[ OK ] Started Getty on tty4. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. 2020/05/23 17:52:08 fuzzer started 2020/05/23 17:52:09 dialing manager at 10.128.0.26:38661 2020/05/23 17:52:09 syscalls: 3055 2020/05/23 17:52:09 code coverage: enabled 2020/05/23 17:52:09 comparison tracing: enabled 2020/05/23 17:52:09 extra coverage: enabled 2020/05/23 17:52:09 setuid sandbox: enabled 2020/05/23 17:52:09 namespace sandbox: enabled 2020/05/23 17:52:09 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 17:52:09 fault injection: enabled 2020/05/23 17:52:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 17:52:09 net packet injection: enabled 2020/05/23 17:52:09 net device setup: enabled 2020/05/23 17:52:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 17:52:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 17:52:09 USB emulation: enabled 17:54:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) syzkaller login: [ 189.602308][ T6809] IPVS: ftp: loaded support on port[0] = 21 17:54:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x4000400}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10b080, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/408], 0x110) r4 = accept4(r0, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f00000002c0)=0x80, 0x80800) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000340)=""/46, &(0x7f0000000380)=0x2e) fcntl$setstatus(r1, 0x4, 0x6000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2007fff) io_setup(0xc2fe, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) [ 189.759249][ T6809] chnl_net:caif_netlink_parms(): no params data found [ 189.869573][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.877331][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.899073][ T6809] device bridge_slave_0 entered promiscuous mode [ 189.912230][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.920823][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.931659][ T6809] device bridge_slave_1 entered promiscuous mode [ 189.954830][ T6939] IPVS: ftp: loaded support on port[0] = 21 [ 189.990547][ T6809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.020687][ T6809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 17:54:21 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e80c2000000aaaaaaaaaa00080049"], 0x0) [ 190.083258][ T6809] team0: Port device team_slave_0 added [ 190.110348][ T6809] team0: Port device team_slave_1 added [ 190.192488][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.199777][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.227230][ T6809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.273145][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.282467][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.309959][ T6809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.326792][ T6939] chnl_net:caif_netlink_parms(): no params data found 17:54:22 executing program 3: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1080, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./file0\x00', 0x4b8582, 0xd9aacd52723b4c87) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[], 0x4) [ 190.464873][ T6809] device hsr_slave_0 entered promiscuous mode [ 190.529663][ T6809] device hsr_slave_1 entered promiscuous mode [ 190.592656][ T7062] IPVS: ftp: loaded support on port[0] = 21 [ 190.705612][ T7107] IPVS: ftp: loaded support on port[0] = 21 [ 190.724392][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.739560][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.747689][ T6939] device bridge_slave_0 entered promiscuous mode 17:54:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) umount2(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') [ 190.783312][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.798750][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.806679][ T6939] device bridge_slave_1 entered promiscuous mode [ 190.959920][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.006314][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.224303][ T6939] team0: Port device team_slave_0 added [ 191.255958][ T7062] chnl_net:caif_netlink_parms(): no params data found [ 191.289078][ T6939] team0: Port device team_slave_1 added [ 191.303899][ T6809] netdevsim netdevsim0 netdevsim0: renamed from eth0 17:54:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$setstatus(r1, 0x4, 0x6000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) io_setup(0xc2fe, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) [ 191.372955][ T7107] chnl_net:caif_netlink_parms(): no params data found [ 191.408853][ T6809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.466408][ T7351] IPVS: ftp: loaded support on port[0] = 21 [ 191.476387][ T7382] IPVS: ftp: loaded support on port[0] = 21 [ 191.484759][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.496661][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.527384][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.550286][ T6809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.603459][ T6809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.683518][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.690539][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.717889][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.862523][ T6939] device hsr_slave_0 entered promiscuous mode [ 191.911465][ T6939] device hsr_slave_1 entered promiscuous mode [ 191.968606][ T6939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.976368][ T6939] Cannot create hsr debugfs directory [ 191.994313][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.002347][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.011088][ T7062] device bridge_slave_0 entered promiscuous mode [ 192.054490][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.062412][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.071329][ T7062] device bridge_slave_1 entered promiscuous mode [ 192.121097][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.128157][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.139355][ T7107] device bridge_slave_0 entered promiscuous mode [ 192.175084][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.184859][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.194006][ T7107] device bridge_slave_1 entered promiscuous mode [ 192.204639][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.278288][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.312102][ T7107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.356970][ T7107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.393583][ T7382] chnl_net:caif_netlink_parms(): no params data found [ 192.407486][ T7062] team0: Port device team_slave_0 added [ 192.416583][ T7062] team0: Port device team_slave_1 added [ 192.496340][ T7107] team0: Port device team_slave_0 added [ 192.552065][ T7107] team0: Port device team_slave_1 added [ 192.572238][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.581665][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.608480][ T7107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.621818][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.630523][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.657594][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.684265][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.691959][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.718063][ T7107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.740905][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.747870][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.778263][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.796035][ T7351] chnl_net:caif_netlink_parms(): no params data found [ 192.844940][ T6939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.903601][ T6939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.969311][ T6939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.085221][ T7107] device hsr_slave_0 entered promiscuous mode [ 193.138830][ T7107] device hsr_slave_1 entered promiscuous mode [ 193.188988][ T7107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.196657][ T7107] Cannot create hsr debugfs directory [ 193.222037][ T6939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.329782][ T6809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.353281][ T7062] device hsr_slave_0 entered promiscuous mode [ 193.399223][ T7062] device hsr_slave_1 entered promiscuous mode [ 193.468731][ T7062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.476879][ T7062] Cannot create hsr debugfs directory [ 193.514841][ T7382] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.523970][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.532864][ T7382] device bridge_slave_0 entered promiscuous mode [ 193.543215][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.551600][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.561066][ T7382] device bridge_slave_1 entered promiscuous mode [ 193.584935][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.592130][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.602842][ T7351] device bridge_slave_0 entered promiscuous mode [ 193.657096][ T7382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.667096][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.674618][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.683678][ T7351] device bridge_slave_1 entered promiscuous mode [ 193.725008][ T7382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.737434][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.746544][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.763698][ T6809] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.807232][ T7382] team0: Port device team_slave_0 added [ 193.826713][ T7351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.867275][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.876381][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.890859][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.898015][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.907847][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.920870][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.930111][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.937142][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.946202][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.959532][ T7382] team0: Port device team_slave_1 added [ 193.967795][ T7351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.012235][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.034203][ T7351] team0: Port device team_slave_0 added [ 194.046086][ T7351] team0: Port device team_slave_1 added [ 194.070356][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.085698][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.112985][ T7382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.171313][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.179689][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.207529][ T7382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.234053][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.243828][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.253378][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.262995][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.291499][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.299025][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.326238][ T7351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.401676][ T7382] device hsr_slave_0 entered promiscuous mode [ 194.469285][ T7382] device hsr_slave_1 entered promiscuous mode [ 194.518762][ T7382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.526544][ T7382] Cannot create hsr debugfs directory [ 194.534864][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.542582][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.570281][ T7351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.581793][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.592185][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.621389][ T7062] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.681927][ T7062] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.772478][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.782862][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.800082][ T7062] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.868695][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.878102][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.889846][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.913601][ T7062] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.012512][ T7351] device hsr_slave_0 entered promiscuous mode [ 195.069074][ T7351] device hsr_slave_1 entered promiscuous mode [ 195.118797][ T7351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.126392][ T7351] Cannot create hsr debugfs directory [ 195.164304][ T6939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.212060][ T7107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.276405][ T7107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.322498][ T7107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.384768][ T7107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.434417][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.446500][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.502078][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.512982][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.524931][ T6939] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.554755][ T6809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.599767][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.609893][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.619919][ T2492] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.627116][ T2492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.681180][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.696080][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.705676][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.714937][ T2492] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.722062][ T2492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.731327][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.788353][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.797959][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.807642][ T2492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.848212][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.857619][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.875091][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.884209][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.893304][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.906638][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.930152][ T6939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.941654][ T6939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.979377][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.987795][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.999298][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.007991][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.017370][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.025511][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.033932][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.042982][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.052086][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.060305][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.068278][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.102938][ T7062] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.117294][ T6809] device veth0_vlan entered promiscuous mode [ 196.135826][ T7107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.156011][ T7382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.213412][ T7382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.262402][ T7382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.330620][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.338507][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.347674][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.359064][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.367563][ T2660] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.374729][ T2660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.387800][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.397828][ T7107] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.431767][ T7382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.491079][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.500251][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.511536][ T2660] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.518754][ T2660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.527272][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.536439][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.545211][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.552961][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.562764][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.572465][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.582419][ T6809] device veth1_vlan entered promiscuous mode [ 196.619924][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.627903][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.636941][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.645637][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.656559][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.679979][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.689576][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.697958][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.705166][ T2478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.713679][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.723020][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.732108][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.739414][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.747154][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.756543][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.767222][ T7351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.831049][ T7351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.887025][ T7351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.941207][ T7351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.020737][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.029875][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.039304][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.050594][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.057737][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.077592][ T7062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.091049][ T7062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.129401][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.137911][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.148411][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.157842][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.166931][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.176333][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.222950][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.231651][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.243756][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.282136][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.293033][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.315080][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.339941][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.349462][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.365868][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.375599][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.390042][ T6809] device veth0_macvtap entered promiscuous mode [ 197.404711][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.413453][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.421410][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.457449][ T7107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.468322][ T6809] device veth1_macvtap entered promiscuous mode [ 197.506935][ T6939] device veth0_vlan entered promiscuous mode [ 197.544528][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.554159][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.564308][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.574398][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.592062][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.621580][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.630226][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.640181][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.650467][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.660181][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.669440][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.681853][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.704427][ T6939] device veth1_vlan entered promiscuous mode [ 197.713909][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.723248][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.733218][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.742633][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.751717][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.773595][ T7062] device veth0_vlan entered promiscuous mode [ 197.786952][ T7107] device veth0_vlan entered promiscuous mode [ 197.812278][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.824155][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.833938][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.845549][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.853639][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.862716][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.871951][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.880472][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.905142][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.916785][ T7107] device veth1_vlan entered promiscuous mode [ 197.932789][ T7062] device veth1_vlan entered promiscuous mode [ 197.986540][ T2591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.994882][ T2591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.006467][ T2591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.016524][ T2591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.024856][ T2591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.033373][ T2591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.042463][ T2591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.053455][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.071942][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.085839][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.094497][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.103532][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.113333][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.123628][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.132709][ T2660] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.139859][ T2660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.298557][ T6939] device veth0_macvtap entered promiscuous mode [ 198.308967][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.317330][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.382158][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.394573][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.419430][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state 17:54:30 executing program 0: [ 198.426651][ T2478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.449149][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.458095][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 17:54:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af20, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0}) [ 198.489597][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.496697][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.524277][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.549624][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.558658][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.568541][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.584399][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.591624][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.627312][ T6939] device veth1_macvtap entered promiscuous mode [ 198.639280][ T7107] device veth0_macvtap entered promiscuous mode [ 198.663434][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.671801][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.684031][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.693624][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.703220][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.712265][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.721751][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.730690][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.740117][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.771690][ T7107] device veth1_macvtap entered promiscuous mode [ 198.785789][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.794714][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.806634][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.815903][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.825059][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.841335][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.852818][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.862664][ T7062] device veth0_macvtap entered promiscuous mode 17:54:30 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) [ 198.877224][ T7062] device veth1_macvtap entered promiscuous mode [ 198.907737][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.924729][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.950388][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.960950][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 17:54:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'veth0_to_bond\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'veth0_to_bond\x00', r3}) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @link_local, 'veth0_to_bond\x00'}}, 0x1e) [ 198.975171][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.987042][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.998018][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.022008][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.042770][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.079937][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.088323][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.098313][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.108299][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.117946][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.127346][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.137434][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.150879][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.172146][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.185837][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.197716][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.208576][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.219117][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.229942][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.246058][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.283709][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.295250][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.308401][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.321156][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.331335][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.342173][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.354629][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.363599][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.374846][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.384528][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.394108][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.404935][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.415132][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.424632][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.432686][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.440896][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.451539][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.461124][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 17:54:31 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 199.493799][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.536683][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.547645][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.559756][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.570575][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.582808][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.595541][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.611671][ T7351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.650162][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.659718][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.674300][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.683635][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 17:54:31 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "e57d92", "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"}}, 0x110) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4148, 0x0) [ 199.870786][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.883347][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.895479][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.904289][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.917054][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.232932][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.246769][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:54:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) [ 200.284637][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.349526][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.358419][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.452149][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.467886][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.517961][ T7351] device veth0_vlan entered promiscuous mode [ 200.547732][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.572036][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.625247][ T7351] device veth1_vlan entered promiscuous mode 17:54:32 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 17:54:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x10000}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) 17:54:32 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 200.833949][ T8130] input: syz1 as /devices/virtual/input/input5 [ 200.876528][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.895263][ T8124] ================================================================== [ 200.903583][ T8124] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 200.910789][ T8124] Read of size 8 at addr ffff888092de0150 by task syz-executor.0/8124 [ 200.918945][ T8124] [ 200.921407][ T8124] CPU: 1 PID: 8124 Comm: syz-executor.0 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 200.931205][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.941378][ T8124] Call Trace: [ 200.944676][ T8124] dump_stack+0x18f/0x20d [ 200.949024][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 200.953998][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 200.958862][ T8124] print_address_description.constprop.0.cold+0xd3/0x413 [ 200.965899][ T8124] ? mousedev_destroy+0x20/0xa0 [ 200.970760][ T8124] ? __input_unregister_device+0x1b0/0x430 [ 200.976574][ T8124] ? input_unregister_device+0xb4/0xf0 [ 200.982129][ T8124] ? uinput_destroy_device+0x1e2/0x240 [ 200.987601][ T8124] ? uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 200.993901][ T8124] ? vprintk_func+0x97/0x1a6 [ 200.999244][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 201.004243][ T8124] kasan_report.cold+0x1f/0x37 [ 201.009175][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 201.014241][ T8124] __mutex_lock+0x1033/0x13c0 [ 201.019051][ T8124] ? print_usage_bug+0x240/0x240 [ 201.024206][ T8124] ? mousedev_cleanup+0x21/0x180 [ 201.029160][ T8124] ? trace_hardirqs_off+0x50/0x220 [ 201.034282][ T8124] ? mutex_trylock+0x2c0/0x2c0 [ 201.039167][ T8124] ? mark_held_locks+0x9f/0xe0 [ 201.043943][ T8124] ? kfree+0x1eb/0x2b0 [ 201.048112][ T8124] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 201.054120][ T8124] ? kfree_const+0x51/0x60 [ 201.058546][ T8124] ? dev_attr_show+0x90/0x90 [ 201.063153][ T8124] ? mousedev_cleanup+0x21/0x180 [ 201.068110][ T8124] mousedev_cleanup+0x21/0x180 [ 201.072889][ T8124] mousedev_destroy+0x28/0xa0 [ 201.077867][ T8124] __input_unregister_device+0x1b0/0x430 [ 201.083521][ T8124] input_unregister_device+0xb4/0xf0 [ 201.089077][ T8124] uinput_destroy_device+0x1e2/0x240 [ 201.094378][ T8124] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 201.100285][ T8124] ? uinput_read+0xd10/0xd10 [ 201.104890][ T8124] ? ioctl_file_clone+0x180/0x180 [ 201.109926][ T8124] ? __fget_files+0x32f/0x500 [ 201.114625][ T8124] ? do_dup2+0x520/0x520 [ 201.118880][ T8124] ? __x64_sys_futex+0x380/0x4f0 [ 201.123836][ T8124] ? uinput_compat_ioctl+0xa0/0xa0 [ 201.128954][ T8124] ksys_ioctl+0x11a/0x180 [ 201.133294][ T8124] __x64_sys_ioctl+0x6f/0xb0 [ 201.137995][ T8124] do_syscall_64+0xf6/0x7d0 [ 201.143650][ T8124] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 201.149636][ T8124] RIP: 0033:0x45ca29 [ 201.153541][ T8124] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.173758][ T8124] RSP: 002b:00007f9e66ddac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.182186][ T8124] RAX: ffffffffffffffda RBX: 00000000004eff40 RCX: 000000000045ca29 [ 201.190161][ T8124] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000004 [ 201.198484][ T8124] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 201.206554][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 201.214524][ T8124] R13: 00000000000005c4 R14: 00000000004c8855 R15: 00007f9e66ddb6d4 [ 201.222585][ T8124] [ 201.225858][ T8124] Allocated by task 8130: [ 201.230314][ T8124] save_stack+0x1b/0x40 [ 201.234553][ T8124] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 201.240183][ T8124] kmem_cache_alloc_trace+0x153/0x7d0 [ 201.245632][ T8124] mousedev_create+0x90/0xa20 [ 201.250471][ T8124] mousedev_connect+0x20/0x280 [ 201.255224][ T8124] input_attach_handler+0x194/0x200 [ 201.260699][ T8124] input_register_device.cold+0xf5/0x246 [ 201.266316][ T8124] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 201.272280][ T8124] ksys_ioctl+0x11a/0x180 [ 201.276956][ T8124] __x64_sys_ioctl+0x6f/0xb0 [ 201.281539][ T8124] do_syscall_64+0xf6/0x7d0 [ 201.286125][ T8124] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 201.292030][ T8124] [ 201.294451][ T8124] Freed by task 8124: [ 201.298419][ T8124] save_stack+0x1b/0x40 [ 201.302558][ T8124] __kasan_slab_free+0xf7/0x140 [ 201.307387][ T8124] kfree+0x109/0x2b0 [ 201.311390][ T8124] device_release+0x71/0x200 [ 201.315993][ T8124] kobject_put+0x1c8/0x2f0 [ 201.320403][ T8124] cdev_device_del+0x69/0x80 [ 201.324974][ T8124] mousedev_destroy+0x20/0xa0 [ 201.329631][ T8124] __input_unregister_device+0x1b0/0x430 [ 201.335263][ T8124] input_unregister_device+0xb4/0xf0 [ 201.340544][ T8124] uinput_destroy_device+0x1e2/0x240 [ 201.345827][ T8124] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 201.351968][ T8124] ksys_ioctl+0x11a/0x180 [ 201.356415][ T8124] __x64_sys_ioctl+0x6f/0xb0 [ 201.360993][ T8124] do_syscall_64+0xf6/0x7d0 [ 201.365494][ T8124] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 201.371361][ T8124] [ 201.373673][ T8124] The buggy address belongs to the object at ffff888092de0000 [ 201.373673][ T8124] which belongs to the cache kmalloc-2k of size 2048 [ 201.387781][ T8124] The buggy address is located 336 bytes inside of [ 201.387781][ T8124] 2048-byte region [ffff888092de0000, ffff888092de0800) [ 201.401140][ T8124] The buggy address belongs to the page: [ 201.406782][ T8124] page:ffffea00024b7800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 201.415871][ T8124] flags: 0xfffe0000000200(slab) [ 201.420710][ T8124] raw: 00fffe0000000200 ffffea0002622e88 ffffea0002381c88 ffff8880aa000e00 [ 201.429298][ T8124] raw: 0000000000000000 ffff888092de0000 0000000100000001 0000000000000000 [ 201.437870][ T8124] page dumped because: kasan: bad access detected [ 201.444266][ T8124] [ 201.446581][ T8124] Memory state around the buggy address: [ 201.452196][ T8124] ffff888092de0000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.460249][ T8124] ffff888092de0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.468430][ T8124] >ffff888092de0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.476761][ T8124] ^ [ 201.483424][ T8124] ffff888092de0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.491689][ T8124] ffff888092de0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.499743][ T8124] ================================================================== [ 201.507815][ T8124] Disabling lock debugging due to kernel taint [ 201.525996][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.537523][ T7351] device veth0_macvtap entered promiscuous mode [ 201.550780][ T8124] Kernel panic - not syncing: panic_on_warn set ... [ 201.557405][ T8124] CPU: 1 PID: 8124 Comm: syz-executor.0 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 201.568595][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.578645][ T8124] Call Trace: [ 201.581941][ T8124] dump_stack+0x18f/0x20d [ 201.586276][ T8124] ? __mutex_lock+0xf50/0x13c0 [ 201.591047][ T8124] panic+0x2e3/0x75c [ 201.594951][ T8124] ? __warn_printk+0xf3/0xf3 [ 201.599638][ T8124] ? preempt_schedule_common+0x5e/0xc0 [ 201.605121][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 201.609976][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 201.614996][ T8124] ? preempt_schedule_thunk+0x16/0x18 [ 201.620471][ T8124] ? trace_hardirqs_on+0x55/0x230 [ 201.625484][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 201.630309][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 201.636216][ T8124] end_report+0x4d/0x53 [ 201.640721][ T8124] kasan_report.cold+0xd/0x37 [ 201.645397][ T8124] ? __mutex_lock+0x1033/0x13c0 [ 201.650236][ T8124] __mutex_lock+0x1033/0x13c0 [ 201.654899][ T8124] ? print_usage_bug+0x240/0x240 [ 201.659830][ T8124] ? mousedev_cleanup+0x21/0x180 [ 201.664860][ T8124] ? trace_hardirqs_off+0x50/0x220 [ 201.669984][ T8124] ? mutex_trylock+0x2c0/0x2c0 [ 201.674732][ T8124] ? mark_held_locks+0x9f/0xe0 [ 201.679502][ T8124] ? kfree+0x1eb/0x2b0 [ 201.683549][ T8124] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 201.689521][ T8124] ? kfree_const+0x51/0x60 [ 201.694009][ T8124] ? dev_attr_show+0x90/0x90 [ 201.698614][ T8124] ? mousedev_cleanup+0x21/0x180 [ 201.703553][ T8124] mousedev_cleanup+0x21/0x180 [ 201.708489][ T8124] mousedev_destroy+0x28/0xa0 [ 201.713175][ T8124] __input_unregister_device+0x1b0/0x430 [ 201.718800][ T8124] input_unregister_device+0xb4/0xf0 [ 201.724077][ T8124] uinput_destroy_device+0x1e2/0x240 [ 201.729869][ T8124] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 201.735937][ T8124] ? uinput_read+0xd10/0xd10 [ 201.741328][ T8124] ? ioctl_file_clone+0x180/0x180 [ 201.746343][ T8124] ? __fget_files+0x32f/0x500 [ 201.751045][ T8124] ? do_dup2+0x520/0x520 [ 201.755800][ T8124] ? __x64_sys_futex+0x380/0x4f0 [ 201.761104][ T8124] ? uinput_compat_ioctl+0xa0/0xa0 [ 201.766274][ T8124] ksys_ioctl+0x11a/0x180 [ 201.771075][ T8124] __x64_sys_ioctl+0x6f/0xb0 [ 201.775722][ T8124] do_syscall_64+0xf6/0x7d0 [ 201.780295][ T8124] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 201.786181][ T8124] RIP: 0033:0x45ca29 [ 201.790147][ T8124] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.809927][ T8124] RSP: 002b:00007f9e66ddac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.818316][ T8124] RAX: ffffffffffffffda RBX: 00000000004eff40 RCX: 000000000045ca29 [ 201.826264][ T8124] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000004 [ 201.834233][ T8124] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 201.842179][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 201.850405][ T8124] R13: 00000000000005c4 R14: 00000000004c8855 R15: 00007f9e66ddb6d4 [ 201.860071][ T8124] Kernel Offset: disabled [ 201.864395][ T8124] Rebooting in 86400 seconds..