[  OK  ] Started Getty on tty1.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.
[   47.781965][ T4889] systemd-udevd (4889) used greatest stack depth: 21616 bytes left
[   47.791572][ T4883] systemd-udevd (4883) used greatest stack depth: 21408 bytes left
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.


Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts.
2020/06/26 18:20:32 fuzzer started
2020/06/26 18:20:32 dialing manager at 10.128.0.26:45395
2020/06/26 18:20:32 syscalls: 3118
2020/06/26 18:20:32 code coverage: enabled
2020/06/26 18:20:32 comparison tracing: enabled
2020/06/26 18:20:32 extra coverage: enabled
2020/06/26 18:20:32 setuid sandbox: enabled
2020/06/26 18:20:32 namespace sandbox: enabled
2020/06/26 18:20:32 Android sandbox: /sys/fs/selinux/policy does not exist
2020/06/26 18:20:32 fault injection: enabled
2020/06/26 18:20:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/06/26 18:20:32 net packet injection: enabled
2020/06/26 18:20:32 net device setup: enabled
2020/06/26 18:20:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/06/26 18:20:32 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/06/26 18:20:32 USB emulation: enabled
18:22:21 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)

syzkaller login: [  165.740801][ T6849] IPVS: ftp: loaded support on port[0] = 21
18:22:21 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0)

[  165.885379][ T6849] chnl_net:caif_netlink_parms(): no params data found
[  165.998454][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.025229][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.034051][ T6849] device bridge_slave_0 entered promiscuous mode
[  166.054408][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.061561][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.071301][ T6849] device bridge_slave_1 entered promiscuous mode
[  166.105157][ T6849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.117943][ T6849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.152352][ T6849] team0: Port device team_slave_0 added
[  166.162162][ T6849] team0: Port device team_slave_1 added
[  166.191413][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.198659][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.226198][ T6849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.240112][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_1
18:22:22 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
pipe(&(0x7f0000000040))
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}})
epoll_create1(0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

[  166.248837][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.276271][ T6849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.298311][ T6995] IPVS: ftp: loaded support on port[0] = 21
[  166.337733][ T6849] device hsr_slave_0 entered promiscuous mode
[  166.393383][ T6849] device hsr_slave_1 entered promiscuous mode
[  166.482646][ T7015] IPVS: ftp: loaded support on port[0] = 21
18:22:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0xfb, 0x0, 0x86]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0x0, 0x4000000000, 0x0, 0x80, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff9]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r4, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/108)

[  166.751294][ T6995] chnl_net:caif_netlink_parms(): no params data found
[  166.994873][ T6849] netdevsim netdevsim0 netdevsim0: renamed from eth0
18:22:23 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019500)=""/102388, 0x18ff4}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xf7, &(0x7f00000002c0)="f7f249b97e0c9e57f43d2627000000007f58480aa4cefd3b79e77d0076cc03592a160500000232a56f72590900249950f30c82a1cef20d94c30e478947c990ab9493646d6c0b001d3b114d9246a8f6542604f2f03f76a9084f69d06e07dd8881dad3dc2ce0db72a147ae8d9f6c57597080fe26fa9fcc41e364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791484f831df7af25accd85c185148b97cac6589e5da1e53e414bd533dd0a8965a552bbae68630913ccae73397f390163acca51f32f3b44ae33e8c923cbdbc6d814d3ae71fb725351799023c6361e0de8d887a804a6f9f87a117227fa243c596d83a77acbbe323c1e"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  167.122306][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.144116][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.152605][ T6995] device bridge_slave_0 entered promiscuous mode
[  167.185551][ T7015] chnl_net:caif_netlink_parms(): no params data found
[  167.198944][ T7285] IPVS: ftp: loaded support on port[0] = 21
[  167.210347][ T6849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  167.247088][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.256244][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.266981][ T6995] device bridge_slave_1 entered promiscuous mode
[  167.288376][ T6849] netdevsim netdevsim0 netdevsim2: renamed from eth2
18:22:23 executing program 5:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
creat(0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

[  167.348033][ T6849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  167.442575][ T6995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.464289][ T7293] IPVS: ftp: loaded support on port[0] = 21
[  167.478702][ T6995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.589109][ T7346] IPVS: ftp: loaded support on port[0] = 21
[  167.626818][ T6995] team0: Port device team_slave_0 added
[  167.641124][ T6995] team0: Port device team_slave_1 added
[  167.690163][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.698307][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.724739][ T6995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.738247][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.745285][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.771237][ T6995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.786314][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.793669][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.801391][ T7015] device bridge_slave_0 entered promiscuous mode
[  167.876198][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.885493][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.894551][ T7015] device bridge_slave_1 entered promiscuous mode
[  167.927955][ T7285] chnl_net:caif_netlink_parms(): no params data found
[  167.944935][ T7015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.030861][ T6995] device hsr_slave_0 entered promiscuous mode
[  168.073148][ T6995] device hsr_slave_1 entered promiscuous mode
[  168.112971][ T6995] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.120734][ T6995] Cannot create hsr debugfs directory
[  168.149174][ T7015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.232580][ T7015] team0: Port device team_slave_0 added
[  168.294717][ T7015] team0: Port device team_slave_1 added
[  168.344686][ T7293] chnl_net:caif_netlink_parms(): no params data found
[  168.378470][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.406360][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.417435][ T7285] device bridge_slave_0 entered promiscuous mode
[  168.429424][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.437556][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.446543][ T7285] device bridge_slave_1 entered promiscuous mode
[  168.503099][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.519178][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.533493][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.540441][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.567973][ T7015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.580825][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.588885][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.615297][ T7015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.660284][ T7346] chnl_net:caif_netlink_parms(): no params data found
[  168.682048][ T6849] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.765802][ T7015] device hsr_slave_0 entered promiscuous mode
[  168.837239][ T7015] device hsr_slave_1 entered promiscuous mode
[  168.892839][ T7015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.900459][ T7015] Cannot create hsr debugfs directory
[  168.930007][ T7285] team0: Port device team_slave_0 added
[  168.965854][ T7285] team0: Port device team_slave_1 added
[  169.021713][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.042611][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.072296][ T7285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.089615][ T6849] 8021q: adding VLAN 0 to HW filter on device team0
[  169.099437][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.108299][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.138380][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.145659][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.154142][ T7293] device bridge_slave_0 entered promiscuous mode
[  169.161958][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.174248][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.205179][ T7285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.229477][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.241558][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.249697][ T7293] device bridge_slave_1 entered promiscuous mode
[  169.274546][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.286865][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.347538][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.360029][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.369478][ T7346] device bridge_slave_0 entered promiscuous mode
[  169.396472][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.407917][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.418243][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.425471][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.435334][ T6995] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  169.496155][ T6995] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  169.545827][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.554422][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.562146][ T7346] device bridge_slave_1 entered promiscuous mode
[  169.601781][ T7293] team0: Port device team_slave_0 added
[  169.609886][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.621976][ T6995] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  169.654423][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.706766][ T7285] device hsr_slave_0 entered promiscuous mode
[  169.753088][ T7285] device hsr_slave_1 entered promiscuous mode
[  169.812854][ T7285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.820407][ T7285] Cannot create hsr debugfs directory
[  169.827470][ T7293] team0: Port device team_slave_1 added
[  169.850144][ T6995] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  169.886187][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.916470][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.928979][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.938603][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.945719][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.974331][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.987783][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.995197][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.022660][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.039680][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.047506][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.074074][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.098267][ T7346] team0: Port device team_slave_0 added
[  170.158607][ T7346] team0: Port device team_slave_1 added
[  170.207161][ T7293] device hsr_slave_0 entered promiscuous mode
[  170.253317][ T7293] device hsr_slave_1 entered promiscuous mode
[  170.303063][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.310682][ T7293] Cannot create hsr debugfs directory
[  170.319884][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  170.330065][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.337797][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.364795][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.397269][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  170.406175][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  170.417181][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  170.426636][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.446688][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.454864][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.480948][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.527329][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.535987][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.544490][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.621817][ T7015] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  170.655525][ T7015] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  170.725290][ T7346] device hsr_slave_0 entered promiscuous mode
[  170.763112][ T7346] device hsr_slave_1 entered promiscuous mode
[  170.812795][ T7346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.820426][ T7346] Cannot create hsr debugfs directory
[  170.849905][ T6849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.861292][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  170.870062][ T7015] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  170.950837][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.961525][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.989324][ T7015] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  171.162967][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  171.170407][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  171.186271][ T6849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.238619][ T7285] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  171.347044][ T7285] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  171.397585][ T7285] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  171.456140][ T7285] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  171.573100][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  171.581769][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  171.620329][ T7293] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  171.662350][ T7293] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  171.744538][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  171.753552][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  171.763107][ T6849] device veth0_vlan entered promiscuous mode
[  171.794624][ T7293] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  171.827794][ T7293] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  171.885281][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  171.896798][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  171.908472][ T6849] device veth1_vlan entered promiscuous mode
[  171.923331][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.977637][ T7346] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  172.049766][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.080463][ T7346] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  172.117143][ T7346] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  172.192367][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  172.201013][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  172.210283][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  172.219304][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  172.242027][ T7015] 8021q: adding VLAN 0 to HW filter on device team0
[  172.264527][ T7346] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  172.297196][ T6849] device veth0_macvtap entered promiscuous mode
[  172.305026][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  172.314934][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.323136][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.330770][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.339943][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.378952][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.386394][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.396300][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.405669][ T3842] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.412789][ T3842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.420837][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.429866][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.438373][ T3842] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.445502][ T3842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.453502][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  172.461978][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  172.487399][ T6995] 8021q: adding VLAN 0 to HW filter on device team0
[  172.501757][ T6849] device veth1_macvtap entered promiscuous mode
[  172.519407][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  172.528346][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.536513][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  172.545610][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  172.592496][ T7285] 8021q: adding VLAN 0 to HW filter on device team0
[  172.608515][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  172.617157][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.629678][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.638254][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.645363][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.657415][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  172.666375][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  172.675369][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.684408][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.692843][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.699880][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.707734][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  172.717101][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  172.725772][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  172.735140][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.744513][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.764568][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.797968][ T7015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.809520][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  172.819515][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  172.829697][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  172.839795][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  172.848582][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  172.857717][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  172.866664][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  172.875563][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  172.884698][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.895449][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.904975][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.912015][ T2570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.935913][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.948837][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.986663][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  172.999360][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  173.008757][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  173.018574][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  173.027740][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.036758][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.046004][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  173.055599][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  173.064743][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  173.073900][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  173.082198][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.089293][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.097245][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  173.106205][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.130204][ T6995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.141893][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  173.165538][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.177600][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.186750][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.195811][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.205445][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  173.219867][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.260068][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.271228][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  173.286220][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  173.294659][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.303822][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.321913][ T7285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  173.337910][ T7285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.389868][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.398986][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.407776][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.416317][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.427669][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  173.600374][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.631289][ T7293] 8021q: adding VLAN 0 to HW filter on device team0
[  173.642811][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  173.650312][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  173.660346][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.669546][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.691458][ T6995] 8021q: adding VLAN 0 to HW filter on device batadv0
18:22:29 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00')
read(r0, &(0x7f0000000380)=""/233, 0xffbe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000380))

[  173.725424][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.744849][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.779858][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  173.796194][    C0] hrtimer: interrupt took 39215 ns
[  173.805843][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
18:22:29 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00')
read(r0, &(0x7f0000000380)=""/233, 0xffbe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000380))

[  173.844504][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.854875][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.913595][ T7346] 8021q: adding VLAN 0 to HW filter on device team0
[  173.932019][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  173.945293][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  173.973193][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.980323][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.001502][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
18:22:30 executing program 0:
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mlock(&(0x7f0000001000/0x3000)=nil, 0x3000)
remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

[  174.026670][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.046231][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.053408][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.069072][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.078029][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  174.094819][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  174.128217][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.155605][ T7015] device veth0_vlan entered promiscuous mode
[  174.169249][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  174.180344][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  174.201294][ T8115] mmap: syz-executor.0 (8115) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  174.206641][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  174.233274][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  174.248555][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.258288][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.267773][ T3842] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.274917][ T3842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.283266][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.293737][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.302299][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  174.311408][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  174.330261][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.338548][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  174.346994][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.356086][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.365683][ T3842] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.372817][ T3842] bridge0: port 2(bridge_slave_1) entered forwarding state
18:22:30 executing program 0:
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[  174.408640][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  174.419822][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  174.437344][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  174.451494][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
18:22:30 executing program 0:
unshare(0x2a000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2})

[  174.518646][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  174.545522][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  174.558830][ T8122] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  174.563270][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.621250][ T7015] device veth1_vlan entered promiscuous mode
18:22:30 executing program 0:
unshare(0x2a000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2})

[  174.669364][ T7293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.695115][ T7293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  174.718862][ T7285] device veth0_vlan entered promiscuous mode
[  174.735795][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  174.751112][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  174.762343][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
18:22:30 executing program 0:
unshare(0x2a000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2})

[  174.790641][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  174.820566][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  174.851277][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  174.860050][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  174.870588][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.884619][ T6995] device veth0_vlan entered promiscuous mode
[  174.970234][ T7285] device veth1_vlan entered promiscuous mode
[  175.007096][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  175.017759][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  175.027010][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  175.035815][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  175.051515][ T6995] device veth1_vlan entered promiscuous mode
[  175.143411][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  175.152047][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  175.168741][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.178119][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.187115][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  175.196344][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.210784][ T7015] device veth0_macvtap entered promiscuous mode
[  175.244606][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  175.253917][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  175.261762][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.274454][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.304924][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  175.315399][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  175.325398][ T7015] device veth1_macvtap entered promiscuous mode
[  175.353187][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  175.369029][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.378097][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.387770][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  175.396852][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  175.421330][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.433843][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  175.448092][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  175.458300][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  175.470369][ T6995] device veth0_macvtap entered promiscuous mode
[  175.484339][ T7285] device veth0_macvtap entered promiscuous mode
[  175.496378][ T7015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  175.508149][ T7015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.521106][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.541201][ T6995] device veth1_macvtap entered promiscuous mode
[  175.551784][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  175.562021][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  175.571186][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  175.579480][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  175.588670][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  175.600596][ T7285] device veth1_macvtap entered promiscuous mode
[  175.619525][ T7015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  175.631580][ T7015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.643516][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.663143][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  175.671175][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  175.682320][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  175.699892][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  175.711549][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.724509][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  175.735784][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.747814][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.766130][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  175.778897][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.789298][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  175.800371][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.810309][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  175.821793][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.837700][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.845639][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  175.856032][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  175.865181][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.873186][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.880589][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  175.889725][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  175.904349][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.915810][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  175.936860][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.949198][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  175.959680][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.970971][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.981086][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  175.993052][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.002966][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  176.013813][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.023736][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  176.034757][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.046106][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.063073][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  176.071901][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  176.082159][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  176.091426][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  176.223702][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  176.232598][ T2570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  176.402797][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  176.411407][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  176.451485][ T7293] device veth0_vlan entered promiscuous mode
18:22:32 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
read(r0, &(0x7f0000000300)=""/138, 0xff8c)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000dc)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="10002bbd701b05002f080000000000000000cf015ae5eb70cc71751e01800000058751300d5d34b735e8894000"], 0x3}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000)
open(0x0, 0x141042, 0x0)

[  176.674345][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  176.702997][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.784888][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.801508][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  176.820699][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  176.843883][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.855539][ T7293] device veth1_vlan entered promiscuous mode
[  176.916417][ T7346] device veth0_vlan entered promiscuous mode
[  176.929787][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  176.960546][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.969304][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  177.000665][ T7346] device veth1_vlan entered promiscuous mode
[  177.114447][ T8182] ------------[ cut here ]------------
[  177.120120][ T8182] kernel BUG at arch/x86/kvm/mmu/mmu.c:3719!
[  177.127165][ T8182] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  177.133248][ T8182] CPU: 1 PID: 8182 Comm: syz-executor.3 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0
[  177.143034][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  177.153097][ T8182] RIP: 0010:kvm_mmu_load+0xbfa/0xe00
[  177.158373][ T8182] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4
[  177.177969][ T8182] RSP: 0018:ffffc900172efb30 EFLAGS: 00010216
[  177.184113][ T8182] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000fde3000
[  177.192065][ T8182] RDX: 00000000000096e9 RSI: ffffffff8118e14a RDI: 0000000000000001
[  177.200538][ T8182] RBP: ffff8880664a4040 R08: ffff8880666f62c0 R09: ffffed1015ce719c
[  177.208483][ T8182] R10: ffff8880ae738cdb R11: ffffed1015ce719b R12: 0000000000000000
[  177.216426][ T8182] R13: 0000000000000001 R14: ffff8880664a4458 R15: 0000000000000000
[  177.224371][ T8182] FS:  00007f509db67700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
[  177.233271][ T8182] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.239834][ T8182] CR2: 00007ffcf51a97e0 CR3: 000000009b4e2000 CR4: 00000000001426e0
[  177.247783][ T8182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.255726][ T8182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.263684][ T8182] Call Trace:
[  177.266953][ T8182]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  177.272911][ T8182]  kvm_arch_vcpu_ioctl_run+0x4016/0x68d0
[  177.278522][ T8182]  ? kvm_arch_vcpu_runnable+0x6c0/0x6c0
[  177.284047][ T8182]  ? lock_downgrade+0x840/0x840
[  177.288872][ T8182]  ? rcu_read_lock_held_common+0xa0/0xa0
[  177.294488][ T8182]  ? check_preemption_disabled+0x38/0x220
[  177.300206][ T8182]  ? kvm_vcpu_ioctl+0x467/0xe10
[  177.305043][ T8182]  kvm_vcpu_ioctl+0x467/0xe10
[  177.309698][ T8182]  ? kvm_get_dirty_log_protect.isra.0+0x670/0x670
[  177.316088][ T8182]  ? ioctl_file_clone+0x180/0x180
[  177.321090][ T8182]  ? check_preemption_disabled+0x38/0x220
[  177.326783][ T8182]  ? __fget_files+0x299/0x400
[  177.331438][ T8182]  ? kvm_get_dirty_log_protect.isra.0+0x670/0x670
[  177.337823][ T8182]  ksys_ioctl+0x11a/0x180
[  177.342129][ T8182]  __x64_sys_ioctl+0x6f/0xb0
[  177.346692][ T8182]  do_syscall_64+0x60/0xe0
[  177.351083][ T8182]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  177.356946][ T8182] RIP: 0033:0x45cb19
[  177.360813][ T8182] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  177.380434][ T8182] RSP: 002b:00007f509db66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.388816][ T8182] RAX: ffffffffffffffda RBX: 00000000004e8a00 RCX: 000000000045cb19
[  177.396760][ T8182] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  177.404702][ T8182] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
[  177.412645][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  177.420587][ T8182] R13: 00000000000003d0 R14: 00000000004c68ae R15: 00007f509db676d4
[  177.428542][ T8182] Modules linked in:
[  177.435092][ T8182] ---[ end trace 81df77c7b32fce7a ]---
[  177.440633][ T8182] RIP: 0010:kvm_mmu_load+0xbfa/0xe00
[  177.445961][ T8182] Code: ac 23 99 00 48 8b 44 24 08 e9 cf f5 ff ff e8 6d 23 99 00 e9 b7 f4 ff ff 4c 89 f7 e8 90 23 99 00 e9 78 f4 ff ff e8 56 1a 5a 00 <0f> 0b 48 89 df e8 7c 23 99 00 e9 7e f8 ff ff e8 72 23 99 00 e9 c4
[  177.465930][ T8182] RSP: 0018:ffffc900172efb30 EFLAGS: 00010216
[  177.471998][ T8182] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000fde3000
[  177.480234][ T8182] RDX: 00000000000096e9 RSI: ffffffff8118e14a RDI: 0000000000000001
[  177.488441][ T8182] RBP: ffff8880664a4040 R08: ffff8880666f62c0 R09: ffffed1015ce719c
[  177.496481][ T8182] R10: ffff8880ae738cdb R11: ffffed1015ce719b R12: 0000000000000000
[  177.504589][ T8182] R13: 0000000000000001 R14: ffff8880664a4458 R15: 0000000000000000
[  177.512612][ T8182] FS:  00007f509db67700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
[  177.522283][ T8182] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.536831][ T8182] CR2: 00007ffcf51a97e0 CR3: 000000009b4e2000 CR4: 00000000001426e0
[  177.546410][ T8182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.554452][ T8182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.562752][ T8182] Kernel panic - not syncing: Fatal exception
[  177.570078][ T8182] Kernel Offset: disabled
[  177.574388][ T8182] Rebooting in 86400 seconds..