[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts. 2020/05/22 15:29:08 fuzzer started 2020/05/22 15:29:08 dialing manager at 10.128.0.26:38661 2020/05/22 15:29:08 syscalls: 3055 2020/05/22 15:29:08 code coverage: enabled 2020/05/22 15:29:08 comparison tracing: enabled 2020/05/22 15:29:08 extra coverage: enabled 2020/05/22 15:29:08 setuid sandbox: enabled 2020/05/22 15:29:08 namespace sandbox: enabled 2020/05/22 15:29:08 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/22 15:29:08 fault injection: enabled 2020/05/22 15:29:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/22 15:29:08 net packet injection: enabled 2020/05/22 15:29:08 net device setup: enabled 2020/05/22 15:29:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/22 15:29:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/22 15:29:08 USB emulation: enabled 15:29:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000e40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={[], [], @remote}}, 0x2, @in6=@remote}]}]}, 0xfc}}, 0x0) syzkaller login: [ 66.238247][ T6815] IPVS: ftp: loaded support on port[0] = 21 15:29:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62e", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 66.399255][ T6815] chnl_net:caif_netlink_parms(): no params data found [ 66.585804][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.596337][ T6931] IPVS: ftp: loaded support on port[0] = 21 [ 66.604746][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.620057][ T6815] device bridge_slave_0 entered promiscuous mode 15:29:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$revoke(0xb, 0x0) [ 66.646283][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.653975][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.662234][ T6815] device bridge_slave_1 entered promiscuous mode [ 66.728701][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.757135][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.834092][ T6815] team0: Port device team_slave_0 added [ 66.844794][ T6815] team0: Port device team_slave_1 added [ 66.890985][ T6931] chnl_net:caif_netlink_parms(): no params data found [ 66.927011][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.944559][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.975761][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.005113][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.012093][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.041511][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.068470][ T7080] IPVS: ftp: loaded support on port[0] = 21 [ 67.092565][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.102096][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.113146][ T6931] device bridge_slave_0 entered promiscuous mode 15:29:14 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) [ 67.156842][ T6815] device hsr_slave_0 entered promiscuous mode [ 67.225949][ T6815] device hsr_slave_1 entered promiscuous mode [ 67.288954][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.304960][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.323526][ T6931] device bridge_slave_1 entered promiscuous mode [ 67.421580][ T6931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.428822][ T7113] IPVS: ftp: loaded support on port[0] = 21 [ 67.464536][ T6931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:29:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) [ 67.518601][ T6931] team0: Port device team_slave_0 added [ 67.594730][ T6931] team0: Port device team_slave_1 added [ 67.658356][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.675803][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.732809][ T6931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.756737][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.782841][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.825352][ T6931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.870702][ T7201] IPVS: ftp: loaded support on port[0] = 21 15:29:15 executing program 5: socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x400300, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000000000000000000002100000000000000c0", 0x31}], 0x1}, 0x0) [ 67.990701][ T6931] device hsr_slave_0 entered promiscuous mode [ 68.053331][ T6931] device hsr_slave_1 entered promiscuous mode [ 68.102944][ T6931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.110737][ T6931] Cannot create hsr debugfs directory [ 68.154228][ T7080] chnl_net:caif_netlink_parms(): no params data found [ 68.200456][ T7300] IPVS: ftp: loaded support on port[0] = 21 [ 68.319948][ T6815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.368677][ T6815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.417783][ T6815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.506411][ T6815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.609205][ T7113] chnl_net:caif_netlink_parms(): no params data found [ 68.629348][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.637345][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.646367][ T7080] device bridge_slave_0 entered promiscuous mode [ 68.656681][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.664016][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.671937][ T7080] device bridge_slave_1 entered promiscuous mode [ 68.830740][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.881934][ T6931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.938975][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.976713][ T6931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.040759][ T6931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.095360][ T6931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.152501][ T7080] team0: Port device team_slave_0 added [ 69.162249][ T7080] team0: Port device team_slave_1 added [ 69.195051][ T7201] chnl_net:caif_netlink_parms(): no params data found [ 69.207401][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.215536][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.224252][ T7113] device bridge_slave_0 entered promiscuous mode [ 69.237785][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.246480][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.255513][ T7113] device bridge_slave_1 entered promiscuous mode [ 69.352350][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.359435][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.388810][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.404863][ T7300] chnl_net:caif_netlink_parms(): no params data found [ 69.444832][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.451806][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.479246][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.511204][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.534483][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.616789][ T7080] device hsr_slave_0 entered promiscuous mode [ 69.683018][ T7080] device hsr_slave_1 entered promiscuous mode [ 69.722651][ T7080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.730232][ T7080] Cannot create hsr debugfs directory [ 69.762307][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.790112][ T7113] team0: Port device team_slave_0 added [ 69.800511][ T7113] team0: Port device team_slave_1 added [ 69.854345][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.861631][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.875176][ T7201] device bridge_slave_0 entered promiscuous mode [ 69.885967][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.896361][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.928459][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.938229][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.947637][ T7201] device bridge_slave_1 entered promiscuous mode [ 69.964273][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.985187][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.992156][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.019289][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.072565][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.081627][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.095893][ T2581] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.103270][ T2581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.119195][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.127880][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.155729][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.179123][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.201119][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.208885][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.217472][ T7300] device bridge_slave_0 entered promiscuous mode [ 70.226913][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.236832][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.246017][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.256958][ T2714] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.264243][ T2714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.325240][ T7113] device hsr_slave_0 entered promiscuous mode [ 70.383077][ T7113] device hsr_slave_1 entered promiscuous mode [ 70.432591][ T7113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.440293][ T7113] Cannot create hsr debugfs directory [ 70.453671][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.464185][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.471248][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.479678][ T7300] device bridge_slave_1 entered promiscuous mode [ 70.498333][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.520656][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.572647][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.581790][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.597460][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.607370][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.617675][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.650274][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.689709][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.698414][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.711025][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.720341][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.732975][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.744195][ T7201] team0: Port device team_slave_0 added [ 70.751974][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.776939][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.793648][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.801958][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.811936][ T7201] team0: Port device team_slave_1 added [ 70.850365][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.882171][ T7080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.924909][ T7080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.976047][ T7080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.036208][ T7080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.117691][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.124828][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.151839][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.169676][ T7300] team0: Port device team_slave_0 added [ 71.187263][ T7300] team0: Port device team_slave_1 added [ 71.213668][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.229613][ T2496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.238200][ T2496] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.245343][ T2496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.261571][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.272236][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.299592][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.321434][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.329719][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.341723][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.371983][ T7300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.393932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.401960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.417937][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.427467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.434929][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.443752][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.451436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.475656][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.487110][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.517157][ T7300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.561532][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.571405][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.587145][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.597140][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.667806][ T7201] device hsr_slave_0 entered promiscuous mode [ 71.723154][ T7201] device hsr_slave_1 entered promiscuous mode [ 71.782563][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.790831][ T7201] Cannot create hsr debugfs directory [ 71.806744][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.815032][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.824069][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.877396][ T6931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.889482][ T6931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.903577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.912149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.921761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.931005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.940264][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.949813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.016798][ T7300] device hsr_slave_0 entered promiscuous mode [ 72.072787][ T7300] device hsr_slave_1 entered promiscuous mode [ 72.112366][ T7300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.119947][ T7300] Cannot create hsr debugfs directory [ 72.155924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.257565][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.266824][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.284117][ T6815] device veth0_vlan entered promiscuous mode [ 72.319184][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.328310][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.342731][ T7113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.396316][ T7113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.440768][ T6815] device veth1_vlan entered promiscuous mode [ 72.468973][ T7113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.538736][ T7113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.580850][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.589378][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.599731][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.607805][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.619556][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.634323][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.710141][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.729593][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.738265][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.748307][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.758450][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.769597][ T6815] device veth0_macvtap entered promiscuous mode [ 72.831042][ T6815] device veth1_macvtap entered promiscuous mode [ 72.840940][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.851281][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.860079][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.869459][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.878954][ T2697] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.886141][ T2697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.897939][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.924552][ T7201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.974822][ T7201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.009671][ T7201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.085368][ T7201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.170330][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.179441][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.188603][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.198970][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.209116][ T2482] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.216300][ T2482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.280036][ T6931] device veth0_vlan entered promiscuous mode [ 73.311929][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.323491][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.331880][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.341960][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.361192][ T6931] device veth1_vlan entered promiscuous mode [ 73.383430][ T7300] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.415045][ T7300] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.465858][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.474369][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.483740][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.492406][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.501876][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.513888][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.521820][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.531168][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.544070][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.564910][ T7300] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.636741][ T7300] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.708517][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.716896][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.727783][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.748356][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.780127][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.798800][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.809055][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.819178][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.830083][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.842549][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.856349][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.904286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.912930][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.977768][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.054735][ T7080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.077881][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.086924][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.158966][ T6931] device veth0_macvtap entered promiscuous mode 15:29:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000e40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={[], [], @remote}}, 0x2, @in6=@remote}]}]}, 0xfc}}, 0x0) [ 74.217852][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.232703][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.249367][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.258863][ T2581] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.266031][ T2581] bridge0: port 1(bridge_slave_0) entered forwarding state 15:29:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000e40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={[], [], @remote}}, 0x2, @in6=@remote}]}]}, 0xfc}}, 0x0) [ 74.288969][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.328519][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 15:29:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000e40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={[], [], @remote}}, 0x2, @in6=@remote}]}]}, 0xfc}}, 0x0) [ 74.364093][ T2581] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.371187][ T2581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.393678][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.409981][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.418120][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.445582][ T6931] device veth1_macvtap entered promiscuous mode 15:29:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000001300)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="21bca274769e620a2d34fa0095e0612687ecb86a548802a90200000500000000000000b579a782c270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@journal_async_commit='journal_async_commit'}]}) [ 74.469992][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.515744][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.528107][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.547528][ T2714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.610894][ T8081] EXT4-fs (loop0): Mount option "journal_async_commit" incompatible with ext3 [ 74.626676][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.652097][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.660989][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.681201][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.700416][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.745557][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.764890][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.784387][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.801717][ T7113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.842408][ T7113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.870506][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.879514][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 15:29:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000001300)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="21bca274769e620a2d34fa0095e0612687ecb86a548802a90200000500000000000000b579a782c270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@journal_async_commit='journal_async_commit'}]}) [ 74.888712][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.915595][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.942827][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.951358][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.973149][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.976351][ T8090] EXT4-fs (loop0): Mount option "journal_async_commit" incompatible with ext3 [ 74.992382][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.020859][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.032592][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.045433][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.066488][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.128317][ T7201] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.141307][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.161886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:29:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000001300)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="21bca274769e620a2d34fa0095e0612687ecb86a548802a90200000500000000000000b579a782c270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@journal_async_commit='journal_async_commit'}]}) [ 75.180337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.188757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.207423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.219265][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.283496][ T8096] EXT4-fs (loop0): Mount option "journal_async_commit" incompatible with ext3 [ 75.309309][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.320266][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.330151][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.337382][ T7800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.348446][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.360435][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.369656][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.377855][ T7800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.387680][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.396226][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 15:29:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000001300)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="21bca274769e620a2d34fa0095e0612687ecb86a548802a90200000500000000000000b579a782c270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@journal_async_commit='journal_async_commit'}]}) [ 75.461128][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.498686][ T7300] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.527696][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.537118][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.553685][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.571748][ T8105] EXT4-fs (loop0): Mount option "journal_async_commit" incompatible with ext3 [ 75.737473][ T7080] device veth0_vlan entered promiscuous mode [ 75.760267][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.781445][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.796655][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.803841][ T7800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.813032][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.825776][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.834717][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.841852][ T7800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.851100][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.861590][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.870917][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.880194][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.903023][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.911697][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.964601][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.974962][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.984180][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.993601][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.003198][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.012914][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.021573][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.031204][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.040720][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.050017][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.059715][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.068455][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.090875][ T7201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.105040][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.121951][ T7113] device veth0_vlan entered promiscuous mode [ 76.135156][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.145034][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.155817][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.167995][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.177066][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.189011][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.202364][ T7080] device veth1_vlan entered promiscuous mode [ 76.238094][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.246742][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.255085][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.265050][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.275000][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.284186][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.293492][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.301900][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.314145][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.336413][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.346430][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.363636][ T7113] device veth1_vlan entered promiscuous mode [ 76.373969][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.396204][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.479331][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.490705][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.499567][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.509072][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.518139][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.526229][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.549439][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.561278][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.578603][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.599402][ T7113] device veth0_macvtap entered promiscuous mode [ 76.610218][ T7080] device veth0_macvtap entered promiscuous mode [ 76.630108][ T7113] device veth1_macvtap entered promiscuous mode [ 76.651109][ T7080] device veth1_macvtap entered promiscuous mode [ 76.672227][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.680309][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.689856][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.699079][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.708305][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.718147][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.770015][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.785717][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.797322][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.808510][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.821555][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.842572][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.851023][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.860978][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.870372][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.882736][ T7201] device veth0_vlan entered promiscuous mode [ 76.891398][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.911051][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.927149][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.937880][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.949024][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.960003][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.975455][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.985699][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.999117][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.017134][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.028195][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.040022][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.055035][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.066783][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.075139][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.088646][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.098007][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.110930][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.120208][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.133543][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.156013][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.170799][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.187899][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.198645][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.213670][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.228589][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.242378][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.253411][ T7201] device veth1_vlan entered promiscuous mode [ 77.273445][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.283389][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.497811][ T7300] device veth0_vlan entered promiscuous mode [ 77.562791][ C0] hrtimer: interrupt took 74201 ns [ 77.587008][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.598150][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.683283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.691272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.718232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.737870][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.755866][ T7300] device veth1_vlan entered promiscuous mode [ 77.769544][ T7201] device veth0_macvtap entered promiscuous mode [ 77.817936][ T7201] device veth1_macvtap entered promiscuous mode [ 77.898408][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.914046][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.923034][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.931376][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.940329][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.952709][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.965730][ T7300] device veth0_macvtap entered promiscuous mode [ 77.976817][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.989102][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.008685][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.019952][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.032242][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.043325][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.060176][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.071250][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.083752][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.097822][ T7300] device veth1_macvtap entered promiscuous mode [ 78.107106][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.116279][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.126411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.136105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.149328][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.161490][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.172504][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.186026][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.196922][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.207984][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.218559][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.229758][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.243330][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.260424][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.270722][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.301068][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.313406][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.325340][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.336360][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.347975][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.358959][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.369705][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.380802][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.392244][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.403384][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.415391][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.465287][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.474367][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.485816][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.496872][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.507976][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.519843][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.530882][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.543524][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.553937][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.564463][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.574512][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.585207][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.597238][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.607702][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.617162][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.814027][ T8142] input: syz1 as /devices/virtual/input/input5 [ 78.828460][ T8141] ================================================================== [ 78.836744][ T8141] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 78.843947][ T8141] Read of size 8 at addr ffff8880975f4158 by task syz-executor.4/8141 [ 78.852123][ T8141] [ 78.854461][ T8141] CPU: 1 PID: 8141 Comm: syz-executor.4 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 78.864260][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.874324][ T8141] Call Trace: [ 78.877623][ T8141] dump_stack+0x18f/0x20d [ 78.881966][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 78.886829][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 78.891727][ T8141] print_address_description.constprop.0.cold+0xd3/0x413 [ 78.898762][ T8141] ? cdev_device_del+0x69/0x80 [ 78.903542][ T8141] ? evdev_disconnect+0x3d/0xb0 [ 78.908406][ T8141] ? __input_unregister_device+0x1b0/0x430 [ 78.914224][ T8141] ? input_unregister_device+0xb4/0xf0 [ 78.919696][ T8141] ? uinput_destroy_device+0x1e2/0x240 [ 78.925166][ T8141] ? vprintk_func+0x97/0x1a6 [ 78.929768][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 78.934627][ T8141] kasan_report.cold+0x1f/0x37 [ 78.939413][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 78.944273][ T8141] __mutex_lock+0x1033/0x13c0 [ 78.948970][ T8141] ? evdev_cleanup+0x21/0x190 [ 78.953657][ T8141] ? print_usage_bug+0x240/0x240 [ 78.958607][ T8141] ? trace_hardirqs_off+0x50/0x220 [ 78.963744][ T8141] ? mutex_trylock+0x2c0/0x2c0 [ 78.968520][ T8141] ? mark_held_locks+0x9f/0xe0 [ 78.973304][ T8141] ? kfree+0x1eb/0x2b0 [ 78.977479][ T8141] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 78.983467][ T8141] ? kfree_const+0x51/0x60 [ 78.987901][ T8141] ? evdev_cleanup+0x21/0x190 [ 78.992589][ T8141] evdev_cleanup+0x21/0x190 [ 78.997102][ T8141] evdev_disconnect+0x45/0xb0 [ 79.001787][ T8141] __input_unregister_device+0x1b0/0x430 [ 79.007517][ T8141] input_unregister_device+0xb4/0xf0 [ 79.012812][ T8141] uinput_destroy_device+0x1e2/0x240 [ 79.018200][ T8141] ? uinput_destroy_device+0x240/0x240 [ 79.023664][ T8141] uinput_release+0x37/0x50 [ 79.028180][ T8141] __fput+0x33e/0x880 [ 79.032208][ T8141] task_work_run+0xf4/0x1b0 [ 79.036725][ T8141] exit_to_usermode_loop+0x2fa/0x360 [ 79.042023][ T8141] do_syscall_64+0x6b1/0x7d0 [ 79.046630][ T8141] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 79.052526][ T8141] RIP: 0033:0x416621 [ 79.056422][ T8141] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 79.076065][ T8141] RSP: 002b:00007ffe2aabd750 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 79.084480][ T8141] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 79.092462][ T8141] RDX: 0000001b2be20000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 79.100446][ T8141] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 79.108424][ T8141] R10: 00007ffe2aabd840 R11: 0000000000000293 R12: 0000000000792b38 [ 79.116414][ T8141] R13: 0000000000013420 R14: ffffffffffffffff R15: 000000000078bf0c [ 79.124405][ T8141] [ 79.126736][ T8141] Allocated by task 8142: [ 79.131076][ T8141] save_stack+0x1b/0x40 [ 79.135243][ T8141] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 79.140887][ T8141] kmem_cache_alloc_trace+0x153/0x7d0 [ 79.146280][ T8141] evdev_connect+0x80/0x4d0 [ 79.150802][ T8141] input_attach_handler+0x194/0x200 [ 79.156018][ T8141] input_register_device.cold+0xf5/0x246 15:29:26 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, r3, 0x0, 0x7, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r5, r0, 0x0, 0x0, 0x0}, 0x30) 15:29:26 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x18c901, 0x0) 15:29:26 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) [ 79.161664][ T8141] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 79.167656][ T8141] ksys_ioctl+0x11a/0x180 [ 79.171996][ T8141] __x64_sys_ioctl+0x6f/0xb0 [ 79.176600][ T8141] do_syscall_64+0xf6/0x7d0 [ 79.181117][ T8141] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 79.187011][ T8141] [ 79.189344][ T8141] Freed by task 8141: [ 79.193340][ T8141] save_stack+0x1b/0x40 [ 79.197504][ T8141] __kasan_slab_free+0xf7/0x140 [ 79.202362][ T8141] kfree+0x109/0x2b0 [ 79.206270][ T8141] device_release+0x71/0x200 [ 79.210874][ T8141] kobject_put+0x1c8/0x2f0 [ 79.215333][ T8141] cdev_device_del+0x69/0x80 [ 79.219934][ T8141] evdev_disconnect+0x3d/0xb0 [ 79.224631][ T8141] __input_unregister_device+0x1b0/0x430 [ 79.230255][ T8141] input_unregister_device+0xb4/0xf0 [ 79.235532][ T8141] uinput_destroy_device+0x1e2/0x240 [ 79.240805][ T8141] uinput_release+0x37/0x50 [ 79.245291][ T8141] __fput+0x33e/0x880 [ 79.249255][ T8141] task_work_run+0xf4/0x1b0 [ 79.253770][ T8141] exit_to_usermode_loop+0x2fa/0x360 [ 79.259037][ T8141] do_syscall_64+0x6b1/0x7d0 [ 79.263627][ T8141] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 79.269514][ T8141] [ 79.271825][ T8141] The buggy address belongs to the object at ffff8880975f4000 [ 79.271825][ T8141] which belongs to the cache kmalloc-2k of size 2048 [ 79.285945][ T8141] The buggy address is located 344 bytes inside of [ 79.285945][ T8141] 2048-byte region [ffff8880975f4000, ffff8880975f4800) [ 79.299297][ T8141] The buggy address belongs to the page: [ 79.304916][ T8141] page:ffffea00025d7d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 79.314003][ T8141] flags: 0xfffe0000000200(slab) [ 79.318838][ T8141] raw: 00fffe0000000200 ffffea00028c6288 ffffea000257ef48 ffff8880aa000e00 [ 79.327404][ T8141] raw: 0000000000000000 ffff8880975f4000 0000000100000001 0000000000000000 [ 79.335965][ T8141] page dumped because: kasan: bad access detected [ 79.342367][ T8141] [ 79.344696][ T8141] Memory state around the buggy address: [ 79.350305][ T8141] ffff8880975f4000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.358356][ T8141] ffff8880975f4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.366399][ T8141] >ffff8880975f4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.374474][ T8141] ^ [ 79.381405][ T8141] ffff8880975f4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.389462][ T8141] ffff8880975f4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.397500][ T8141] ================================================================== [ 79.405540][ T8141] Disabling lock debugging due to kernel taint [ 79.450855][ T8141] Kernel panic - not syncing: panic_on_warn set ... [ 79.457671][ T8141] CPU: 1 PID: 8141 Comm: syz-executor.4 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 79.469965][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.480002][ T8141] Call Trace: [ 79.483277][ T8141] dump_stack+0x18f/0x20d [ 79.487604][ T8141] ? __mutex_lock+0xf50/0x13c0 [ 79.492372][ T8141] panic+0x2e3/0x75c [ 79.496256][ T8141] ? __warn_printk+0xf3/0xf3 [ 79.500837][ T8141] ? preempt_schedule_common+0x5e/0xc0 [ 79.506280][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 79.511106][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 79.515937][ T8141] ? preempt_schedule_thunk+0x16/0x18 [ 79.521289][ T8141] ? trace_hardirqs_on+0x55/0x230 [ 79.526307][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 79.531134][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 79.535963][ T8141] end_report+0x4d/0x53 [ 79.540110][ T8141] kasan_report.cold+0xd/0x37 [ 79.544769][ T8141] ? __mutex_lock+0x1033/0x13c0 [ 79.549600][ T8141] __mutex_lock+0x1033/0x13c0 [ 79.554256][ T8141] ? evdev_cleanup+0x21/0x190 [ 79.558918][ T8141] ? print_usage_bug+0x240/0x240 [ 79.563852][ T8141] ? trace_hardirqs_off+0x50/0x220 [ 79.568940][ T8141] ? mutex_trylock+0x2c0/0x2c0 [ 79.574656][ T8141] ? mark_held_locks+0x9f/0xe0 [ 79.579424][ T8141] ? kfree+0x1eb/0x2b0 [ 79.583473][ T8141] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 79.589435][ T8141] ? kfree_const+0x51/0x60 [ 79.593833][ T8141] ? evdev_cleanup+0x21/0x190 [ 79.598488][ T8141] evdev_cleanup+0x21/0x190 [ 79.602971][ T8141] evdev_disconnect+0x45/0xb0 [ 79.607627][ T8141] __input_unregister_device+0x1b0/0x430 [ 79.613256][ T8141] input_unregister_device+0xb4/0xf0 [ 79.618525][ T8141] uinput_destroy_device+0x1e2/0x240 [ 79.623790][ T8141] ? uinput_destroy_device+0x240/0x240 [ 79.629243][ T8141] uinput_release+0x37/0x50 [ 79.633723][ T8141] __fput+0x33e/0x880 [ 79.637686][ T8141] task_work_run+0xf4/0x1b0 [ 79.642171][ T8141] exit_to_usermode_loop+0x2fa/0x360 [ 79.647437][ T8141] do_syscall_64+0x6b1/0x7d0 [ 79.652008][ T8141] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 79.657893][ T8141] RIP: 0033:0x416621 [ 79.661767][ T8141] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 79.681348][ T8141] RSP: 002b:00007ffe2aabd750 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 79.689734][ T8141] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 79.697685][ T8141] RDX: 0000001b2be20000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 79.705634][ T8141] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 79.713582][ T8141] R10: 00007ffe2aabd840 R11: 0000000000000293 R12: 0000000000792b38 [ 79.721544][ T8141] R13: 0000000000013420 R14: ffffffffffffffff R15: 000000000078bf0c [ 79.730838][ T8141] Kernel Offset: disabled [ 79.735287][ T8141] Rebooting in 86400 seconds..