[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. 2020/05/24 22:20:53 fuzzer started 2020/05/24 22:20:53 dialing manager at 10.128.0.26:41143 2020/05/24 22:20:53 syscalls: 3055 2020/05/24 22:20:53 code coverage: enabled 2020/05/24 22:20:53 comparison tracing: enabled 2020/05/24 22:20:53 extra coverage: enabled 2020/05/24 22:20:53 setuid sandbox: enabled 2020/05/24 22:20:53 namespace sandbox: enabled 2020/05/24 22:20:53 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/24 22:20:53 fault injection: enabled 2020/05/24 22:20:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/24 22:20:53 net packet injection: enabled 2020/05/24 22:20:53 net device setup: enabled 2020/05/24 22:20:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/24 22:20:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/24 22:20:53 USB emulation: enabled 22:22:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) get_robust_list(0x0, &(0x7f0000000640)=0x0, &(0x7f00000008c0)) syzkaller login: [ 164.351177][ T6823] IPVS: ftp: loaded support on port[0] = 21 22:22:39 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 164.492596][ T6823] chnl_net:caif_netlink_parms(): no params data found [ 164.579573][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.588762][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.598391][ T6823] device bridge_slave_0 entered promiscuous mode [ 164.610515][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.617685][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.628456][ T6823] device bridge_slave_1 entered promiscuous mode [ 164.661871][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.675040][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.708532][ T6823] team0: Port device team_slave_0 added [ 164.720788][ T6823] team0: Port device team_slave_1 added [ 164.778018][ T6969] IPVS: ftp: loaded support on port[0] = 21 [ 164.786349][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.793393][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.820133][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.836135][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.843935][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.871444][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 22:22:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f5e0cfa94502aa9c4fb43978668e2ca169e6fed2b2db0e81e6d16ecaf07056216b6dfe37bd69db9d8a2db197d1469f3e405019c69de864d4f1b50caee535056679117c36004d24370fa7e03b3e8457a69f1df6e153c9bb4eeb33ce98e4bbcc7c63c00332e88e01e94765e5d49b429", 0xeb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 164.964482][ T6823] device hsr_slave_0 entered promiscuous mode [ 165.014737][ T6823] device hsr_slave_1 entered promiscuous mode [ 165.183952][ T7016] IPVS: ftp: loaded support on port[0] = 21 22:22:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') [ 165.326636][ T6969] chnl_net:caif_netlink_parms(): no params data found [ 165.479237][ T6823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.543988][ T6823] netdevsim netdevsim0 netdevsim1: renamed from eth1 22:22:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000000c0), 0x0, &(0x7f00000001c0)) [ 165.660323][ T6823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.794046][ T6823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.865020][ T7016] chnl_net:caif_netlink_parms(): no params data found [ 165.867903][ T7174] IPVS: ftp: loaded support on port[0] = 21 [ 165.879217][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.888946][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.899947][ T6969] device bridge_slave_0 entered promiscuous mode [ 165.950453][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.957560][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.988170][ T6969] device bridge_slave_1 entered promiscuous mode [ 166.052984][ T7266] IPVS: ftp: loaded support on port[0] = 21 [ 166.072148][ T6969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 22:22:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) [ 166.109701][ T6969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.196524][ T6969] team0: Port device team_slave_0 added [ 166.265765][ T6969] team0: Port device team_slave_1 added [ 166.347925][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.355650][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.365379][ T7016] device bridge_slave_0 entered promiscuous mode [ 166.375879][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.383444][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.391904][ T7016] device bridge_slave_1 entered promiscuous mode [ 166.400535][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.407489][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.434827][ T6969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.488556][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.494809][ T7350] IPVS: ftp: loaded support on port[0] = 21 [ 166.501344][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.531705][ T6969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.588624][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.643354][ T6969] device hsr_slave_0 entered promiscuous mode [ 166.711829][ T6969] device hsr_slave_1 entered promiscuous mode [ 166.751815][ T6969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.759546][ T6969] Cannot create hsr debugfs directory [ 166.774048][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.802818][ T7016] team0: Port device team_slave_0 added [ 166.834472][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 166.861911][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.872885][ T7016] team0: Port device team_slave_1 added [ 166.995098][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.002488][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.028834][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.068088][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.078797][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.088233][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.096008][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.122810][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.138658][ T6823] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.158586][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 167.253121][ T7016] device hsr_slave_0 entered promiscuous mode [ 167.321517][ T7016] device hsr_slave_1 entered promiscuous mode [ 167.360534][ T7016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.368176][ T7016] Cannot create hsr debugfs directory [ 167.383346][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.392868][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.401057][ T7174] device bridge_slave_0 entered promiscuous mode [ 167.420548][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.429352][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.438881][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.446100][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.455462][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.464823][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.473675][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.480819][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.533962][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.541724][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.549529][ T7174] device bridge_slave_1 entered promiscuous mode [ 167.577585][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.642826][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.660754][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.709718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.738554][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 167.779012][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.786976][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.796878][ T7266] device bridge_slave_0 entered promiscuous mode [ 167.828324][ T7174] team0: Port device team_slave_0 added [ 167.836639][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.844438][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.853091][ T7266] device bridge_slave_1 entered promiscuous mode [ 167.865489][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.875311][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.884991][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.917302][ T7174] team0: Port device team_slave_1 added [ 167.924912][ T6969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.990784][ T6969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.021763][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.075009][ T6969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.128017][ T6969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.192588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.203627][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.217062][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.224719][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.232887][ T7350] device bridge_slave_0 entered promiscuous mode [ 168.242605][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.256794][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.287321][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.294721][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.322525][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.335729][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.343247][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.369577][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.381140][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.388265][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.397972][ T7350] device bridge_slave_1 entered promiscuous mode [ 168.435796][ T6823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.446805][ T6823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.459717][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.469035][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.478199][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.486767][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.495941][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.507436][ T7266] team0: Port device team_slave_0 added [ 168.551060][ T7266] team0: Port device team_slave_1 added [ 168.573379][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.623826][ T7174] device hsr_slave_0 entered promiscuous mode [ 168.660463][ T7174] device hsr_slave_1 entered promiscuous mode [ 168.737541][ T7174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.745306][ T7174] Cannot create hsr debugfs directory [ 168.766170][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.846798][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.854519][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.880850][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.892166][ T7016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.979061][ T7350] team0: Port device team_slave_0 added [ 168.993224][ T7350] team0: Port device team_slave_1 added [ 169.008303][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.015855][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.042094][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.053813][ T7016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.096037][ T7016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.152480][ T7016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.227751][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.235854][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.265011][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.279426][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.286514][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.313263][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.328310][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.337397][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.375137][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.463242][ T7266] device hsr_slave_0 entered promiscuous mode [ 169.510612][ T7266] device hsr_slave_1 entered promiscuous mode [ 169.560144][ T7266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.567712][ T7266] Cannot create hsr debugfs directory [ 169.685299][ T7350] device hsr_slave_0 entered promiscuous mode [ 169.742525][ T7350] device hsr_slave_1 entered promiscuous mode [ 169.790111][ T7350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.797736][ T7350] Cannot create hsr debugfs directory [ 169.890464][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.908058][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.005261][ T7174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.091144][ T7174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.113452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.121866][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.135888][ T6823] device veth0_vlan entered promiscuous mode [ 170.159573][ T7174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.216121][ T6969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.223336][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.231957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.257351][ T7174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.316718][ T6823] device veth1_vlan entered promiscuous mode [ 170.363962][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.372627][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.384230][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.392952][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.404510][ T6969] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.443090][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.471285][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.482351][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.490877][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.497923][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.507249][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.515953][ T7266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.586286][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.598593][ T7266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.642719][ T7266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.693694][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.701552][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.709303][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.718166][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.726836][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.736900][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.746037][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.753175][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.789917][ T6823] device veth0_macvtap entered promiscuous mode [ 170.803539][ T7266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.847318][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.856387][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.866399][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.875683][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.884861][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.892022][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.899852][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.912769][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.921520][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.929866][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.936998][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.944812][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.954227][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.968213][ T6823] device veth1_macvtap entered promiscuous mode [ 170.996198][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.006372][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.016181][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.024827][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.061704][ T7350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.085959][ T7350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.152246][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.164463][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.173608][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.183078][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.192078][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.214000][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.224845][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.233826][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.243173][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.252800][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.272652][ T7350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.337456][ T6969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.358847][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.369743][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.379518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.394618][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.403332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.412734][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.421687][ T7350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.473206][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.515654][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.527979][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.539521][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.548977][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.557911][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.566279][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.594142][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.616721][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.625701][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.635001][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.643318][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.658990][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.676013][ T6969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.772680][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.782889][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.792177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.799251][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.995655][ T7266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.003302][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.014401][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.024451][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.034685][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.041888][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.051668][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.059328][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.085480][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 22:22:47 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) [ 172.121458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.131012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.139681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.155543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.209078][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.228820][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.239680][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.252674][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.262766][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.279832][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.289411][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.300861][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.320208][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.328931][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.347900][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.388459][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.444714][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.459348][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.472751][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:22:47 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) [ 172.494775][ T7266] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.562530][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.581016][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.598261][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.605439][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.621871][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.629948][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.645550][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.665605][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.692375][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.704871][ T6969] device veth0_vlan entered promiscuous mode [ 172.743175][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.755740][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.764279][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.774405][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.783955][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.793315][ T2480] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.800492][ T2480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.808289][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.819193][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.828019][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.837166][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.853059][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.861510][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.869626][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.881069][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.891973][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.900174][ T2554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.916069][ T6969] device veth1_vlan entered promiscuous mode [ 172.933703][ T7016] device veth0_vlan entered promiscuous mode [ 172.947290][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.956110][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.968998][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.978754][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.989274][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.029297][ T7016] device veth1_vlan entered promiscuous mode [ 173.037460][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.048642][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.058649][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.069901][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.079118][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.086405][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.094172][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.103715][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.113498][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.122450][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.133177][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.151860][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.160758][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.175788][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.184702][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.216235][ T7266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.236915][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.255286][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.268089][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.277857][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.291741][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.305432][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.314518][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.327646][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.338384][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.352736][ T6969] device veth0_macvtap entered promiscuous mode [ 173.381049][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.389227][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.403719][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.428502][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.437625][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.455961][ T6969] device veth1_macvtap entered promiscuous mode [ 173.475545][ T7016] device veth0_macvtap entered promiscuous mode 22:22:48 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 173.493685][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.502941][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.512314][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.528565][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.551748][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.593651][ T7266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.610918][ T7016] device veth1_macvtap entered promiscuous mode [ 173.640793][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.652982][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.671144][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.679224][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.711912][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.729025][ T7350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.753185][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.764723][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.776853][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.793047][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_0 22:22:49 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='dax\x00', 0x0, 0x0) [ 173.814635][ T7174] device veth0_vlan entered promiscuous mode [ 173.834269][ T7174] device veth1_vlan entered promiscuous mode [ 173.849454][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.868055][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.881048][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.901315][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.909731][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 22:22:49 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='dax\x00', 0x0, 0x0) [ 173.947413][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.987731][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 22:22:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x3, r2}]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 174.032921][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.060390][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.098769][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.144854][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.161906][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.173417][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.186210][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.207351][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.220043][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.229854][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.238908][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.248181][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.261836][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.288734][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.333361][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.341084][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.348582][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.359276][ T7686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.373928][ T7174] device veth0_macvtap entered promiscuous mode 22:22:49 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40091}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x3, r2}]}}}]}, 0x38}}, 0x0) [ 174.440302][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.448631][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.459524][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.472011][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.484470][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.496041][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.512819][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.527384][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.585363][ T7174] device veth1_macvtap entered promiscuous mode [ 174.613666][ T8138] device sit2 entered promiscuous mode [ 174.658520][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.667112][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.678421][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.796713][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.808532][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.820931][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.828808][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 22:22:50 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 174.983625][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.001193][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.012913][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 175.057838][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.074841][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 175.086728][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.098196][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 175.109067][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.139698][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.207648][ T7266] device veth0_vlan entered promiscuous mode [ 175.216530][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.227122][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.239333][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.256248][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.268444][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.280594][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.292630][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 22:22:50 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x8) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) close(0xffffffffffffffff) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa05e59b7ecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0x8416, 0x20c49a, 0x0, 0x27) dup(r3) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x14a) [ 175.304287][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.344174][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.368039][ T7350] device veth0_vlan entered promiscuous mode [ 175.394956][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.412291][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.422418][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.432360][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.453486][ T7266] device veth1_vlan entered promiscuous mode [ 175.473716][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.482098][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.554856][ T7350] device veth1_vlan entered promiscuous mode [ 175.581216][ C0] hrtimer: interrupt took 42379 ns [ 175.719778][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.732451][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.748669][ T7266] device veth0_macvtap entered promiscuous mode [ 175.768096][ T7350] device veth0_macvtap entered promiscuous mode [ 175.786059][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.802032][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.821869][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.845891][ T7266] device veth1_macvtap entered promiscuous mode [ 175.864410][ T7350] device veth1_macvtap entered promiscuous mode [ 175.882081][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.895450][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.905544][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 22:22:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') [ 175.962106][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.001573][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.015444][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.027013][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.037518][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.048927][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.059455][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.071858][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.085192][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.105548][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.117263][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.127870][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.139404][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.150125][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.161836][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.174181][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.175104][ T0] NOHZ: local_softirq_pending 08 [ 176.185488][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.199738][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.213268][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.225271][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.237622][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.247482][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.257526][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.266497][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.279831][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.297004][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.308461][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.319324][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.330934][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.342449][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.352901][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.364402][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.376783][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.389621][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.401347][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.412493][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.423027][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.433617][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.445027][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.454944][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.465457][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.476171][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.486858][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.498838][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.510123][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.519883][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.529176][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.538336][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.909737][ T8181] FAT-fs (loop4): bogus number of FAT sectors [ 176.916680][ T8181] FAT-fs (loop4): Can't find a valid FAT filesystem [ 177.709656][ T8188] FAT-fs (loop4): bogus number of FAT sectors [ 177.715981][ T8188] FAT-fs (loop4): Can't find a valid FAT filesystem 22:22:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000000c0), 0x0, &(0x7f00000001c0)) 22:22:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fdatasync(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:22:53 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001040000", @ANYRESDEC, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2c4e5a2ec6092ac) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 22:22:53 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x8) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) close(0xffffffffffffffff) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa05e59b7ecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0x8416, 0x20c49a, 0x0, 0x27) dup(r3) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x14a) 22:22:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') 22:22:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000a00)=ANY=[@ANYBLOB="bbbabbbbbbbbaaaaaaaaaaaa08060001080006040001000000000400ac"], 0x0) [ 178.001899][ T8208] FAT-fs (loop4): bogus number of FAT sectors 22:22:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') [ 178.147012][ T8208] FAT-fs (loop4): Can't find a valid FAT filesystem 22:22:53 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000a00)=ANY=[@ANYBLOB="bbbabbbbbbbbaaaaaaaaaaaa08060001080006040001000000000400ac1414"], 0x0) 22:22:53 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xedc0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x1f0, 0x3, 0x0, 0x0, 0xb}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x7f4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x0, 0x6a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1000002, &(0x7f000000a000)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @private=0xa010102}, @private0, @rand_addr=' \x01\x00', 0x0, 0x20, 0x3ff, 0x0, 0x6, 0x48}) 22:22:53 executing program 5: prlimit64(0x0, 0x8, 0x0, 0x0) inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x2b2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x4, 0x4, 0x4, 0x5, 0xd0, 0x8, 0x2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$peeksig(0x11, r1, 0x0, 0x0) 22:22:53 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') 22:22:53 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) [ 178.761929][ T8235] NFS: Device name not specified 22:22:54 executing program 4: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 22:22:54 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') 22:22:54 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001040000", @ANYRESDEC, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2c4e5a2ec6092ac) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 22:22:54 executing program 1: clone(0x20006004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x200c808, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) 22:22:54 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x8) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) close(0xffffffffffffffff) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa05e59b7ecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0x8416, 0x20c49a, 0x0, 0x27) dup(r3) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x14a) 22:22:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000540), 0x4) 22:22:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/4) 22:22:54 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') 22:22:54 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') 22:22:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x2}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) close(r1) 22:22:54 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/40, 0x28}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x5) sysinfo(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) 22:22:54 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') 22:22:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) dup2(r0, r1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_genetlink_get_family_id$ipvs(0x0) [ 179.644723][ T8279] input: syz1 as /devices/virtual/input/input5 [ 179.712109][ T8285] ================================================================== [ 179.720544][ T8285] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 179.727749][ T8285] Read of size 8 at addr ffff88809f978158 by task syz-executor.4/8285 [ 179.735905][ T8285] [ 179.738269][ T8285] CPU: 1 PID: 8285 Comm: syz-executor.4 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 179.748067][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.758129][ T8285] Call Trace: [ 179.761428][ T8285] dump_stack+0x18f/0x20d [ 179.765794][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 179.770648][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 179.775521][ T8285] print_address_description.constprop.0.cold+0xd3/0x413 [ 179.782552][ T8285] ? cdev_device_del+0x69/0x80 [ 179.787337][ T8285] ? evdev_disconnect+0x3d/0xb0 [ 179.792207][ T8285] ? __input_unregister_device+0x1b0/0x430 [ 179.798027][ T8285] ? input_unregister_device+0xb4/0xf0 [ 179.803507][ T8285] ? uinput_destroy_device+0x1e2/0x240 [ 179.809093][ T8285] ? vprintk_func+0x97/0x1a6 [ 179.813696][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 179.818533][ T8285] kasan_report.cold+0x1f/0x37 [ 179.823294][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 179.828129][ T8285] __mutex_lock+0x1033/0x13c0 [ 179.832802][ T8285] ? evdev_cleanup+0x21/0x190 [ 179.837471][ T8285] ? print_usage_bug+0x240/0x240 [ 179.842393][ T8285] ? trace_hardirqs_off+0x50/0x220 [ 179.847498][ T8285] ? mutex_trylock+0x2c0/0x2c0 [ 179.852265][ T8285] ? mark_held_locks+0x9f/0xe0 [ 179.857658][ T8285] ? kfree+0x1eb/0x2b0 [ 179.861713][ T8285] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 179.867687][ T8285] ? kfree_const+0x51/0x60 [ 179.872092][ T8285] ? evdev_cleanup+0x21/0x190 [ 179.876791][ T8285] evdev_cleanup+0x21/0x190 [ 179.881284][ T8285] evdev_disconnect+0x45/0xb0 [ 179.885964][ T8285] __input_unregister_device+0x1b0/0x430 [ 179.891585][ T8285] input_unregister_device+0xb4/0xf0 [ 179.896855][ T8285] uinput_destroy_device+0x1e2/0x240 [ 179.902128][ T8285] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 179.908005][ T8285] ? uinput_read+0xd10/0xd10 [ 179.912601][ T8285] ? ioctl_file_clone+0x180/0x180 [ 179.917610][ T8285] ? __fget_files+0x32f/0x500 [ 179.922289][ T8285] ? do_dup2+0x520/0x520 [ 179.926516][ T8285] ? __x64_sys_futex+0x380/0x4f0 [ 179.931460][ T8285] ? uinput_compat_ioctl+0xa0/0xa0 [ 179.936557][ T8285] ksys_ioctl+0x11a/0x180 [ 179.940873][ T8285] __x64_sys_ioctl+0x6f/0xb0 [ 179.945447][ T8285] do_syscall_64+0xf6/0x7d0 [ 179.950111][ T8285] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 179.955986][ T8285] RIP: 0033:0x45ca29 [ 179.959872][ T8285] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 179.979543][ T8285] RSP: 002b:00007f596688cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.987935][ T8285] RAX: ffffffffffffffda RBX: 00000000004eff40 RCX: 000000000045ca29 [ 179.995977][ T8285] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 180.003945][ T8285] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 180.011908][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 180.019879][ T8285] R13: 00000000000005c4 R14: 00000000004c8855 R15: 00007f596688d6d4 [ 180.027856][ T8285] [ 180.030164][ T8285] Allocated by task 8279: [ 180.034478][ T8285] save_stack+0x1b/0x40 [ 180.038618][ T8285] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 180.044330][ T8285] kmem_cache_alloc_trace+0x153/0x7d0 [ 180.049684][ T8285] evdev_connect+0x80/0x4d0 [ 180.054183][ T8285] input_attach_handler+0x194/0x200 [ 180.059360][ T8285] input_register_device.cold+0xf5/0x246 [ 180.064973][ T8285] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 180.070934][ T8285] ksys_ioctl+0x11a/0x180 [ 180.075332][ T8285] __x64_sys_ioctl+0x6f/0xb0 [ 180.079906][ T8285] do_syscall_64+0xf6/0x7d0 [ 180.084392][ T8285] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 180.091039][ T8285] [ 180.093347][ T8285] Freed by task 8285: [ 180.097326][ T8285] save_stack+0x1b/0x40 [ 180.101462][ T8285] __kasan_slab_free+0xf7/0x140 [ 180.106294][ T8285] kfree+0x109/0x2b0 [ 180.110260][ T8285] device_release+0x71/0x200 [ 180.114847][ T8285] kobject_put+0x1c8/0x2f0 [ 180.119263][ T8285] cdev_device_del+0x69/0x80 [ 180.123835][ T8285] evdev_disconnect+0x3d/0xb0 [ 180.128496][ T8285] __input_unregister_device+0x1b0/0x430 [ 180.134112][ T8285] input_unregister_device+0xb4/0xf0 [ 180.139377][ T8285] uinput_destroy_device+0x1e2/0x240 [ 180.144643][ T8285] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 180.150516][ T8285] ksys_ioctl+0x11a/0x180 [ 180.154826][ T8285] __x64_sys_ioctl+0x6f/0xb0 [ 180.159397][ T8285] do_syscall_64+0xf6/0x7d0 [ 180.163890][ T8285] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 180.169945][ T8285] [ 180.172260][ T8285] The buggy address belongs to the object at ffff88809f978000 [ 180.172260][ T8285] which belongs to the cache kmalloc-2k of size 2048 [ 180.186306][ T8285] The buggy address is located 344 bytes inside of [ 180.186306][ T8285] 2048-byte region [ffff88809f978000, ffff88809f978800) [ 180.200334][ T8285] The buggy address belongs to the page: [ 180.205954][ T8285] page:ffffea00027e5e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 180.215045][ T8285] flags: 0xfffe0000000200(slab) [ 180.219885][ T8285] raw: 00fffe0000000200 ffffea00024dae88 ffffea0002464d88 ffff8880aa000e00 [ 180.228452][ T8285] raw: 0000000000000000 ffff88809f978000 0000000100000001 0000000000000000 [ 180.237033][ T8285] page dumped because: kasan: bad access detected [ 180.243770][ T8285] [ 180.246080][ T8285] Memory state around the buggy address: [ 180.251800][ T8285] ffff88809f978000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.259895][ T8285] ffff88809f978080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.267974][ T8285] >ffff88809f978100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.276035][ T8285] ^ [ 180.282966][ T8285] ffff88809f978180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.291115][ T8285] ffff88809f978200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.299156][ T8285] ================================================================== [ 180.307194][ T8285] Disabling lock debugging due to kernel taint 22:22:55 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b04, &(0x7f0000000140)='wlan0\x001py\nE\xeb\xd6\xfb\xc4\xd6$w\xae&x\xcd\xc4\xa8\xf9\xe9i\xa9c\xe8\x02:j\xf1\xc4g\xed\x88\r\x13+\xcc\xd3\x0e\xe1\xd2\xc9Z\xa8N\x17\x98\x10\x88b\xb4\x83\'F\xd4|:JHx\x93M\xea\xcf\xbeJR\xba_\xa6\x9d|\x90p\'\xa7\xe0\x8f_}\xb07`\xdf\xcc\x11=\xd8\f\xe9.C\x1e\a\x9d\x97\xf9\nDq\xd8,\xf8f\x86\xc0\x9dS7\xdf\xa9\'\xdd+\xfd\xc5>\xe1F\x18h\xcd\xe0{\x89hM\xbd\xaf\xf86\xbb\xc0*\x1a\xfaQVY}\x00s\x16V\xa3b+\x0f\xb9\xe8\xb7\"\n\xc1\x0f\xf4\xacj\x11\x7f-E\xf8\xb4\x9b-j\x15\x93\x12J\xc2B\x88\x8aH[\x06\xe4\x9a\x9bg\xf3\xe11T\xbf\xbe\xe8\x1b\x15\x80$?\xbcr~u\xe8\x8e\xe91\xe0\x92\r\x00\x00\x0e\xb9\xb5X\xd1+\x88Fv\xac+g\\\x15ay\x81,\f\x02\xb2\x89\xc5\x92\x9f\x98\x1b(\xa0\x1c\xdc\xaa\xfd>\xe8o\a\xdb\x00\x00\x00\x00') [ 180.437489][ T8300] input: syz1 as /devices/virtual/input/input6 [ 180.493404][ T8285] Kernel panic - not syncing: panic_on_warn set ... [ 180.500303][ T8285] CPU: 0 PID: 8285 Comm: syz-executor.4 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 180.511501][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.521562][ T8285] Call Trace: [ 180.524869][ T8285] dump_stack+0x18f/0x20d [ 180.529215][ T8285] ? __mutex_lock+0xf50/0x13c0 [ 180.533996][ T8285] panic+0x2e3/0x75c [ 180.537900][ T8285] ? __warn_printk+0xf3/0xf3 [ 180.542718][ T8285] ? preempt_schedule_common+0x5e/0xc0 [ 180.548185][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 180.553067][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 180.557938][ T8285] ? preempt_schedule_thunk+0x16/0x18 [ 180.563332][ T8285] ? trace_hardirqs_on+0x55/0x230 [ 180.568363][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 180.573215][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 180.578072][ T8285] end_report+0x4d/0x53 [ 180.582232][ T8285] kasan_report.cold+0xd/0x37 [ 180.586946][ T8285] ? __mutex_lock+0x1033/0x13c0 [ 180.591817][ T8285] __mutex_lock+0x1033/0x13c0 [ 180.596500][ T8285] ? evdev_cleanup+0x21/0x190 [ 180.601179][ T8285] ? print_usage_bug+0x240/0x240 [ 180.606157][ T8285] ? trace_hardirqs_off+0x50/0x220 [ 180.611273][ T8285] ? mutex_trylock+0x2c0/0x2c0 [ 180.616046][ T8285] ? mark_held_locks+0x9f/0xe0 [ 180.621507][ T8285] ? kfree+0x1eb/0x2b0 [ 180.625581][ T8285] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 180.631572][ T8285] ? kfree_const+0x51/0x60 [ 180.636030][ T8285] ? evdev_cleanup+0x21/0x190 [ 180.640971][ T8285] evdev_cleanup+0x21/0x190 [ 180.645485][ T8285] evdev_disconnect+0x45/0xb0 [ 180.650433][ T8285] __input_unregister_device+0x1b0/0x430 [ 180.656082][ T8285] input_unregister_device+0xb4/0xf0 [ 180.661497][ T8285] uinput_destroy_device+0x1e2/0x240 [ 180.666800][ T8285] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 180.672792][ T8285] ? uinput_read+0xd10/0xd10 [ 180.677402][ T8285] ? ioctl_file_clone+0x180/0x180 [ 180.683038][ T8285] ? __fget_files+0x32f/0x500 [ 180.687720][ T8285] ? do_dup2+0x520/0x520 [ 180.692747][ T8285] ? __x64_sys_futex+0x380/0x4f0 [ 180.697689][ T8285] ? uinput_compat_ioctl+0xa0/0xa0 [ 180.702805][ T8285] ksys_ioctl+0x11a/0x180 [ 180.707141][ T8285] __x64_sys_ioctl+0x6f/0xb0 [ 180.711745][ T8285] do_syscall_64+0xf6/0x7d0 [ 180.716267][ T8285] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 180.722155][ T8285] RIP: 0033:0x45ca29 [ 180.726047][ T8285] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 180.745659][ T8285] RSP: 002b:00007f596688cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.754077][ T8285] RAX: ffffffffffffffda RBX: 00000000004eff40 RCX: 000000000045ca29 [ 180.762090][ T8285] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 180.770237][ T8285] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 180.778595][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 180.786571][ T8285] R13: 00000000000005c4 R14: 00000000004c8855 R15: 00007f596688d6d4 [ 180.795857][ T8285] Kernel Offset: disabled [ 180.800242][ T8285] Rebooting in 86400 seconds..