[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. 2020/05/22 17:48:28 fuzzer started 2020/05/22 17:48:28 dialing manager at 10.128.0.26:38661 2020/05/22 17:48:29 syscalls: 3055 2020/05/22 17:48:29 code coverage: enabled 2020/05/22 17:48:29 comparison tracing: enabled 2020/05/22 17:48:29 extra coverage: enabled 2020/05/22 17:48:29 setuid sandbox: enabled 2020/05/22 17:48:29 namespace sandbox: enabled 2020/05/22 17:48:29 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/22 17:48:29 fault injection: enabled 2020/05/22 17:48:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/22 17:48:29 net packet injection: enabled 2020/05/22 17:48:29 net device setup: enabled 2020/05/22 17:48:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/22 17:48:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/22 17:48:29 USB emulation: enabled 17:49:39 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x2c01, 0x0) syzkaller login: [ 129.457271][ T6810] IPVS: ftp: loaded support on port[0] = 21 17:49:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xc29, &(0x7f0000000440)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = io_uring_setup(0xc29, &(0x7f0000000080)={0x0, 0x0, 0x7}) dup2(r0, r1) [ 129.600833][ T6810] chnl_net:caif_netlink_parms(): no params data found [ 129.698748][ T6810] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.720908][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.729318][ T6810] device bridge_slave_0 entered promiscuous mode [ 129.764234][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.780841][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.788989][ T6810] device bridge_slave_1 entered promiscuous mode [ 129.838772][ T6810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.845089][ T6940] IPVS: ftp: loaded support on port[0] = 21 [ 129.877428][ T6810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.925585][ T6810] team0: Port device team_slave_0 added [ 129.956820][ T6810] team0: Port device team_slave_1 added [ 129.991580][ T6810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.998569][ T6810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.026038][ T6810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 17:49:40 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000340)=""/197) [ 130.042179][ T6810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.049147][ T6810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.078036][ T6810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.185862][ T6810] device hsr_slave_0 entered promiscuous mode [ 130.243228][ T6810] device hsr_slave_1 entered promiscuous mode 17:49:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 130.377087][ T6998] IPVS: ftp: loaded support on port[0] = 21 [ 130.529341][ T7016] IPVS: ftp: loaded support on port[0] = 21 [ 130.646927][ T6940] chnl_net:caif_netlink_parms(): no params data found 17:49:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb36d, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 131.066165][ T7234] IPVS: ftp: loaded support on port[0] = 21 17:49:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000910000108006d"], 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 131.109420][ T6998] chnl_net:caif_netlink_parms(): no params data found [ 131.130999][ T6810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.187109][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.195097][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.207357][ T6940] device bridge_slave_0 entered promiscuous mode [ 131.254073][ T6810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.302409][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.309675][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.319908][ T6940] device bridge_slave_1 entered promiscuous mode [ 131.339308][ T7016] chnl_net:caif_netlink_parms(): no params data found [ 131.359400][ T6810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.385771][ T6810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.488517][ T7357] IPVS: ftp: loaded support on port[0] = 21 [ 131.498001][ T6940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.539139][ T6940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.624169][ T6940] team0: Port device team_slave_0 added [ 131.665223][ T6940] team0: Port device team_slave_1 added [ 131.674964][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.683803][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.692928][ T6998] device bridge_slave_0 entered promiscuous mode [ 131.703520][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.711043][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.718837][ T7016] device bridge_slave_0 entered promiscuous mode [ 131.730134][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.739148][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.749866][ T7016] device bridge_slave_1 entered promiscuous mode [ 131.791667][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.798754][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.807634][ T6998] device bridge_slave_1 entered promiscuous mode [ 131.823459][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.837122][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.883906][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.893088][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.920202][ T6940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.932920][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.940133][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.966912][ T6940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.980684][ T6998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.993983][ T7016] team0: Port device team_slave_0 added [ 132.003621][ T6998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.046051][ T7016] team0: Port device team_slave_1 added [ 132.133929][ T6940] device hsr_slave_0 entered promiscuous mode [ 132.171068][ T6940] device hsr_slave_1 entered promiscuous mode [ 132.221270][ T6940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.229945][ T6940] Cannot create hsr debugfs directory [ 132.236565][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.243793][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.269991][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.308505][ T6998] team0: Port device team_slave_0 added [ 132.321646][ T6998] team0: Port device team_slave_1 added [ 132.357673][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.365114][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.393796][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.416655][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.424152][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.451493][ T6998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.468062][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.476263][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.503595][ T6998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.516586][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 132.638238][ T7234] chnl_net:caif_netlink_parms(): no params data found [ 132.746846][ T7016] device hsr_slave_0 entered promiscuous mode [ 132.800915][ T7016] device hsr_slave_1 entered promiscuous mode [ 132.840914][ T7016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.840943][ T7016] Cannot create hsr debugfs directory [ 132.882929][ T6998] device hsr_slave_0 entered promiscuous mode [ 132.911079][ T6998] device hsr_slave_1 entered promiscuous mode [ 132.970744][ T6998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.978307][ T6998] Cannot create hsr debugfs directory [ 133.063715][ T6810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.118490][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.126616][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.138208][ T7357] device bridge_slave_0 entered promiscuous mode [ 133.186507][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.194385][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.209523][ T7357] device bridge_slave_1 entered promiscuous mode [ 133.237690][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.245691][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.254844][ T7234] device bridge_slave_0 entered promiscuous mode [ 133.294915][ T6810] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.301969][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.309146][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.319278][ T7234] device bridge_slave_1 entered promiscuous mode [ 133.330688][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.340122][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.350246][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.394403][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.404771][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.414880][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.423794][ T2592] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.431295][ T2592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.439266][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.448416][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.457124][ T2592] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.464294][ T2592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.472128][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.547144][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.557169][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.569016][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.595980][ T7357] team0: Port device team_slave_0 added [ 133.627822][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.638584][ T6940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.676406][ T6940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.739019][ T7357] team0: Port device team_slave_1 added [ 133.749786][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.759362][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.780733][ T6940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.828762][ T6940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.900434][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.908838][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.922984][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.933639][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.942699][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.962692][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.970549][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.998530][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.015112][ T6810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.028484][ T6810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.039782][ T7234] team0: Port device team_slave_0 added [ 134.053659][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.064862][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.076776][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.085256][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.111614][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.144765][ T7016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.194658][ T7234] team0: Port device team_slave_1 added [ 134.235472][ T7016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.335240][ T7357] device hsr_slave_0 entered promiscuous mode [ 134.390817][ T7357] device hsr_slave_1 entered promiscuous mode [ 134.450558][ T7357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.458132][ T7357] Cannot create hsr debugfs directory [ 134.465058][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.473955][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.500780][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.512352][ T7016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.565787][ T7016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.630721][ T6998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.695889][ T6998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.754511][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.761646][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.789412][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.831696][ T6998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.917134][ T7234] device hsr_slave_0 entered promiscuous mode [ 134.960705][ T7234] device hsr_slave_1 entered promiscuous mode [ 135.020916][ T7234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.028492][ T7234] Cannot create hsr debugfs directory [ 135.035996][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.043705][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.063955][ T6810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.080361][ T6998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.274840][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.285394][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.409063][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.427537][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.438113][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.451046][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.496116][ T6810] device veth0_vlan entered promiscuous mode [ 135.517194][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.536132][ T6940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.555531][ T6810] device veth1_vlan entered promiscuous mode [ 135.577451][ T7357] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.625699][ T7357] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.669869][ T7357] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 135.703047][ T7357] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.768648][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.799977][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.809564][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.818925][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.827174][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.863049][ T6998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.906556][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.915471][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.926665][ T2592] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.933815][ T2592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.941634][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.950488][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.958993][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.967251][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.975510][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.983763][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.006717][ T7234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.085106][ T6810] device veth0_macvtap entered promiscuous mode [ 136.093919][ T7234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.143850][ T6940] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.151188][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.159169][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.168240][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.177384][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.186589][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.193774][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.205662][ T6998] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.218505][ T7234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.275248][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.284104][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.299825][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.307077][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.315013][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.324301][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.333549][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.351282][ T6810] device veth1_macvtap entered promiscuous mode [ 136.367682][ T7234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.441710][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.451124][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.459560][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.466719][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.476100][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.486882][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.496166][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.506127][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.515296][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.524298][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.533405][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.540537][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.549345][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.599475][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.609185][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.619132][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.632429][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.642053][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.649190][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.658484][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.668181][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.677724][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.686543][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.695986][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.705088][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.714317][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.738853][ T6810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.753166][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.778701][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.788622][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.797500][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.810876][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.821354][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.831976][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.841463][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.851128][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.879373][ T6940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.894683][ T6940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.911402][ T6810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.934968][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.944455][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.954365][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.964879][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.974725][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.985885][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.994964][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.003844][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.013226][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.022116][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.031096][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.039734][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.051160][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.058923][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.069340][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.097490][ T6998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.138648][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.147692][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.156023][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.346007][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.361143][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:49:47 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x2c01, 0x0) [ 137.392433][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.467382][ T6940] 8021q: adding VLAN 0 to HW filter on device batadv0 17:49:48 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x2c01, 0x0) [ 137.558021][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.566976][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.580755][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.595857][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 17:49:48 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x2c01, 0x0) [ 137.613885][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.651169][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.675236][ T6998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.688551][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 17:49:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) [ 137.718644][ T7234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.763426][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.774355][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.800715][ T7016] device veth0_vlan entered promiscuous mode [ 137.836453][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.847596][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.860481][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.869534][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.880434][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.889285][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.902075][ C0] hrtimer: interrupt took 31645 ns [ 137.909291][ T2592] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.916531][ T2592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.926872][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:49:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) [ 137.936999][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.947122][ T2592] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.954297][ T2592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.967486][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.978051][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.988192][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.997603][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.016841][ T7016] device veth1_vlan entered promiscuous mode [ 138.057469][ T7234] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.072843][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.089725][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.099243][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 17:49:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) [ 138.109568][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.163248][ T6940] device veth0_vlan entered promiscuous mode 17:49:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) [ 138.212510][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.224179][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.250324][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.271772][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.287356][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.302799][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.330250][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.347912][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.370642][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.379597][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.386775][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.408121][ T6940] device veth1_vlan entered promiscuous mode [ 138.441660][ T7016] device veth0_macvtap entered promiscuous mode [ 138.466777][ T6998] device veth0_vlan entered promiscuous mode [ 138.473739][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.484508][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.493012][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.502579][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.510980][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.518910][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.527639][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.536721][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.546070][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.554715][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.563384][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.572158][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.581024][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.589555][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.598505][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.607053][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.614194][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.622903][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.633794][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.641857][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.649630][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.661262][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.669846][ T7016] device veth1_macvtap entered promiscuous mode [ 138.715213][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.724731][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.734280][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.743608][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.752967][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.763800][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.781151][ T6998] device veth1_vlan entered promiscuous mode [ 138.792995][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.802338][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.835212][ T7234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.851214][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.867644][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.880702][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.894803][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.907605][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.916574][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.926042][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.935144][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.944330][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.955473][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.982503][ T7016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.995829][ T7016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.011916][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.029708][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.050319][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.057980][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.068551][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.083526][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.094229][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.102014][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.117300][ T7234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.136616][ T6940] device veth0_macvtap entered promiscuous mode [ 139.182646][ T6940] device veth1_macvtap entered promiscuous mode [ 139.225518][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.234027][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.244726][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.255358][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.271114][ T6998] device veth0_macvtap entered promiscuous mode [ 139.352300][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.363639][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.374180][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.385484][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.398227][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.409576][ T6998] device veth1_macvtap entered promiscuous mode [ 139.434627][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.443456][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.453046][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.463150][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.473144][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.484140][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.499508][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.512108][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.522994][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.533774][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.545722][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.641969][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.661344][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.720980][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.747261][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.758237][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.774848][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.785724][ T8105] input: syz1 as /devices/virtual/input/input5 [ 139.788741][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.812496][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.875405][ T6998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.888583][ T6998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.902247][ T8101] ================================================================== [ 139.910678][ T8101] BUG: KASAN: use-after-free in kobject_put+0x296/0x2f0 [ 139.917620][ T8101] Read of size 1 at addr ffff8880a7c481c4 by task syz-executor.3/8101 [ 139.925769][ T8101] [ 139.928203][ T8101] CPU: 1 PID: 8101 Comm: syz-executor.3 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 139.932644][ T6998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.938088][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.938103][ T8101] Call Trace: [ 139.938125][ T8101] dump_stack+0x18f/0x20d [ 139.938143][ T8101] ? kobject_put+0x296/0x2f0 [ 139.949153][ T6998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.959217][ T8101] ? kobject_put+0x296/0x2f0 [ 139.959237][ T8101] print_address_description.constprop.0.cold+0xd3/0x413 [ 139.959251][ T8101] ? synchronize_rcu.part.0+0xda/0xf0 [ 139.959264][ T8101] ? synchronize_rcu_expedited+0x620/0x620 [ 139.959279][ T8101] ? vprintk_func+0x97/0x1a6 [ 139.959296][ T8101] ? kobject_put+0x296/0x2f0 [ 139.963170][ T6998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.966878][ T8101] kasan_report.cold+0x1f/0x37 [ 139.966896][ T8101] ? kobject_put+0x296/0x2f0 [ 139.966913][ T8101] kobject_put+0x296/0x2f0 [ 139.971934][ T6998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.981320][ T8101] put_device+0x1b/0x30 [ 139.981342][ T8101] __input_unregister_device+0x1b0/0x430 [ 139.981360][ T8101] input_unregister_device+0xb4/0xf0 [ 139.981375][ T8101] uinput_destroy_device+0x1e2/0x240 [ 139.981394][ T8101] ? uinput_destroy_device+0x240/0x240 [ 139.988504][ T6998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.993078][ T8101] uinput_release+0x37/0x50 [ 139.993095][ T8101] __fput+0x33e/0x880 [ 139.993116][ T8101] task_work_run+0xf4/0x1b0 [ 139.993135][ T8101] exit_to_usermode_loop+0x2fa/0x360 [ 139.993154][ T8101] do_syscall_64+0x6b1/0x7d0 [ 140.104574][ T8101] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 140.110477][ T8101] RIP: 0033:0x416621 [ 140.114385][ T8101] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 140.134143][ T8101] RSP: 002b:00007ffd892a4a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 140.142559][ T8101] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 140.150522][ T8101] RDX: 0000001b31320000 RSI: 0000000000000292 RDI: 0000000000000003 [ 140.158511][ T8101] RBP: 0000000000000001 R08: 00000000f347e295 R09: 00000000551800d4 [ 140.166523][ T8101] R10: 00007ffd892a4b50 R11: 0000000000000293 R12: 000000000078c900 [ 140.174597][ T8101] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bfac [ 140.182581][ T8101] [ 140.184893][ T8101] Allocated by task 8105: [ 140.189247][ T8101] save_stack+0x1b/0x40 [ 140.193400][ T8101] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 140.199040][ T8101] kmem_cache_alloc_trace+0x153/0x7d0 [ 140.204407][ T8101] evdev_connect+0x80/0x4d0 [ 140.208952][ T8101] input_attach_handler+0x194/0x200 [ 140.214151][ T8101] input_register_device.cold+0xf5/0x246 [ 140.219786][ T8101] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 140.225861][ T8101] ksys_ioctl+0x11a/0x180 [ 140.230191][ T8101] __x64_sys_ioctl+0x6f/0xb0 [ 140.234765][ T8101] do_syscall_64+0xf6/0x7d0 [ 140.239266][ T8101] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 140.245163][ T8101] [ 140.247483][ T8101] Freed by task 8104: [ 140.251456][ T8101] save_stack+0x1b/0x40 [ 140.255626][ T8101] __kasan_slab_free+0xf7/0x140 [ 140.260642][ T8101] kfree+0x109/0x2b0 [ 140.264642][ T8101] device_release+0x71/0x200 [ 140.269349][ T8101] kobject_put+0x1c8/0x2f0 [ 140.273893][ T8101] cdev_put.part.0+0x32/0x50 [ 140.278469][ T8101] cdev_put+0x1b/0x30 [ 140.282432][ T8101] __fput+0x69b/0x880 [ 140.286427][ T8101] task_work_run+0xf4/0x1b0 [ 140.290959][ T8101] exit_to_usermode_loop+0x2fa/0x360 [ 140.296233][ T8101] do_syscall_64+0x6b1/0x7d0 [ 140.300817][ T8101] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 140.306770][ T8101] [ 140.309080][ T8101] The buggy address belongs to the object at ffff8880a7c48000 [ 140.309080][ T8101] which belongs to the cache kmalloc-2k of size 2048 [ 140.323216][ T8101] The buggy address is located 452 bytes inside of [ 140.323216][ T8101] 2048-byte region [ffff8880a7c48000, ffff8880a7c48800) [ 140.336573][ T8101] The buggy address belongs to the page: [ 140.342193][ T8101] page:ffffea00029f1200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 140.351297][ T8101] flags: 0xfffe0000000200(slab) [ 140.356150][ T8101] raw: 00fffe0000000200 ffffea0002605808 ffffea00025b3b08 ffff8880aa000e00 [ 140.364738][ T8101] raw: 0000000000000000 ffff8880a7c48000 0000000100000001 0000000000000000 [ 140.373332][ T8101] page dumped because: kasan: bad access detected [ 140.379723][ T8101] [ 140.382028][ T8101] Memory state around the buggy address: [ 140.387649][ T8101] ffff8880a7c48080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.395708][ T8101] ffff8880a7c48100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.403771][ T8101] >ffff8880a7c48180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.411837][ T8101] ^ [ 140.418050][ T8101] ffff8880a7c48200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.426166][ T8101] ffff8880a7c48280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.434358][ T8101] ================================================================== [ 140.442411][ T8101] Disabling lock debugging due to kernel taint [ 140.463164][ T7357] device veth0_vlan entered promiscuous mode [ 140.471132][ T8101] Kernel panic - not syncing: panic_on_warn set ... [ 140.478104][ T8101] CPU: 1 PID: 8101 Comm: syz-executor.3 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 140.492007][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.502871][ T8101] Call Trace: [ 140.506277][ T8101] dump_stack+0x18f/0x20d [ 140.510594][ T8101] ? kobject_put+0x1d0/0x2f0 [ 140.515336][ T8101] panic+0x2e3/0x75c [ 140.519532][ T8101] ? __warn_printk+0xf3/0xf3 [ 140.524112][ T8101] ? preempt_schedule_common+0x5e/0xc0 [ 140.532514][ T8101] ? kobject_put+0x296/0x2f0 [ 140.537089][ T8101] ? kobject_put+0x296/0x2f0 [ 140.541677][ T8101] ? preempt_schedule_thunk+0x16/0x18 [ 140.547126][ T8101] ? trace_hardirqs_on+0x55/0x230 [ 140.552147][ T8101] ? kobject_put+0x296/0x2f0 [ 140.556729][ T8101] ? kobject_put+0x296/0x2f0 [ 140.561298][ T8101] end_report+0x4d/0x53 [ 140.565450][ T8101] kasan_report.cold+0xd/0x37 [ 140.570118][ T8101] ? kobject_put+0x296/0x2f0 [ 140.574806][ T8101] kobject_put+0x296/0x2f0 [ 140.579218][ T8101] put_device+0x1b/0x30 [ 140.583356][ T8101] __input_unregister_device+0x1b0/0x430 [ 140.588985][ T8101] input_unregister_device+0xb4/0xf0 [ 140.594249][ T8101] uinput_destroy_device+0x1e2/0x240 [ 140.599539][ T8101] ? uinput_destroy_device+0x240/0x240 [ 140.604978][ T8101] uinput_release+0x37/0x50 [ 140.609476][ T8101] __fput+0x33e/0x880 [ 140.613454][ T8101] task_work_run+0xf4/0x1b0 [ 140.618616][ T8101] exit_to_usermode_loop+0x2fa/0x360 [ 140.623881][ T8101] do_syscall_64+0x6b1/0x7d0 [ 140.628453][ T8101] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 140.634319][ T8101] RIP: 0033:0x416621 [ 140.638221][ T8101] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 140.657916][ T8101] RSP: 002b:00007ffd892a4a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 140.670222][ T8101] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 140.678179][ T8101] RDX: 0000001b31320000 RSI: 0000000000000292 RDI: 0000000000000003 [ 140.686141][ T8101] RBP: 0000000000000001 R08: 00000000f347e295 R09: 00000000551800d4 [ 140.694223][ T8101] R10: 00007ffd892a4b50 R11: 0000000000000293 R12: 000000000078c900 [ 140.702392][ T8101] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bfac [ 140.711886][ T8101] Kernel Offset: disabled [ 140.716221][ T8101] Rebooting in 86400 seconds..