Warning: Permanently added '10.128.0.90' (ECDSA) to the list of known hosts. 2020/05/23 12:34:52 fuzzer started 2020/05/23 12:34:52 dialing manager at 10.128.0.26:38661 2020/05/23 12:34:52 syscalls: 3055 2020/05/23 12:34:52 code coverage: enabled 2020/05/23 12:34:52 comparison tracing: enabled 2020/05/23 12:34:52 extra coverage: enabled 2020/05/23 12:34:52 setuid sandbox: enabled 2020/05/23 12:34:52 namespace sandbox: enabled 2020/05/23 12:34:52 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 12:34:52 fault injection: enabled 2020/05/23 12:34:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 12:34:52 net packet injection: enabled 2020/05/23 12:34:52 net device setup: enabled 2020/05/23 12:34:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 12:34:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 12:34:52 USB emulation: enabled 12:37:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x2, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba10", 0x1b) setsockopt$inet_group_source_req(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) [ 187.305569][ T6814] IPVS: ftp: loaded support on port[0] = 21 12:37:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) [ 187.494189][ T6814] chnl_net:caif_netlink_parms(): no params data found [ 187.597487][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.616799][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.625745][ T6814] device bridge_slave_0 entered promiscuous mode [ 187.649716][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.666489][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.674403][ T6814] device bridge_slave_1 entered promiscuous mode [ 187.712065][ T6944] IPVS: ftp: loaded support on port[0] = 21 [ 187.736801][ T6814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 12:37:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x4003000000000a) fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) [ 187.762256][ T6814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.815917][ T6814] team0: Port device team_slave_0 added [ 187.841886][ T6814] team0: Port device team_slave_1 added [ 187.909850][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.927227][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.976293][ T6814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.992429][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.000766][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.029071][ T6814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.069252][ T6990] IPVS: ftp: loaded support on port[0] = 21 [ 188.100692][ T6814] device hsr_slave_0 entered promiscuous mode 12:37:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x2, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x3, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) [ 188.158056][ T6814] device hsr_slave_1 entered promiscuous mode [ 188.360873][ T7046] IPVS: ftp: loaded support on port[0] = 21 [ 188.445494][ T6944] chnl_net:caif_netlink_parms(): no params data found 12:37:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffbff, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/235, 0xeb}, 0x5}, {{&(0x7f0000000ac0)=@xdp, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/133, 0x85}, {&(0x7f0000000f00)=""/149, 0x95}, {&(0x7f0000000dc0)=""/206, 0xce}], 0x4, &(0x7f0000001040)=""/189, 0xbd}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000002c0)=ANY=[], 0xd1, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x80, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f00000000c0)='./bus\x00', 0x70) [ 188.804755][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 188.906854][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.913993][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.926824][ T6944] device bridge_slave_0 entered promiscuous mode [ 188.935180][ T6814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.005240][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.014720][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.024348][ T6944] device bridge_slave_1 entered promiscuous mode [ 189.041302][ T6814] netdevsim netdevsim0 netdevsim1: renamed from eth1 12:37:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x2, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, {{0x3, 0x0, @multicast1}}}, 0x108) [ 189.129750][ T7046] chnl_net:caif_netlink_parms(): no params data found [ 189.140763][ T7282] IPVS: ftp: loaded support on port[0] = 21 [ 189.165276][ T6944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.190608][ T6814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.253773][ T6814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.305096][ T6944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.362348][ T7383] IPVS: ftp: loaded support on port[0] = 21 [ 189.408193][ T6944] team0: Port device team_slave_0 added [ 189.414583][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.422250][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.430855][ T6990] device bridge_slave_0 entered promiscuous mode [ 189.449545][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.456682][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.464394][ T6990] device bridge_slave_1 entered promiscuous mode [ 189.485978][ T6944] team0: Port device team_slave_1 added [ 189.528233][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.538347][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.545320][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.573619][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.589613][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.598458][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.624623][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.657962][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.732396][ T6990] team0: Port device team_slave_0 added [ 189.760251][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.767605][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.775654][ T7046] device bridge_slave_0 entered promiscuous mode [ 189.786072][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.795118][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.804562][ T7046] device bridge_slave_1 entered promiscuous mode [ 189.813383][ T6990] team0: Port device team_slave_1 added [ 189.919416][ T6944] device hsr_slave_0 entered promiscuous mode [ 189.967211][ T6944] device hsr_slave_1 entered promiscuous mode [ 190.027145][ T6944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.034960][ T6944] Cannot create hsr debugfs directory [ 190.090296][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.110428][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.117727][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.144433][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.174541][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.184577][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.192267][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.219277][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.290930][ T7282] chnl_net:caif_netlink_parms(): no params data found [ 190.360966][ T7046] team0: Port device team_slave_0 added [ 190.420607][ T6990] device hsr_slave_0 entered promiscuous mode [ 190.477183][ T6990] device hsr_slave_1 entered promiscuous mode [ 190.516356][ T6990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.523927][ T6990] Cannot create hsr debugfs directory [ 190.601469][ T7046] team0: Port device team_slave_1 added [ 190.659633][ T7383] chnl_net:caif_netlink_parms(): no params data found [ 190.732431][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.739625][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.766299][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.821915][ T6814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.830480][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.841395][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.872724][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.884307][ T6944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.973037][ T6944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.032396][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.039759][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.048780][ T7282] device bridge_slave_0 entered promiscuous mode [ 191.063017][ T6814] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.079136][ T6944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.132403][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.139807][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.149260][ T7282] device bridge_slave_1 entered promiscuous mode [ 191.157227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.165833][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.198321][ T6944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.300563][ T7046] device hsr_slave_0 entered promiscuous mode [ 191.356892][ T7046] device hsr_slave_1 entered promiscuous mode [ 191.406382][ T7046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.413953][ T7046] Cannot create hsr debugfs directory [ 191.442659][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.453219][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.462207][ T3254] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.469512][ T3254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.480401][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.490573][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.498099][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.505861][ T7383] device bridge_slave_0 entered promiscuous mode [ 191.515916][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.523142][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.531456][ T7383] device bridge_slave_1 entered promiscuous mode [ 191.558020][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.567347][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.577205][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.585567][ T3253] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.592697][ T3253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.604229][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.672469][ T7282] team0: Port device team_slave_0 added [ 191.683118][ T7383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.703113][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.713672][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.748653][ T7282] team0: Port device team_slave_1 added [ 191.757681][ T7383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.767632][ T6990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.811186][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.820719][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.830614][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.840163][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.876810][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.883843][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.911495][ T7282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.924037][ T6990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.959633][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.971052][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.980425][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.009697][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.017577][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.044957][ T7282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.056767][ T6990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.118417][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.130236][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.142505][ T7383] team0: Port device team_slave_0 added [ 192.157213][ T7383] team0: Port device team_slave_1 added [ 192.179341][ T6990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.223098][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.271623][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.279321][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.305319][ T7383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.324376][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.332293][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.361065][ T7383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.408723][ T7282] device hsr_slave_0 entered promiscuous mode [ 192.448200][ T7282] device hsr_slave_1 entered promiscuous mode [ 192.486255][ T7282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.493835][ T7282] Cannot create hsr debugfs directory [ 192.603365][ T7383] device hsr_slave_0 entered promiscuous mode [ 192.657261][ T7383] device hsr_slave_1 entered promiscuous mode [ 192.726224][ T7383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.734015][ T7383] Cannot create hsr debugfs directory [ 192.814873][ T6814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.852557][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.860609][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.925581][ T7046] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.021633][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.034473][ T7046] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.058545][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.071195][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.106839][ T7046] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.154656][ T7046] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.220975][ T6944] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.263218][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.272143][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.302355][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.313824][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.323280][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.336663][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.343892][ T3253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.357722][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.365785][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.379411][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.421779][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.432015][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.441339][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.452361][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.462005][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.470852][ T3254] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.478639][ T3254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.487748][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.495588][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.532690][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.542967][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.567827][ T6814] device veth0_vlan entered promiscuous mode [ 193.597280][ T7282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.654752][ T7282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.698332][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.707346][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.715905][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.723278][ T3253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.731985][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.741783][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.750630][ T3253] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.757810][ T3253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.765582][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.775524][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.784221][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.793147][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.836438][ T7282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.888992][ T7282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.950229][ T6944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.960972][ T6944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.986549][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.995999][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.004207][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.017131][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.026953][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.035578][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.044710][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.053926][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.063154][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.071824][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.080551][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.089963][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.112431][ T6814] device veth1_vlan entered promiscuous mode [ 194.134898][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.143154][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.151826][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.160856][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.193194][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.201907][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.215057][ T7383] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.261065][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.273601][ T7383] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.329574][ T7383] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.418398][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.425997][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.433601][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.443527][ T7383] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.523998][ T7046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.581306][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.593752][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.609105][ T6814] device veth0_macvtap entered promiscuous mode [ 194.650736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.659327][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.669395][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.678959][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.687278][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.726491][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.734918][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.745498][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.753617][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.765480][ T6814] device veth1_macvtap entered promiscuous mode [ 194.788007][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.798251][ T6944] device veth0_vlan entered promiscuous mode [ 194.809192][ T7046] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.817035][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.825527][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.834135][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.854534][ T6814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.882213][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.891619][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.901008][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.910617][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.919595][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.926757][ T3253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.934667][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.943612][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.953148][ T3253] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.960416][ T3253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.971948][ T6944] device veth1_vlan entered promiscuous mode [ 194.985337][ T6814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.000074][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.009343][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.018574][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.028412][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.075236][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.085812][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.096742][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.105648][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.158057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.168229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.177972][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.187143][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.200395][ T6990] device veth0_vlan entered promiscuous mode [ 195.338530][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.345435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.355801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.363992][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.384860][ T7383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.475610][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.497651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.514324][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.523621][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.540760][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.552734][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.570662][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.584074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.602748][ T6990] device veth1_vlan entered promiscuous mode 12:37:08 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200002, 0x0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000200)) write(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{0x2}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}], 0x40) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000000)={@null, @null}) [ 195.621338][ T6944] device veth0_macvtap entered promiscuous mode [ 195.641272][ T7046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.660318][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.690855][ T6944] device veth1_macvtap entered promiscuous mode [ 195.717287][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.737604][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.745902][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.767137][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.786765][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.794610][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.810423][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.826872][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.886305][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.895150][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.913371][ T3254] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.920487][ T3254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.936216][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.962061][ T7383] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.993510][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.004740][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.015475][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.022758][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state 12:37:09 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200002, 0x0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000200)) write(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{0x2}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}], 0x40) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000000)={@null, @null}) [ 196.073760][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.091685][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.129225][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.135271][ C0] hrtimer: interrupt took 51677 ns [ 196.151744][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.163236][ T8085] ubi0: attaching mtd0 [ 196.167790][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.175111][ T8085] ubi0: scanning is finished [ 196.183556][ T8085] ubi0: empty MTD device detected [ 196.203832][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.225171][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.264492][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.274820][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.284312][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.297028][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.304672][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.314788][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.331850][ T2486] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.339060][ T2486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.347253][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.357181][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.379362][ T6990] device veth0_macvtap entered promiscuous mode [ 196.394505][ T8085] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 196.417085][ T8085] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 196.417318][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.432055][ T8085] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 196.437758][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.449556][ T8085] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 196.459598][ T8085] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 196.467820][ T8085] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 196.468585][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.476842][ T8085] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1557733286 [ 196.492803][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.494096][ T8085] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 196.510896][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.512606][ T8093] ubi0: background thread "ubi_bgt0d" started, PID 8093 [ 196.525377][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.544676][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.560031][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.575304][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.582506][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.598258][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.612391][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:37:09 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200002, 0x0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000200)) write(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{0x2}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}], 0x40) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000000)={@null, @null}) [ 196.629606][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.667083][ T6990] device veth1_macvtap entered promiscuous mode [ 196.690259][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.705912][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.724414][ T8095] ubi0: detaching mtd0 [ 196.734654][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.750804][ T8095] ================================================================== [ 196.759128][ T8095] BUG: KASAN: use-after-free in uif_close+0x15e/0x190 [ 196.765894][ T8095] Read of size 4 at addr ffff8880534dc9e8 by task syz-executor.0/8095 [ 196.774048][ T8095] [ 196.776370][ T8095] CPU: 0 PID: 8095 Comm: syz-executor.0 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 196.786172][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.796214][ T8095] Call Trace: [ 196.799503][ T8095] dump_stack+0x18f/0x20d [ 196.803841][ T8095] ? uif_close+0x15e/0x190 [ 196.808256][ T8095] ? uif_close+0x15e/0x190 [ 196.812695][ T8095] print_address_description.constprop.0.cold+0xd3/0x413 [ 196.819725][ T8095] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 196.825702][ T8095] ? vprintk_func+0x97/0x1a6 [ 196.830334][ T8095] ? uif_close+0x15e/0x190 [ 196.834749][ T8095] kasan_report.cold+0x1f/0x37 [ 196.839528][ T8095] ? uif_close+0x15e/0x190 [ 196.844372][ T8095] uif_close+0x15e/0x190 [ 196.848780][ T8095] ubi_detach_mtd_dev+0x226/0x432 [ 196.853878][ T8095] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 196.858627][ T8095] ? vol_cdev_llseek+0x160/0x160 [ 196.863671][ T8095] ? __x64_sys_futex+0x380/0x4f0 [ 196.868633][ T8095] ? vol_cdev_llseek+0x160/0x160 [ 196.873714][ T8095] ksys_ioctl+0x11a/0x180 [ 196.878135][ T8095] __x64_sys_ioctl+0x6f/0xb0 [ 196.882738][ T8095] do_syscall_64+0xf6/0x7d0 [ 196.887234][ T8095] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 196.893195][ T8095] RIP: 0033:0x45ca29 [ 196.897094][ T8095] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 196.916763][ T8095] RSP: 002b:00007f786ba05c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.925385][ T8095] RAX: ffffffffffffffda RBX: 00000000004e1080 RCX: 000000000045ca29 [ 196.933359][ T8095] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 196.941351][ T8095] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 196.949449][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 196.957694][ T8095] R13: 0000000000000209 R14: 00000000004c44c1 R15: 00007f786ba066d4 [ 196.965673][ T8095] [ 196.968013][ T8095] Allocated by task 8085: [ 196.972360][ T8095] save_stack+0x1b/0x40 [ 196.976552][ T8095] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 196.982195][ T8095] kmem_cache_alloc_trace+0x153/0x7d0 [ 196.987557][ T8095] ubi_attach_mtd_dev+0x2e7/0x27c0 [ 196.992674][ T8095] ctrl_cdev_ioctl+0x229/0x2b0 [ 196.997448][ T8095] ksys_ioctl+0x11a/0x180 [ 197.001766][ T8095] __x64_sys_ioctl+0x6f/0xb0 [ 197.006364][ T8095] do_syscall_64+0xf6/0x7d0 [ 197.010855][ T8095] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 197.016747][ T8095] [ 197.019167][ T8095] Freed by task 8095: [ 197.023140][ T8095] save_stack+0x1b/0x40 [ 197.027279][ T8095] __kasan_slab_free+0xf7/0x140 [ 197.032125][ T8095] kfree+0x109/0x2b0 [ 197.036012][ T8095] device_release+0x71/0x200 [ 197.040587][ T8095] kobject_put+0x1c8/0x2f0 [ 197.045158][ T8095] cdev_device_del+0x69/0x80 [ 197.049763][ T8095] uif_close+0xea/0x190 [ 197.053925][ T8095] ubi_detach_mtd_dev+0x226/0x432 [ 197.058941][ T8095] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 197.063698][ T8095] ksys_ioctl+0x11a/0x180 [ 197.068020][ T8095] __x64_sys_ioctl+0x6f/0xb0 [ 197.072592][ T8095] do_syscall_64+0xf6/0x7d0 [ 197.077096][ T8095] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 197.082990][ T8095] [ 197.085329][ T8095] The buggy address belongs to the object at ffff8880534dc000 [ 197.085329][ T8095] which belongs to the cache kmalloc-8k of size 8192 [ 197.099475][ T8095] The buggy address is located 2536 bytes inside of [ 197.099475][ T8095] 8192-byte region [ffff8880534dc000, ffff8880534de000) [ 197.112916][ T8095] The buggy address belongs to the page: [ 197.118558][ T8095] page:ffffea00014d3700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea00014d3700 order:2 compound_mapcount:0 compound_pincount:0 [ 197.133922][ T8095] flags: 0xfffe0000010200(slab|head) [ 197.139197][ T8095] raw: 00fffe0000010200 ffffea0001509408 ffff8880aa001b50 ffff8880aa0021c0 [ 197.147782][ T8095] raw: 0000000000000000 ffff8880534dc000 0000000100000001 0000000000000000 [ 197.156344][ T8095] page dumped because: kasan: bad access detected [ 197.162745][ T8095] [ 197.165139][ T8095] Memory state around the buggy address: [ 197.171201][ T8095] ffff8880534dc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.179511][ T8095] ffff8880534dc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.188620][ T8095] >ffff8880534dc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.197362][ T8095] ^ [ 197.204816][ T8095] ffff8880534dca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.213300][ T8095] ffff8880534dca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.221598][ T8095] ================================================================== [ 197.229717][ T8095] Disabling lock debugging due to kernel taint [ 197.266886][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.275476][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.288636][ T8095] Kernel panic - not syncing: panic_on_warn set ... [ 197.292668][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.295341][ T8095] CPU: 1 PID: 8095 Comm: syz-executor.0 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 197.304401][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.314285][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.314289][ T8095] Call Trace: [ 197.314307][ T8095] dump_stack+0x18f/0x20d [ 197.314322][ T8095] ? uif_close+0x110/0x190 [ 197.314334][ T8095] panic+0x2e3/0x75c [ 197.314346][ T8095] ? __warn_printk+0xf3/0xf3 [ 197.314360][ T8095] ? preempt_schedule_common+0x5e/0xc0 [ 197.314377][ T8095] ? uif_close+0x15e/0x190 [ 197.325170][ T3255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.333256][ T8095] ? uif_close+0x15e/0x190 [ 197.333270][ T8095] ? preempt_schedule_thunk+0x16/0x18 [ 197.333283][ T8095] ? trace_hardirqs_on+0x55/0x230 [ 197.333295][ T8095] ? uif_close+0x15e/0x190 [ 197.333305][ T8095] ? uif_close+0x15e/0x190 [ 197.333318][ T8095] end_report+0x4d/0x53 [ 197.333329][ T8095] kasan_report.cold+0xd/0x37 [ 197.333342][ T8095] ? uif_close+0x15e/0x190 [ 197.333355][ T8095] uif_close+0x15e/0x190 [ 197.333369][ T8095] ubi_detach_mtd_dev+0x226/0x432 [ 197.333383][ T8095] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 197.333394][ T8095] ? vol_cdev_llseek+0x160/0x160 [ 197.333406][ T8095] ? __x64_sys_futex+0x380/0x4f0 [ 197.333420][ T8095] ? vol_cdev_llseek+0x160/0x160 [ 197.333434][ T8095] ksys_ioctl+0x11a/0x180 [ 197.333448][ T8095] __x64_sys_ioctl+0x6f/0xb0 [ 197.333461][ T8095] do_syscall_64+0xf6/0x7d0 [ 197.333478][ T8095] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 197.333488][ T8095] RIP: 0033:0x45ca29 [ 197.333502][ T8095] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 197.333508][ T8095] RSP: 002b:00007f786ba05c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.333526][ T8095] RAX: ffffffffffffffda RBX: 00000000004e1080 RCX: 000000000045ca29 [ 197.333533][ T8095] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 197.333540][ T8095] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 197.333547][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 197.333553][ T8095] R13: 0000000000000209 R14: 00000000004c44c1 R15: 00007f786ba066d4 [ 197.334862][ T8095] Kernel Offset: disabled [ 197.537353][ T8095] Rebooting in 86400 seconds..