[ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 54.466150][ T6804] scp (6804) used greatest stack depth: 21424 bytes left Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts. 2020/06/26 20:30:37 fuzzer started 2020/06/26 20:30:37 dialing manager at 10.128.0.26:45395 2020/06/26 20:30:38 syscalls: 3118 2020/06/26 20:30:38 code coverage: enabled 2020/06/26 20:30:38 comparison tracing: enabled 2020/06/26 20:30:38 extra coverage: enabled 2020/06/26 20:30:38 setuid sandbox: enabled 2020/06/26 20:30:38 namespace sandbox: enabled 2020/06/26 20:30:38 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/26 20:30:38 fault injection: enabled 2020/06/26 20:30:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/26 20:30:38 net packet injection: enabled 2020/06/26 20:30:38 net device setup: enabled 2020/06/26 20:30:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/26 20:30:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/26 20:30:38 USB emulation: enabled 20:32:29 executing program 0: syzkaller login: [ 172.193952][ T6892] IPVS: ftp: loaded support on port[0] = 21 20:32:29 executing program 1: [ 172.382226][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 172.471648][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.479466][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.490193][ T6892] device bridge_slave_0 entered promiscuous mode [ 172.499977][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.508844][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.517122][ T6892] device bridge_slave_1 entered promiscuous mode [ 172.550629][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.562601][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.595183][ T6892] team0: Port device team_slave_0 added [ 172.603937][ T6892] team0: Port device team_slave_1 added [ 172.608166][ T7023] IPVS: ftp: loaded support on port[0] = 21 [ 172.632068][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.639633][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.666932][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.682727][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 20:32:29 executing program 2: [ 172.706171][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.736308][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.871582][ T6892] device hsr_slave_0 entered promiscuous mode [ 172.927876][ T6892] device hsr_slave_1 entered promiscuous mode 20:32:29 executing program 3: [ 173.040552][ T7078] IPVS: ftp: loaded support on port[0] = 21 [ 173.240657][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 173.372011][ T6892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.441033][ T6892] netdevsim netdevsim0 netdevsim1: renamed from eth1 20:32:30 executing program 4: [ 173.514207][ T7222] IPVS: ftp: loaded support on port[0] = 21 [ 173.539321][ T6892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.667011][ T6892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.739923][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.750740][ T7326] IPVS: ftp: loaded support on port[0] = 21 [ 173.751086][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.769904][ T7023] device bridge_slave_0 entered promiscuous mode [ 173.793556][ T7078] chnl_net:caif_netlink_parms(): no params data found [ 173.812812][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.820048][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.831951][ T7023] device bridge_slave_1 entered promiscuous mode [ 173.944436][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.981408][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 20:32:31 executing program 5: [ 174.045975][ T7023] team0: Port device team_slave_0 added [ 174.126325][ T7023] team0: Port device team_slave_1 added [ 174.255202][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.272303][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.283240][ T7078] device bridge_slave_0 entered promiscuous mode [ 174.341911][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.349546][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.376697][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.388871][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.395937][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.405599][ T7078] device bridge_slave_1 entered promiscuous mode [ 174.427711][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 174.440801][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.448342][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.475374][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.499375][ T7464] IPVS: ftp: loaded support on port[0] = 21 [ 174.509154][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 174.533487][ T7078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.546842][ T7078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.659416][ T7023] device hsr_slave_0 entered promiscuous mode [ 174.706813][ T7023] device hsr_slave_1 entered promiscuous mode [ 174.766447][ T7023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.774281][ T7023] Cannot create hsr debugfs directory [ 174.844909][ T7078] team0: Port device team_slave_0 added [ 174.855091][ T7078] team0: Port device team_slave_1 added [ 174.882309][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.889653][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.899569][ T7326] device bridge_slave_0 entered promiscuous mode [ 174.946078][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.953620][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.967786][ T7326] device bridge_slave_1 entered promiscuous mode [ 174.983112][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.992990][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.001264][ T7222] device bridge_slave_0 entered promiscuous mode [ 175.009853][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.017070][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.043403][ T7078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.058807][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.065764][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.091987][ T7078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.131619][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.140931][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.148269][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.155988][ T7222] device bridge_slave_1 entered promiscuous mode [ 175.189567][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.281412][ T7078] device hsr_slave_0 entered promiscuous mode [ 175.326783][ T7078] device hsr_slave_1 entered promiscuous mode [ 175.376366][ T7078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.383965][ T7078] Cannot create hsr debugfs directory [ 175.394628][ T7326] team0: Port device team_slave_0 added [ 175.404038][ T7326] team0: Port device team_slave_1 added [ 175.450639][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.465020][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.475314][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.482762][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.509288][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.568538][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.575844][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.583223][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.609985][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.710071][ T7222] team0: Port device team_slave_0 added [ 175.716128][ T7464] chnl_net:caif_netlink_parms(): no params data found [ 175.784300][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.793950][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.808525][ T7222] team0: Port device team_slave_1 added [ 175.890975][ T7326] device hsr_slave_0 entered promiscuous mode [ 175.936938][ T7326] device hsr_slave_1 entered promiscuous mode [ 175.976494][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.984086][ T7326] Cannot create hsr debugfs directory [ 176.004450][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.016649][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.023620][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.049857][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.062553][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.070196][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.096709][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.220257][ T7222] device hsr_slave_0 entered promiscuous mode [ 176.266683][ T7222] device hsr_slave_1 entered promiscuous mode [ 176.316914][ T7222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.324618][ T7222] Cannot create hsr debugfs directory [ 176.334650][ T7023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.390254][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.400504][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.409764][ T2498] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.417027][ T2498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.425229][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.451251][ T7023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.549434][ T7023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.613806][ T7023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.696086][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.704719][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.713293][ T7464] device bridge_slave_0 entered promiscuous mode [ 176.730364][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.737569][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.745501][ T7464] device bridge_slave_1 entered promiscuous mode [ 176.760098][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.769339][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.778534][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.785587][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.833611][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.843746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.896440][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.905438][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.914895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.923969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.939939][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.954188][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.007829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.017189][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.025622][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.034848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.044029][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.059446][ T7078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.098816][ T7078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.173170][ T7464] team0: Port device team_slave_0 added [ 177.181050][ T6892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.211080][ T7078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.271181][ T7464] team0: Port device team_slave_1 added [ 177.292837][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.300773][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.327323][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.350560][ T7078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.434783][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.442185][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.469121][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.540382][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.547979][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.616928][ T7464] device hsr_slave_0 entered promiscuous mode [ 177.656962][ T7464] device hsr_slave_1 entered promiscuous mode [ 177.716503][ T7464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.724087][ T7464] Cannot create hsr debugfs directory [ 177.730453][ T7326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.801951][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.822957][ T7326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.869323][ T7326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.967302][ T7326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.130910][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.141627][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.153804][ T7222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.210240][ T7222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.263426][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.290885][ T7222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.351738][ T7222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.409267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.417894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.432857][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.441451][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.454407][ T6892] device veth0_vlan entered promiscuous mode [ 178.525600][ T6892] device veth1_vlan entered promiscuous mode [ 178.545897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.563390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.572670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.625675][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.664772][ T7464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.707789][ T7078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.741812][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.750980][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.760262][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.769151][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.776215][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.784710][ T7464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.869642][ T7464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.930859][ T7464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.014587][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.023879][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.033442][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.043176][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.050434][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.059636][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.068891][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.077896][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.086851][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.120965][ T6892] device veth0_macvtap entered promiscuous mode [ 179.132873][ T6892] device veth1_macvtap entered promiscuous mode [ 179.145431][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.154757][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.162925][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.171188][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.180918][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.190538][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.204338][ T7078] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.234818][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.244310][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.253556][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.263266][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.286606][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.295235][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.310337][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.317482][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.325195][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.337677][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.351455][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.369583][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.382141][ T7023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.397520][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.416770][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.425407][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.440897][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.448040][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.471162][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.498819][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.507848][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.515505][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.525216][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.534232][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.543592][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.552277][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.560577][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.573163][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.592696][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.610271][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.622510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.632145][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.641368][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.650387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.659371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.671341][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.680416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.737213][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.745829][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.754946][ T2498] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.762075][ T2498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.771155][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.779964][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.788808][ T2498] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.795985][ T2498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.803798][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.812817][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.820495][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.828289][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.837314][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.846038][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.854718][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.863315][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.872676][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.880849][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.945461][ T7078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.957485][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.981735][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.989430][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.003494][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.012373][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.021834][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.030485][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.039658][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.049075][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.056155][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.064241][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.073067][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.082028][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.089285][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.099184][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.189004][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.249580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.258532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.273474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.282213][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.294723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.303812][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.319916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.332658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.391324][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 20:32:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) r1 = gettid() clone(0x700a2100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x1, r2) wait4(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='hecurity'], 0x0, 0x0, 0x0) [ 180.476165][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.497378][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.504901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.526951][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.552441][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.577831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.587580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.617429][ C1] hrtimer: interrupt took 46030 ns [ 180.659748][ T8152] ptrace attach of "/root/syz-executor.0"[8148] was attempted by "/root/syz-executor.0"[8152] [ 180.661508][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.711528][ T7078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.781166][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.797355][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.816374][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.831978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.843013][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.843021][ T8150] IPVS: ftp: loaded support on port[0] = 21 [ 180.865278][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.883475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.892067][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.908234][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.923094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.933197][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.940357][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.964387][ T8148] IPVS: ftp: loaded support on port[0] = 21 [ 181.058219][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.072513][ T7023] device veth0_vlan entered promiscuous mode [ 181.106320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.115220][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.133322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.143909][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.160562][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.174340][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.181501][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.197940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.223735][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.304351][ T7023] device veth1_vlan entered promiscuous mode [ 181.353932][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.376948][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.384393][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.559267][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.572272][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.592690][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.610780][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.679910][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.711194][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.778359][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.805467][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.834605][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.853994][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.864473][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.880910][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.911570][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.941085][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.996098][ T7023] device veth0_macvtap entered promiscuous mode [ 182.026736][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.034988][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.065857][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.179691][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.201922][ T7023] device veth1_macvtap entered promiscuous mode [ 182.226925][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.307225][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.326472][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.355154][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.393177][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.422313][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.511684][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.579233][ T7078] device veth0_vlan entered promiscuous mode [ 182.617140][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.624964][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.663202][ T7222] device veth0_vlan entered promiscuous mode [ 182.685772][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.747251][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.772967][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.795056][ T7326] device veth0_vlan entered promiscuous mode [ 182.854434][ T7222] device veth1_vlan entered promiscuous mode [ 182.884466][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.927164][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.934651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.044876][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.054174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.063046][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.072792][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.089749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.102954][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.118527][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.172191][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.193436][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.206056][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.234269][ T7326] device veth1_vlan entered promiscuous mode [ 183.245682][ T7078] device veth1_vlan entered promiscuous mode [ 183.266851][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.275240][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.327880][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.335877][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.345535][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.354578][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.364157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.373585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.383521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.564135][ T7222] device veth0_macvtap entered promiscuous mode [ 183.629442][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.649558][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.674060][ T7222] device veth1_macvtap entered promiscuous mode [ 183.914531][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.947951][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.956178][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 20:32:40 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) [ 184.060273][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.198125][ T7078] device veth0_macvtap entered promiscuous mode [ 184.235029][ T7326] device veth0_macvtap entered promiscuous mode [ 184.264802][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.329727][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.359855][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.371470][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.384253][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.394792][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.406867][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.421420][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.434037][ T7326] device veth1_macvtap entered promiscuous mode [ 184.453520][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.463846][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.479695][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 20:32:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a30d01d3800000000ff0743a84659fba8b78f2fd1b89910c0fe018c"], 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 184.507932][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.538967][ T7078] device veth1_macvtap entered promiscuous mode [ 184.589025][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 184.638805][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.686005][ T8176] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 184.702190][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 184.788084][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.858981][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.926370][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.977850][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:32:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'bond_slave_1\x00', {'ip6tnl0\x00'}, 0x400}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca32, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000013c0)=ANY=[], 0x34}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$P9_RSETATTR(r2, &(0x7f0000000100)={0xffffffffffffff6c, 0x1b, 0x1}, 0xff6f) [ 185.097849][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.106618][ T2510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.192301][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.222291][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.282794][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.342491][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.373535][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.414951][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.436499][ T7078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.534533][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.559651][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.575738][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.593792][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.614083][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.633404][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.650354][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.691381][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.711831][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.726354][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 20:32:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x24) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x800) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdf52, 0x728df552}) [ 185.754664][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.782049][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.808029][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.829692][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.861796][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.911229][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.949697][ T28] audit: type=1804 audit(1593203562.886:2): pid=8196 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir299703793/syzkaller.gDH6NJ/4/bus" dev="sda1" ino=15747 res=1 [ 185.988777][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.069899][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.076020][ T28] audit: type=1804 audit(1593203562.946:3): pid=8196 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir299703793/syzkaller.gDH6NJ/4/bus" dev="sda1" ino=15747 res=1 [ 186.143073][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.213514][ T7078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.384513][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.428440][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.497130][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.572906][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.653271][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.675698][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.685696][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.696228][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.787355][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.794757][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.819430][ T28] audit: type=1804 audit(1593203563.766:4): pid=8199 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir299703793/syzkaller.gDH6NJ/4/bus" dev="sda1" ino=15747 res=1 [ 186.819646][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.905858][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.926233][ T28] audit: type=1804 audit(1593203563.796:5): pid=8200 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir299703793/syzkaller.gDH6NJ/4/bus" dev="sda1" ino=15747 res=1 [ 186.964099][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:32:44 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7", 0x1, 0x0, 0x0, 0x0) [ 187.080114][ T7464] device veth0_vlan entered promiscuous mode [ 187.136965][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.145754][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.190839][ T8203] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:32:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 187.306959][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.315736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 20:32:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab70, &(0x7f0000000100)=[{&(0x7f00000000c0)="0a02014d3804000019000300e6007d006c00007a000000000100000001000000004000000040000080000000", 0x2c}], 0x4801, 0x0) [ 187.513180][ T7464] device veth1_vlan entered promiscuous mode [ 187.591956][ T8210] ------------[ cut here ]------------ [ 187.597594][ T8210] kernel BUG at arch/x86/kvm/mmu/mmu.c:3719! [ 187.636455][ T8210] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 187.642563][ T8210] CPU: 0 PID: 8210 Comm: syz-executor.3 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 187.652357][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.662419][ T8210] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 187.668049][ T8210] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 187.687648][ T8210] RSP: 0018:ffffc900177efb30 EFLAGS: 00010216 [ 187.693709][ T8210] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000fb91000 [ 187.701677][ T8210] RDX: 0000000000008e8c RSI: ffffffff8118e14a RDI: 0000000000000001 [ 187.709650][ T8210] RBP: ffff888062290040 R08: ffff8880634f2080 R09: ffffed1015cc719c [ 187.717621][ T8210] R10: ffff8880ae638cdb R11: ffffed1015cc719b R12: 0000000000000000 [ 187.725590][ T8210] R13: 0000000000000001 R14: ffff888062290458 R15: 0000000000000000 [ 187.733564][ T8210] FS: 00007f99e0166700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 187.742488][ T8210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.749099][ T8210] CR2: 0000001b2ed25000 CR3: 000000008ccd9000 CR4: 00000000001426f0 [ 187.757075][ T8210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.765057][ T8210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.773021][ T8210] Call Trace: [ 187.776318][ T8210] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 187.782300][ T8210] kvm_arch_vcpu_ioctl_run+0x4016/0x68d0 [ 187.787948][ T8210] ? kvm_arch_vcpu_runnable+0x6c0/0x6c0 [ 187.793496][ T8210] ? lock_downgrade+0x840/0x840 [ 187.798352][ T8210] ? rcu_read_lock_held_common+0xa0/0xa0 [ 187.799296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.803996][ T8210] ? check_preemption_disabled+0x38/0x220 [ 187.817133][ T8210] ? kvm_vcpu_ioctl+0x467/0xe10 [ 187.821999][ T8210] kvm_vcpu_ioctl+0x467/0xe10 [ 187.826675][ T8210] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 187.833084][ T8210] ? ioctl_file_clone+0x180/0x180 [ 187.836288][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.838103][ T8210] ? check_preemption_disabled+0x38/0x220 [ 187.838119][ T8210] ? __fget_files+0x299/0x400 [ 187.838136][ T8210] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 187.838151][ T8210] ksys_ioctl+0x11a/0x180 [ 187.838165][ T8210] __x64_sys_ioctl+0x6f/0xb0 [ 187.838176][ T8210] do_syscall_64+0x60/0xe0 [ 187.838190][ T8210] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 187.838205][ T8210] RIP: 0033:0x45cb19 [ 187.838220][ T8210] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.838226][ T8210] RSP: 002b:00007f99e0165c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.838237][ T8210] RAX: ffffffffffffffda RBX: 00000000004e8a00 RCX: 000000000045cb19 [ 187.838244][ T8210] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 187.838251][ T8210] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 20:32:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbf97}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}, 0x41800, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:32:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}, 0x13}, 0x0) [ 187.838257][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 187.838263][ T8210] R13: 00000000000003d0 R14: 00000000004c68ae R15: 00007f99e01666d4 [ 187.838271][ T8210] Modules linked in: 20:32:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}, 0x13}, 0x0) [ 188.071451][ T8231] ------------[ cut here ]------------ [ 188.076939][ T8231] kernel BUG at arch/x86/kvm/mmu/mmu.c:3719! [ 188.099197][ T8231] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 188.105302][ T8231] CPU: 1 PID: 8231 Comm: syz-executor.2 Tainted: G D 5.7.0-rc7-next-20200529-syzkaller #0 [ 188.116487][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.126549][ T8231] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 188.131958][ T8231] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 188.151648][ T8231] RSP: 0018:ffffc900178cfb30 EFLAGS: 00010212 [ 188.157796][ T8231] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000db81000 [ 188.165767][ T8231] RDX: 0000000000006b17 RSI: ffffffff8118e14a RDI: 0000000000000001 [ 188.173731][ T8231] RBP: ffff88805dbc80c0 R08: ffff88805d972240 R09: fffffbfff155b432 [ 188.181807][ T8231] R10: ffffffff8aada18f R11: fffffbfff155b431 R12: 0000000000000000 [ 188.189776][ T8231] R13: 0000000000000001 R14: ffff88805dbc84d8 R15: 0000000000000000 [ 188.197766][ T8231] FS: 00007f9e2329c700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 188.206691][ T8231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.213296][ T8231] CR2: 0000001b33322000 CR3: 0000000099d87000 CR4: 00000000001426e0 [ 188.221261][ T8231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.229226][ T8231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.237184][ T8231] Call Trace: [ 188.240478][ T8231] kvm_arch_vcpu_ioctl_run+0x4016/0x68d0 [ 188.246125][ T8231] ? kvm_arch_vcpu_runnable+0x6c0/0x6c0 [ 188.251667][ T8231] ? lock_downgrade+0x840/0x840 [ 188.256521][ T8231] ? kvm_vcpu_ioctl+0x467/0xe10 [ 188.261380][ T8231] kvm_vcpu_ioctl+0x467/0xe10 [ 188.266079][ T8231] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 188.272489][ T8231] ? ioctl_file_clone+0x180/0x180 [ 188.277508][ T8231] ? __might_fault+0x190/0x1d0 [ 188.282280][ T8231] ? _copy_to_user+0x126/0x160 [ 188.287046][ T8231] ? __fget_files+0x299/0x400 [ 188.291726][ T8231] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 188.298136][ T8231] ksys_ioctl+0x11a/0x180 [ 188.302475][ T8231] __x64_sys_ioctl+0x6f/0xb0 [ 188.307074][ T8231] do_syscall_64+0x60/0xe0 [ 188.311491][ T8231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 188.317380][ T8231] RIP: 0033:0x45cb19 [ 188.321277][ T8231] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.340892][ T8231] RSP: 002b:00007f9e2329bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.349489][ T8231] RAX: ffffffffffffffda RBX: 00000000004e8a00 RCX: 000000000045cb19 [ 188.357461][ T8231] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 188.365424][ T8231] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 188.373386][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 188.381350][ T8231] R13: 00000000000003d0 R14: 00000000004c68ae R15: 00007f9e2329c6d4 [ 188.389318][ T8231] Modules linked in: [ 188.499417][ T8210] ---[ end trace ec1b38d271e096fb ]--- [ 188.504917][ T8210] RIP: 0010:kvm_mmu_load+0xbfa/0xe00 [ 188.519169][ T8210] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4 [ 188.566867][ T8210] RSP: 0018:ffffc900177efb30 EFLAGS: 00010216 [ 188.572961][ T8210] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000fb91000 [ 188.586909][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.595320][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.626972][ T8210] RDX: 0000000000008e8c RSI: ffffffff8118e14a RDI: 0000000000000001 [ 188.637274][ T7464] device veth0_macvtap entered promiscuous mode [ 188.653254][ T8210] RBP: ffff888062290040 R08: ffff8880634f2080 R09: ffffed1015cc719c [ 188.666478][ T7464] device veth1_macvtap entered promiscuous mode [ 188.691874][ T8210] R10: ffff8880ae638cdb R11: ffffed1015cc719b R12: 0000000000000000 [ 188.722853][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.727105][ T8210] R13: 0000000000000001 R14: ffff888062290458 R15: 0000000000000000 [ 188.757921][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.786654][ T8210] FS: 00007f99e0166700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 188.812658][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.822873][ T8210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.849092][ T8210] CR2: 00007f9e23238db8 CR3: 000000008ccd9000 CR4: 00000000001426e0 [ 188.853445][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.880000][ T8210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.888625][ T8210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.896600][ T8210] Kernel panic - not syncing: Fatal exception [ 188.896698][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.904259][ T8210] Kernel Offset: disabled [ 188.918942][ T8210] Rebooting in 86400 seconds..