! [ 109.743898][ T8160] md: md_import_device returned -22 16:22:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x298, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'ip6_vti0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) [ 109.920083][ T8170] xt_TCPMSS: Only works on TCP SYN packets 16:22:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x298, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'ip6_vti0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) 16:22:37 executing program 5: r0 = eventfd2(0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) read(r0, &(0x7f00000001c0)=""/75, 0x4b) r2 = socket(0x10, 0x80002, 0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 16:22:37 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) socketpair$unix(0x1, 0x40000000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) 16:22:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x8, 0x2000000020a, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa00000, 0x20000000209}) 16:22:37 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x0, 0x0}) 16:22:37 executing program 1: pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x12, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') [ 110.128978][ T8183] xt_TCPMSS: Only works on TCP SYN packets [ 110.153622][ T8185] md: invalid raid superblock magic on ram0 [ 110.192410][ T8185] md: ram0 does not have a valid v0.0 superblock, not importing! 16:22:37 executing program 5: r0 = eventfd2(0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) read(r0, &(0x7f00000001c0)=""/75, 0x4b) r2 = socket(0x10, 0x80002, 0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) [ 110.236989][ T8185] md: md_import_device returned -22 16:22:37 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) 16:22:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 16:22:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)=0x14) 16:22:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x57}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 110.440684][ T8195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 16:22:37 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) [ 110.503622][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.546205][ T8195] syz-executor.4 (8195) used greatest stack depth: 22960 bytes left 16:22:38 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) 16:22:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)=0x14) 16:22:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 16:22:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x57}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 16:22:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 110.986342][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 111.058950][ T8222] input: syz1 as /devices/virtual/input/input5 [ 111.112825][ T8215] ================================================================== [ 111.121114][ T8215] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 111.128312][ T8215] Read of size 8 at addr ffff8880a345a150 by task syz-executor.5/8215 [ 111.136498][ T8215] [ 111.138833][ T8215] CPU: 0 PID: 8215 Comm: syz-executor.5 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 111.148628][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.158684][ T8215] Call Trace: [ 111.161978][ T8215] dump_stack+0x18f/0x20d [ 111.166316][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 111.171255][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 111.176111][ T8215] print_address_description.constprop.0.cold+0xd3/0x413 [ 111.183139][ T8215] ? mousedev_destroy+0x20/0xa0 [ 111.188019][ T8215] ? __input_unregister_device+0x1b0/0x430 [ 111.193828][ T8215] ? input_unregister_device+0xb4/0xf0 [ 111.199287][ T8215] ? uinput_destroy_device+0x1e2/0x240 [ 111.204774][ T8215] ? uinput_release+0x37/0x50 [ 111.209466][ T8215] ? vprintk_func+0x97/0x1a6 [ 111.214060][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 111.218916][ T8215] kasan_report.cold+0x1f/0x37 [ 111.223682][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 111.228534][ T8215] __mutex_lock+0x1033/0x13c0 [ 111.233215][ T8215] ? print_usage_bug+0x240/0x240 [ 111.238151][ T8215] ? mousedev_cleanup+0x21/0x180 [ 111.243091][ T8215] ? trace_hardirqs_off+0x50/0x220 [ 111.248204][ T8215] ? mutex_trylock+0x2c0/0x2c0 [ 111.252973][ T8215] ? mark_held_locks+0x9f/0xe0 [ 111.257740][ T8215] ? kfree+0x1eb/0x2b0 [ 111.261810][ T8215] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 111.267795][ T8215] ? kfree_const+0x51/0x60 [ 111.273172][ T8215] ? dev_attr_show+0x90/0x90 [ 111.277800][ T8215] ? mousedev_cleanup+0x21/0x180 [ 111.282737][ T8215] mousedev_cleanup+0x21/0x180 [ 111.287508][ T8215] mousedev_destroy+0x28/0xa0 [ 111.292193][ T8215] __input_unregister_device+0x1b0/0x430 [ 111.297832][ T8215] input_unregister_device+0xb4/0xf0 [ 111.303120][ T8215] uinput_destroy_device+0x1e2/0x240 [ 111.308438][ T8215] ? uinput_destroy_device+0x240/0x240 [ 111.313900][ T8215] uinput_release+0x37/0x50 [ 111.318407][ T8215] __fput+0x33e/0x880 [ 111.322395][ T8215] task_work_run+0xf4/0x1b0 [ 111.326902][ T8215] exit_to_usermode_loop+0x2fa/0x360 [ 111.332192][ T8215] do_syscall_64+0x6b1/0x7d0 [ 111.336789][ T8215] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 111.342678][ T8215] RIP: 0033:0x416621 [ 111.346572][ T8215] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 111.366991][ T8215] RSP: 002b:00007ffff3ccdc10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 111.375406][ T8215] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 111.383381][ T8215] RDX: 0000001b2c720000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 111.391355][ T8215] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 111.399329][ T8215] R10: 00007ffff3ccdd00 R11: 0000000000000293 R12: 000000000078c900 [ 111.407395][ T8215] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 111.415382][ T8215] [ 111.417720][ T8215] Allocated by task 8222: [ 111.422058][ T8215] save_stack+0x1b/0x40 [ 111.426218][ T8215] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 111.431853][ T8215] kmem_cache_alloc_trace+0x153/0x7d0 [ 111.437227][ T8215] mousedev_create+0x90/0xa20 [ 111.441903][ T8215] mousedev_connect+0x20/0x280 [ 111.446669][ T8215] input_attach_handler+0x194/0x200 [ 111.451874][ T8215] input_register_device.cold+0xf5/0x246 [ 111.457508][ T8215] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 111.463502][ T8215] ksys_ioctl+0x11a/0x180 [ 111.467833][ T8215] __x64_sys_ioctl+0x6f/0xb0 [ 111.472424][ T8215] do_syscall_64+0xf6/0x7d0 [ 111.476935][ T8215] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 111.482821][ T8215] [ 111.485160][ T8215] Freed by task 8215: [ 111.489142][ T8215] save_stack+0x1b/0x40 [ 111.493297][ T8215] __kasan_slab_free+0xf7/0x140 [ 111.498147][ T8215] kfree+0x109/0x2b0 [ 111.502213][ T8215] device_release+0x71/0x200 [ 111.506803][ T8215] kobject_put+0x1c8/0x2f0 [ 111.511219][ T8215] cdev_device_del+0x69/0x80 [ 111.515810][ T8215] mousedev_destroy+0x20/0xa0 [ 111.520489][ T8215] __input_unregister_device+0x1b0/0x430 [ 111.526121][ T8215] input_unregister_device+0xb4/0xf0 [ 111.531414][ T8215] uinput_destroy_device+0x1e2/0x240 [ 111.536706][ T8215] uinput_release+0x37/0x50 [ 111.541218][ T8215] __fput+0x33e/0x880 [ 111.545199][ T8215] task_work_run+0xf4/0x1b0 [ 111.549705][ T8215] exit_to_usermode_loop+0x2fa/0x360 [ 111.555018][ T8215] do_syscall_64+0x6b1/0x7d0 [ 111.559608][ T8215] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 111.565491][ T8215] [ 111.567817][ T8215] The buggy address belongs to the object at ffff8880a345a000 [ 111.567817][ T8215] which belongs to the cache kmalloc-2k of size 2048 [ 111.581869][ T8215] The buggy address is located 336 bytes inside of [ 111.581869][ T8215] 2048-byte region [ffff8880a345a000, ffff8880a345a800) [ 111.595276][ T8215] The buggy address belongs to the page: [ 111.600919][ T8215] page:ffffea00028d1680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 111.610023][ T8215] flags: 0xfffe0000000200(slab) [ 111.614883][ T8215] raw: 00fffe0000000200 ffffea000265bd08 ffffea00024a4e08 ffff8880aa000e00 [ 111.623481][ T8215] raw: 0000000000000000 ffff8880a345a000 0000000100000001 0000000000000000 [ 111.632071][ T8215] page dumped because: kasan: bad access detected [ 111.638485][ T8215] [ 111.640821][ T8215] Memory state around the buggy address: [ 111.646454][ T8215] ffff8880a345a000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.654518][ T8215] ffff8880a345a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.662583][ T8215] >ffff8880a345a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.670648][ T8215] ^ [ 111.677428][ T8215] ffff8880a345a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.685488][ T8215] ffff8880a345a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.693566][ T8215] ================================================================== [ 111.701733][ T8215] Disabling lock debugging due to kernel taint 16:22:38 executing program 1: pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x12, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') 16:22:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)=0x14) 16:22:38 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) 16:22:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x57}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 16:22:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 111.808293][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 16:22:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)=0x14) 16:22:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 16:22:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x57}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 16:22:39 executing program 0: pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x12, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') [ 111.958910][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 16:22:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 16:22:39 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="a87748c4674f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x0, 0x1b59, 0x18, 0x0, @wg=@data}}}}}, 0x0) [ 112.132920][ T8258] FAT-fs (loop2): bogus number of FAT sectors [ 112.172200][ T8258] FAT-fs (loop2): Can't find a valid FAT filesystem [ 112.226450][ T29] audit: type=1800 audit(1590164559.421:3): pid=8262 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15812 res=0 [ 112.265704][ T29] audit: type=1804 audit(1590164559.421:4): pid=8262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir641262687/syzkaller.J2EUd7/8/file0/bus" dev="sda1" ino=15812 res=1 [ 112.321048][ T29] audit: type=1800 audit(1590164559.421:5): pid=8262 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15812 res=0 [ 112.921678][ T8258] FAT-fs (loop2): bogus number of FAT sectors [ 112.927820][ T8258] FAT-fs (loop2): Can't find a valid FAT filesystem [ 112.936763][ T8215] Kernel panic - not syncing: panic_on_warn set ... [ 112.943408][ T8215] CPU: 1 PID: 8215 Comm: syz-executor.5 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 112.954593][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.964649][ T8215] Call Trace: [ 112.967942][ T8215] dump_stack+0x18f/0x20d [ 112.972270][ T8215] ? __mutex_lock+0xf50/0x13c0 [ 112.977036][ T8215] panic+0x2e3/0x75c [ 112.980934][ T8215] ? __warn_printk+0xf3/0xf3 [ 112.985530][ T8215] ? preempt_schedule_common+0x5e/0xc0 [ 112.990991][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 112.995843][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 113.000700][ T8215] ? preempt_schedule_thunk+0x16/0x18 [ 113.006091][ T8215] ? trace_hardirqs_on+0x55/0x230 [ 113.011207][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 113.017061][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 113.021925][ T8215] end_report+0x4d/0x53 [ 113.026085][ T8215] kasan_report.cold+0xd/0x37 [ 113.030768][ T8215] ? __mutex_lock+0x1033/0x13c0 [ 113.035623][ T8215] __mutex_lock+0x1033/0x13c0 [ 113.040306][ T8215] ? print_usage_bug+0x240/0x240 [ 113.045248][ T8215] ? mousedev_cleanup+0x21/0x180 [ 113.050191][ T8215] ? trace_hardirqs_off+0x50/0x220 [ 113.055305][ T8215] ? mutex_trylock+0x2c0/0x2c0 [ 113.060073][ T8215] ? mark_held_locks+0x9f/0xe0 [ 113.064838][ T8215] ? kfree+0x1eb/0x2b0 [ 113.068908][ T8215] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 113.071555][ T29] audit: type=1800 audit(1590164560.201:6): pid=8262 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15824 res=0 [ 113.074884][ T8215] ? kfree_const+0x51/0x60 [ 113.097664][ T8215] ? dev_attr_show+0x90/0x90 [ 113.102262][ T8215] ? mousedev_cleanup+0x21/0x180 [ 113.107285][ T8215] mousedev_cleanup+0x21/0x180 [ 113.112057][ T8215] mousedev_destroy+0x28/0xa0 [ 113.116756][ T8215] __input_unregister_device+0x1b0/0x430 [ 113.122397][ T8215] input_unregister_device+0xb4/0xf0 [ 113.127682][ T8215] uinput_destroy_device+0x1e2/0x240 [ 113.132999][ T8215] ? uinput_destroy_device+0x240/0x240 [ 113.136009][ T29] audit: type=1804 audit(1590164560.211:7): pid=8271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir641262687/syzkaller.J2EUd7/8/file0/file0/bus" dev="sda1" ino=15824 res=1 [ 113.138469][ T8215] uinput_release+0x37/0x50 [ 113.138482][ T8215] __fput+0x33e/0x880 [ 113.138502][ T8215] task_work_run+0xf4/0x1b0 [ 113.174958][ T8215] exit_to_usermode_loop+0x2fa/0x360 [ 113.180259][ T8215] do_syscall_64+0x6b1/0x7d0 [ 113.184858][ T8215] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 113.190746][ T8215] RIP: 0033:0x416621 [ 113.194660][ T8215] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 113.214262][ T8215] RSP: 002b:00007ffff3ccdc10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 113.222673][ T8215] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 113.226598][ T29] audit: type=1800 audit(1590164560.211:8): pid=8271 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15824 res=0 [ 113.230655][ T8215] RDX: 0000001b2c720000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 113.230662][ T8215] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 113.230668][ T8215] R10: 00007ffff3ccdd00 R11: 0000000000000293 R12: 000000000078c900 [ 113.230676][ T8215] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 113.231949][ T8215] Kernel Offset: disabled [ 113.287806][ T8215] Rebooting in 86400 seconds..