[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. 2020/05/24 08:56:00 fuzzer started 2020/05/24 08:56:00 dialing manager at 10.128.0.26:34283 2020/05/24 08:56:00 syscalls: 3055 2020/05/24 08:56:00 code coverage: enabled 2020/05/24 08:56:00 comparison tracing: enabled 2020/05/24 08:56:00 extra coverage: enabled 2020/05/24 08:56:00 setuid sandbox: enabled 2020/05/24 08:56:00 namespace sandbox: enabled 2020/05/24 08:56:00 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/24 08:56:00 fault injection: enabled 2020/05/24 08:56:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/24 08:56:00 net packet injection: enabled 2020/05/24 08:56:00 net device setup: enabled 2020/05/24 08:56:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/24 08:56:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/24 08:56:00 USB emulation: enabled 08:57:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = creat(0x0, 0x0) fallocate(r4, 0x100000001, 0x80000, 0x28120002) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syzkaller login: [ 163.421132][ T6826] IPVS: ftp: loaded support on port[0] = 21 08:57:49 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0xd01c4813, &(0x7f0000000000)={0x1, 0x100}) [ 163.548414][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 163.696816][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.710198][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.718514][ T6826] device bridge_slave_0 entered promiscuous mode [ 163.737956][ T6956] IPVS: ftp: loaded support on port[0] = 21 [ 163.746215][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.753707][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.768187][ T6826] device bridge_slave_1 entered promiscuous mode 08:57:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)={0x0, 0x7, 0x4, 0x400000, 0x0, {}, {0x2, 0x0, 0x0, 0x4, 0x8, 0x20, "9beb8e30"}, 0x401, 0x4, @fd, 0x29e}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x2bcf) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf9b3}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 163.832843][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.861911][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.936310][ T6826] team0: Port device team_slave_0 added [ 163.977943][ T6826] team0: Port device team_slave_1 added [ 164.047046][ T6956] chnl_net:caif_netlink_parms(): no params data found [ 164.062358][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.069323][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.099830][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.128782][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.138590][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.169299][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.228083][ T7088] IPVS: ftp: loaded support on port[0] = 21 08:57:50 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x4018480c, &(0x7f0000000000)={0x1}) [ 164.283794][ T6826] device hsr_slave_0 entered promiscuous mode [ 164.363742][ T6826] device hsr_slave_1 entered promiscuous mode [ 164.498723][ T7112] IPVS: ftp: loaded support on port[0] = 21 [ 164.521864][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.529015][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.544281][ T6956] device bridge_slave_0 entered promiscuous mode [ 164.575619][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.584155][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.593012][ T6956] device bridge_slave_1 entered promiscuous mode 08:57:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000280)=ANY=[]) [ 164.638144][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.694997][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.861139][ T6956] team0: Port device team_slave_0 added [ 164.936495][ T6956] team0: Port device team_slave_1 added [ 164.999037][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 165.053009][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.060492][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.112026][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.126917][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.136674][ T7259] IPVS: ftp: loaded support on port[0] = 21 08:57:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) [ 165.136803][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.173071][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.363399][ T6956] device hsr_slave_0 entered promiscuous mode [ 165.421888][ T6956] device hsr_slave_1 entered promiscuous mode [ 165.499760][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.507488][ T6956] Cannot create hsr debugfs directory [ 165.514067][ T7112] chnl_net:caif_netlink_parms(): no params data found [ 165.534898][ T6826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.603686][ T6826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.642699][ T6826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.706630][ T6826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.809401][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.817593][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.829135][ T7088] device bridge_slave_0 entered promiscuous mode [ 165.838341][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.843798][ T7424] IPVS: ftp: loaded support on port[0] = 21 [ 165.846460][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.859946][ T7088] device bridge_slave_1 entered promiscuous mode [ 165.963191][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.988184][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.088540][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.097151][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.106710][ T7112] device bridge_slave_0 entered promiscuous mode [ 166.118470][ T7088] team0: Port device team_slave_0 added [ 166.159278][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.167000][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.175704][ T7112] device bridge_slave_1 entered promiscuous mode [ 166.185147][ T7088] team0: Port device team_slave_1 added [ 166.234540][ T7259] chnl_net:caif_netlink_parms(): no params data found [ 166.270131][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.277101][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.305123][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.324323][ T7112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.352025][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.358992][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.385914][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.414199][ T7112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.482702][ T7112] team0: Port device team_slave_0 added [ 166.503488][ T7112] team0: Port device team_slave_1 added [ 166.526903][ T6956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.566475][ T7424] chnl_net:caif_netlink_parms(): no params data found [ 166.625149][ T6956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.666224][ T6956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.722679][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.729898][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.756508][ T7112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.779887][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.786955][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.795982][ T7259] device bridge_slave_0 entered promiscuous mode [ 166.853442][ T7088] device hsr_slave_0 entered promiscuous mode [ 166.920304][ T7088] device hsr_slave_1 entered promiscuous mode [ 166.959689][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.967258][ T7088] Cannot create hsr debugfs directory [ 166.979195][ T6956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.052947][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.060970][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.088002][ T7112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.099946][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.107004][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.118750][ T7259] device bridge_slave_1 entered promiscuous mode [ 167.162940][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.198806][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.248366][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.285235][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.292977][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.302764][ T7424] device bridge_slave_0 entered promiscuous mode [ 167.405540][ T7112] device hsr_slave_0 entered promiscuous mode [ 167.450010][ T7112] device hsr_slave_1 entered promiscuous mode [ 167.490440][ T7112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.498110][ T7112] Cannot create hsr debugfs directory [ 167.507907][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.517176][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.525903][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.534606][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.541975][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.549895][ T7424] device bridge_slave_1 entered promiscuous mode [ 167.609374][ T7259] team0: Port device team_slave_0 added [ 167.637476][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.647724][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.660688][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.667808][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.679156][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.688433][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.697019][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.704165][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.724608][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.737301][ T7259] team0: Port device team_slave_1 added [ 167.754218][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.771319][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.847573][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.871516][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.878477][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.904925][ T7259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.917837][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.925935][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.953290][ T7259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.981365][ T7424] team0: Port device team_slave_0 added [ 167.988611][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.002635][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.013538][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.024365][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.033982][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.079186][ T7424] team0: Port device team_slave_1 added [ 168.086164][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.095773][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.104753][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.113674][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.122799][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.133729][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.219246][ T7088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.253348][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.263311][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.290212][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.305761][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.313800][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.341128][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.413142][ T7259] device hsr_slave_0 entered promiscuous mode [ 168.470212][ T7259] device hsr_slave_1 entered promiscuous mode [ 168.530234][ T7259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.537866][ T7259] Cannot create hsr debugfs directory [ 168.546145][ T7088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.593404][ T7088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.672187][ T7088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.722051][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.732521][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.807022][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.883434][ T7424] device hsr_slave_0 entered promiscuous mode [ 168.900892][ T7424] device hsr_slave_1 entered promiscuous mode [ 168.939650][ T7424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.947216][ T7424] Cannot create hsr debugfs directory [ 168.963968][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.997216][ T7112] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.067497][ T7112] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.131341][ T7112] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.173421][ T7112] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.241648][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.250055][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.298694][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.308605][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.319900][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.404330][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.417861][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.426828][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.438561][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.447935][ T3842] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.455046][ T3842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.463101][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.473446][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.482699][ T3842] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.489855][ T3842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.497450][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.506624][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.514595][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.523666][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.535524][ T6826] device veth0_vlan entered promiscuous mode [ 169.577001][ T7259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.615942][ T7259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.696878][ T7259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.752352][ T6826] device veth1_vlan entered promiscuous mode [ 169.762122][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.771488][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.794820][ T7259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.851971][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.861571][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.870618][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.880649][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.889131][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.927554][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.963752][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.972552][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.982254][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.991545][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.002188][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.044651][ T6956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.088333][ T7424] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.112312][ T7424] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.168726][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.176271][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.185236][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.211429][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.219094][ T7424] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.274373][ T7424] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.370850][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.381455][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.390183][ T2568] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.397216][ T2568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.407101][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.416315][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.425463][ T2568] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.432733][ T2568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.441431][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.448866][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.480053][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.494751][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.503178][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.513055][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.523957][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.540230][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.565994][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.574786][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.598183][ T6826] device veth0_macvtap entered promiscuous mode [ 170.610528][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.618604][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.627305][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.636662][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.645884][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.654259][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.674507][ T7112] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.688620][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.699097][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.733531][ T7088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.748838][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.771478][ T6826] device veth1_macvtap entered promiscuous mode [ 170.783954][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.794077][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.803456][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.812700][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.823985][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.833500][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.842754][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.852449][ T2568] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.859582][ T2568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.876024][ T6956] device veth0_vlan entered promiscuous mode [ 170.915288][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.924140][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.935490][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.945168][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.954042][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.961179][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.969216][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.978563][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.987158][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.996211][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.004102][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.022667][ T6956] device veth1_vlan entered promiscuous mode [ 171.044763][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.054730][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.065328][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.073998][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.082280][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.091974][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.101571][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.111549][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.141759][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.165661][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.174811][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.186814][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.195641][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.206428][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.225340][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.260939][ T7112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.278115][ T7112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.292122][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.304459][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.313536][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.321953][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.330406][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.339010][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.348364][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.357681][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.366938][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.376039][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.384947][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.414464][ T7259] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.458557][ T7088] device veth0_vlan entered promiscuous mode [ 171.477503][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.490458][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.498981][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.507862][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.524043][ T6956] device veth0_macvtap entered promiscuous mode [ 171.554074][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.562647][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.571650][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.579528][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.587234][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.596731][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.605995][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.613381][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.621416][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.628880][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.637019][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.651754][ T7088] device veth1_vlan entered promiscuous mode [ 171.722647][ T6956] device veth1_macvtap entered promiscuous mode [ 171.751601][ T7424] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.815407][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.824085][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.832472][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.840842][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.848626][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.857398][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.865943][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.873053][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.898272][ T7112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.971667][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.983102][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.997726][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.019569][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.037610][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.058869][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.068984][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.084049][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.091233][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.106384][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.126306][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.134738][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.141836][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.157017][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.170099][ T29] audit: type=1800 audit(1590310677.899:2): pid=8084 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15738 res=0 [ 172.180449][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.204047][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.260904][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.270843][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.272975][ T29] audit: type=1800 audit(1590310678.009:3): pid=8084 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15740 res=0 [ 172.280095][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.308056][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.317202][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.332690][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.341933][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.350759][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.359702][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.369116][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.381098][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.398937][ T7424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.413929][ T7424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.426837][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.438444][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.450746][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1 08:57:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 172.482368][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.492255][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.501450][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.511378][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.520321][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.528840][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.537845][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.560189][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.587151][ T7088] device veth0_macvtap entered promiscuous mode [ 172.613241][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 08:57:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x7ffc) 08:57:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 172.630244][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.652558][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.677424][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.710343][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.743951][ T7088] device veth1_macvtap entered promiscuous mode 08:57:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 172.770122][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.806767][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 08:57:58 executing program 0: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 172.815495][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.840164][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.848649][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.882701][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.918591][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:57:58 executing program 0: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 172.927699][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 08:57:58 executing program 0: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 172.957997][ T7112] device veth0_vlan entered promiscuous mode [ 172.983855][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.030799][ T7259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.050594][ T7259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.154337][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.170083][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.177820][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.200066][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.218008][ T7112] device veth1_vlan entered promiscuous mode [ 173.251214][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.262644][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.273555][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.284567][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.297046][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.347276][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.356597][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.366042][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.376209][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.452262][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.476846][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.496814][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.508226][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.525712][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.535704][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.554040][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.562452][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.571321][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.586736][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.658331][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.675455][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.693673][ T7112] device veth0_macvtap entered promiscuous mode [ 173.729783][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 173.739458][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.757306][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.768472][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.783106][ T7112] device veth1_macvtap entered promiscuous mode [ 173.889498][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.897800][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.933731][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.946852][ T7424] device veth0_vlan entered promiscuous mode [ 173.991841][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 174.001721][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.011267][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.021695][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.032677][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.067055][ T7424] device veth1_vlan entered promiscuous mode [ 174.081553][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.092583][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.102871][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.110199][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 174.120233][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.125945][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.134837][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.153313][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.155721][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.169164][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 174.179651][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.209566][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.217691][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.227517][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.231950][ T23] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 174.236982][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.252152][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.264992][ T23] usb 2-1: config 0 descriptor?? [ 174.285767][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.301428][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.311743][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.322381][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.332435][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.355834][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.368610][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.391098][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.400722][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.410353][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.418695][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.432436][ T7259] device veth0_vlan entered promiscuous mode [ 174.444610][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.458059][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.501712][ T7259] device veth1_vlan entered promiscuous mode [ 174.517615][ T7424] device veth0_macvtap entered promiscuous mode [ 174.526442][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.539100][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.547980][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.557299][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.617034][ T7424] device veth1_macvtap entered promiscuous mode [ 174.761459][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.785501][ T23] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0001/input/input5 [ 174.799494][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.817370][ T23] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0001/input/input6 [ 174.830689][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.843611][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.861502][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.872123][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.882785][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.893382][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.905494][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.923521][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.941519][ T23] kye 0003:0458:5013.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 174.957075][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.973573][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.999166][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.019393][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.049495][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.110216][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.161192][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.197671][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.228490][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.242497][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.260448][ T3840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.273386][ T3840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.284156][ T3840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.293369][ T3840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.326240][ T7259] device veth0_macvtap entered promiscuous mode [ 175.379878][ T7259] device veth1_macvtap entered promiscuous mode [ 175.601277][ T3840] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.613316][ T3840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.632587][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 175.655398][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.676000][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 175.688068][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.698946][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 175.712408][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.723299][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 175.734322][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.744572][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 175.755147][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.767157][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.786238][ T3840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.796585][ T3840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.810536][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.822545][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.841685][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.855918][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.873850][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.889023][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.907129][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.932354][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.945464][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.957938][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.959825][ C1] kye 0003:0458:5013.0001: usb_submit_urb(ctrl) failed: -1 [ 175.973767][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.997077][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.013920][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.859311][ T2481] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 177.099243][ T2481] usb 2-1: Using ep0 maxpacket: 16 08:58:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0xd01c4813, &(0x7f0000000000)={0x1, 0x100}) 08:58:03 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x7ffc) 08:58:03 executing program 5: 08:58:03 executing program 2: 08:58:03 executing program 3: 08:58:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000280)=ANY=[]) [ 177.408388][ T2555] usb 2-1: USB disconnect, device number 2 [ 177.424247][ T2481] ================================================================== [ 177.432503][ T2481] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 177.439703][ T2481] Read of size 8 at addr ffff888096ef4150 by task kworker/1:2/2481 [ 177.447589][ T2481] [ 177.449927][ T2481] CPU: 1 PID: 2481 Comm: kworker/1:2 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 177.459462][ T2481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.469538][ T2481] Workqueue: events __usb_queue_reset_device [ 177.475519][ T2481] Call Trace: [ 177.478821][ T2481] dump_stack+0x18f/0x20d [ 177.483161][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 177.488016][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 177.492876][ T2481] print_address_description.constprop.0.cold+0xd3/0x413 [ 177.499901][ T2481] ? cdev_device_del+0x69/0x80 [ 177.505104][ T2481] ? mousedev_destroy+0x20/0xa0 [ 177.509971][ T2481] ? __input_unregister_device+0x1b0/0x430 [ 177.515913][ T2481] ? input_unregister_device+0xb4/0xf0 [ 177.521383][ T2481] ? hidinput_disconnect+0x15e/0x3d0 [ 177.526777][ T2481] ? vprintk_func+0x97/0x1a6 [ 177.531380][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 177.536238][ T2481] kasan_report.cold+0x1f/0x37 [ 177.541014][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 177.545873][ T2481] __mutex_lock+0x1033/0x13c0 [ 177.550563][ T2481] ? mousedev_cleanup+0x21/0x180 [ 177.555514][ T2481] ? print_usage_bug+0x240/0x240 [ 177.560458][ T2481] ? trace_hardirqs_off+0x50/0x220 [ 177.565574][ T2481] ? mutex_trylock+0x2c0/0x2c0 [ 177.570348][ T2481] ? mark_held_locks+0x9f/0xe0 [ 177.575120][ T2481] ? kfree+0x1eb/0x2b0 [ 177.579196][ T2481] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 177.585274][ T2481] ? kfree_const+0x51/0x60 [ 177.589711][ T2481] ? mousedev_cleanup+0x21/0x180 [ 177.594661][ T2481] mousedev_cleanup+0x21/0x180 [ 177.599432][ T2481] mousedev_destroy+0x28/0xa0 [ 177.604116][ T2481] __input_unregister_device+0x1b0/0x430 [ 177.609760][ T2481] input_unregister_device+0xb4/0xf0 [ 177.615055][ T2481] hidinput_disconnect+0x15e/0x3d0 [ 177.620174][ T2481] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 177.625731][ T2481] hid_disconnect+0x13f/0x1a0 [ 177.631115][ T2481] hid_device_remove+0x186/0x240 [ 177.636074][ T2481] ? hid_compare_device_paths+0xc0/0xc0 [ 177.641629][ T2481] device_release_driver_internal+0x231/0x500 [ 177.647742][ T2481] bus_remove_device+0x2dc/0x4a0 [ 177.652695][ T2481] device_del+0x481/0xd30 [ 177.657035][ T2481] ? device_link_add_missing_supplier_links+0x370/0x370 [ 177.664065][ T2481] ? mark_held_locks+0x9f/0xe0 [ 177.668837][ T2481] ? _raw_spin_unlock_irq+0x1f/0x80 [ 177.674048][ T2481] hid_destroy_device+0xe1/0x150 [ 177.678998][ T2481] usbhid_disconnect+0x9f/0xe0 [ 177.683776][ T2481] usb_unbind_interface+0x1bd/0x8a0 [ 177.688990][ T2481] ? __pm_runtime_idle+0xd1/0x320 [ 177.694029][ T2481] ? usb_autoresume_device+0x60/0x60 [ 177.699332][ T2481] device_release_driver_internal+0x432/0x500 [ 177.705414][ T2481] usb_driver_release_interface+0x102/0x180 [ 177.711328][ T2481] unbind_marked_interfaces.isra.0+0x170/0x1f0 [ 177.717503][ T2481] usb_unbind_and_rebind_marked_interfaces+0x34/0x70 [ 177.724190][ T2481] usb_reset_device+0x739/0x8d0 [ 177.729066][ T2481] __usb_queue_reset_device+0x68/0x90 [ 177.734451][ T2481] process_one_work+0x965/0x16a0 [ 177.739405][ T2481] ? lock_release+0x800/0x800 [ 177.744089][ T2481] ? pwq_dec_nr_in_flight+0x310/0x310 [ 177.749473][ T2481] ? rwlock_bug.part.0+0x90/0x90 [ 177.754431][ T2481] worker_thread+0x96/0xe20 [ 177.758952][ T2481] ? process_one_work+0x16a0/0x16a0 [ 177.764159][ T2481] kthread+0x3b5/0x4a0 [ 177.768231][ T2481] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 177.773955][ T2481] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 177.779688][ T2481] ret_from_fork+0x24/0x30 [ 177.784119][ T2481] [ 177.786446][ T2481] Allocated by task 23: [ 177.790682][ T2481] save_stack+0x1b/0x40 [ 177.794843][ T2481] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 177.800484][ T2481] kmem_cache_alloc_trace+0x153/0x7d0 08:58:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0xd01c4813, &(0x7f0000000000)={0x1, 0x100}) 08:58:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0xd01c4813, &(0x7f0000000000)={0x1, 0x100}) 08:58:03 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 177.805861][ T2481] mousedev_create+0x90/0xa20 [ 177.810546][ T2481] mousedev_connect+0x20/0x280 [ 177.815314][ T2481] input_attach_handler+0x194/0x200 [ 177.820518][ T2481] input_register_device.cold+0xf5/0x246 [ 177.826154][ T2481] hidinput_connect+0x4f8f/0xdb30 [ 177.831176][ T2481] hid_connect+0x96b/0xbc0 [ 177.835595][ T2481] hid_hw_start+0xa2/0x130 [ 177.840012][ T2481] kye_probe+0x44/0x536 [ 177.844169][ T2481] hid_device_probe+0x2be/0x3f0 [ 177.849022][ T2481] really_probe+0x281/0x6d0 [ 177.853529][ T2481] driver_probe_device+0xfe/0x1d0 [ 177.858554][ T2481] __device_attach_driver+0x1c2/0x220 [ 177.863931][ T2481] bus_for_each_drv+0x162/0x1e0 [ 177.868782][ T2481] __device_attach+0x21a/0x360 [ 177.873549][ T2481] bus_probe_device+0x1e4/0x290 [ 177.878402][ T2481] device_add+0xaf1/0x1900 [ 177.882819][ T2481] hid_add_device+0x33c/0x9a0 [ 177.887495][ T2481] usbhid_probe+0xac8/0xff0 [ 177.892000][ T2481] usb_probe_interface+0x305/0x7a0 [ 177.897109][ T2481] really_probe+0x281/0x6d0 [ 177.901611][ T2481] driver_probe_device+0xfe/0x1d0 [ 177.906642][ T2481] __device_attach_driver+0x1c2/0x220 [ 177.912450][ T2481] bus_for_each_drv+0x162/0x1e0 [ 177.917300][ T2481] __device_attach+0x21a/0x360 [ 177.922063][ T2481] bus_probe_device+0x1e4/0x290 [ 177.926916][ T2481] device_add+0xaf1/0x1900 [ 177.931338][ T2481] usb_set_configuration+0xec5/0x1740 [ 177.936712][ T2481] usb_generic_driver_probe+0x9d/0xe0 [ 177.942086][ T2481] usb_probe_device+0xc6/0x1f0 [ 177.946850][ T2481] really_probe+0x281/0x6d0 [ 177.951354][ T2481] driver_probe_device+0xfe/0x1d0 [ 177.956381][ T2481] __device_attach_driver+0x1c2/0x220 [ 177.961752][ T2481] bus_for_each_drv+0x162/0x1e0 [ 177.966603][ T2481] __device_attach+0x21a/0x360 [ 177.971366][ T2481] bus_probe_device+0x1e4/0x290 [ 177.976220][ T2481] device_add+0xaf1/0x1900 [ 177.980652][ T2481] usb_new_device.cold+0x753/0x103d [ 177.985855][ T2481] hub_event+0x1eca/0x38f0 [ 177.990279][ T2481] process_one_work+0x965/0x16a0 [ 177.995247][ T2481] worker_thread+0x96/0xe20 [ 177.999751][ T2481] kthread+0x3b5/0x4a0 [ 178.003818][ T2481] ret_from_fork+0x24/0x30 [ 178.008223][ T2481] 08:58:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0xd01c4813, &(0x7f0000000000)={0x1, 0x100}) [ 178.010553][ T2481] Freed by task 2481: [ 178.014536][ T2481] save_stack+0x1b/0x40 [ 178.018693][ T2481] __kasan_slab_free+0xf7/0x140 [ 178.023545][ T2481] kfree+0x109/0x2b0 [ 178.027445][ T2481] device_release+0x71/0x200 [ 178.032041][ T2481] kobject_put+0x1c8/0x2f0 [ 178.036464][ T2481] cdev_device_del+0x69/0x80 [ 178.041061][ T2481] mousedev_destroy+0x20/0xa0 [ 178.045746][ T2481] __input_unregister_device+0x1b0/0x430 [ 178.051393][ T2481] input_unregister_device+0xb4/0xf0 [ 178.056684][ T2481] hidinput_disconnect+0x15e/0x3d0 [ 178.061796][ T2481] hid_disconnect+0x13f/0x1a0 [ 178.066479][ T2481] hid_device_remove+0x186/0x240 [ 178.071421][ T2481] device_release_driver_internal+0x231/0x500 [ 178.077488][ T2481] bus_remove_device+0x2dc/0x4a0 [ 178.082428][ T2481] device_del+0x481/0xd30 [ 178.086762][ T2481] hid_destroy_device+0xe1/0x150 [ 178.091709][ T2481] usbhid_disconnect+0x9f/0xe0 [ 178.096476][ T2481] usb_unbind_interface+0x1bd/0x8a0 [ 178.101680][ T2481] device_release_driver_internal+0x432/0x500 [ 178.107752][ T2481] usb_driver_release_interface+0x102/0x180 [ 178.113654][ T2481] unbind_marked_interfaces.isra.0+0x170/0x1f0 [ 178.119812][ T2481] usb_unbind_and_rebind_marked_interfaces+0x34/0x70 [ 178.126492][ T2481] usb_reset_device+0x739/0x8d0 [ 178.131350][ T2481] __usb_queue_reset_device+0x68/0x90 [ 178.136817][ T2481] process_one_work+0x965/0x16a0 [ 178.141763][ T2481] worker_thread+0x96/0xe20 [ 178.146279][ T2481] kthread+0x3b5/0x4a0 [ 178.150351][ T2481] ret_from_fork+0x24/0x30 [ 178.154761][ T2481] 08:58:03 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 178.157090][ T2481] The buggy address belongs to the object at ffff888096ef4000 [ 178.157090][ T2481] which belongs to the cache kmalloc-2k of size 2048 [ 178.171143][ T2481] The buggy address is located 336 bytes inside of [ 178.171143][ T2481] 2048-byte region [ffff888096ef4000, ffff888096ef4800) [ 178.184501][ T2481] The buggy address belongs to the page: [ 178.190143][ T2481] page:ffffea00025bbd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 178.199363][ T2481] flags: 0xfffe0000000200(slab) [ 178.204228][ T2481] raw: 00fffe0000000200 ffffea0002232f08 ffffea0002490648 ffff8880aa000e00 [ 178.212828][ T2481] raw: 0000000000000000 ffff888096ef4000 0000000100000001 0000000000000000 [ 178.221412][ T2481] page dumped because: kasan: bad access detected [ 178.227823][ T2481] [ 178.230153][ T2481] Memory state around the buggy address: [ 178.235790][ T2481] ffff888096ef4000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.243858][ T2481] ffff888096ef4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.251924][ T2481] >ffff888096ef4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.260001][ T2481] ^ [ 178.266685][ T2481] ffff888096ef4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.274757][ T2481] ffff888096ef4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.282822][ T2481] ================================================================== [ 178.290886][ T2481] Disabling lock debugging due to kernel taint 08:58:04 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x7ffc) [ 178.401502][ T2481] Kernel panic - not syncing: panic_on_warn set ... [ 178.408121][ T2481] CPU: 1 PID: 2481 Comm: kworker/1:2 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 178.419046][ T2481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.429135][ T2481] Workqueue: events __usb_queue_reset_device [ 178.435109][ T2481] Call Trace: [ 178.438400][ T2481] dump_stack+0x18f/0x20d [ 178.442817][ T2481] ? __mutex_lock+0xf50/0x13c0 [ 178.447580][ T2481] panic+0x2e3/0x75c [ 178.451478][ T2481] ? __warn_printk+0xf3/0xf3 [ 178.456069][ T2481] ? preempt_schedule_common+0x5e/0xc0 [ 178.461528][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 178.466375][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 178.471266][ T2481] ? preempt_schedule_thunk+0x16/0x18 [ 178.476636][ T2481] ? trace_hardirqs_on+0x55/0x230 [ 178.481667][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 178.486520][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 178.491357][ T2481] end_report+0x4d/0x53 [ 178.495556][ T2481] kasan_report.cold+0xd/0x37 [ 178.500355][ T2481] ? __mutex_lock+0x1033/0x13c0 [ 178.505626][ T2481] __mutex_lock+0x1033/0x13c0 [ 178.510287][ T2481] ? mousedev_cleanup+0x21/0x180 [ 178.515344][ T2481] ? print_usage_bug+0x240/0x240 [ 178.520420][ T2481] ? trace_hardirqs_off+0x50/0x220 [ 178.525656][ T2481] ? mutex_trylock+0x2c0/0x2c0 [ 178.530410][ T2481] ? mark_held_locks+0x9f/0xe0 [ 178.535161][ T2481] ? kfree+0x1eb/0x2b0 [ 178.539212][ T2481] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 178.545180][ T2481] ? kfree_const+0x51/0x60 [ 178.549597][ T2481] ? mousedev_cleanup+0x21/0x180 [ 178.554513][ T2481] mousedev_cleanup+0x21/0x180 [ 178.559353][ T2481] mousedev_destroy+0x28/0xa0 [ 178.564026][ T2481] __input_unregister_device+0x1b0/0x430 [ 178.569726][ T2481] input_unregister_device+0xb4/0xf0 [ 178.575039][ T2481] hidinput_disconnect+0x15e/0x3d0 [ 178.580131][ T2481] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 178.585677][ T2481] hid_disconnect+0x13f/0x1a0 [ 178.590337][ T2481] hid_device_remove+0x186/0x240 [ 178.595254][ T2481] ? hid_compare_device_paths+0xc0/0xc0 [ 178.600776][ T2481] device_release_driver_internal+0x231/0x500 [ 178.606821][ T2481] bus_remove_device+0x2dc/0x4a0 [ 178.611735][ T2481] device_del+0x481/0xd30 [ 178.616044][ T2481] ? device_link_add_missing_supplier_links+0x370/0x370 [ 178.622963][ T2481] ? mark_held_locks+0x9f/0xe0 [ 178.627713][ T2481] ? _raw_spin_unlock_irq+0x1f/0x80 [ 178.632895][ T2481] hid_destroy_device+0xe1/0x150 [ 178.637905][ T2481] usbhid_disconnect+0x9f/0xe0 [ 178.642649][ T2481] usb_unbind_interface+0x1bd/0x8a0 [ 178.647829][ T2481] ? __pm_runtime_idle+0xd1/0x320 [ 178.652836][ T2481] ? usb_autoresume_device+0x60/0x60 [ 178.658125][ T2481] device_release_driver_internal+0x432/0x500 [ 178.664205][ T2481] usb_driver_release_interface+0x102/0x180 [ 178.670078][ T2481] unbind_marked_interfaces.isra.0+0x170/0x1f0 [ 178.676237][ T2481] usb_unbind_and_rebind_marked_interfaces+0x34/0x70 [ 178.682884][ T2481] usb_reset_device+0x739/0x8d0 [ 178.687799][ T2481] __usb_queue_reset_device+0x68/0x90 [ 178.693174][ T2481] process_one_work+0x965/0x16a0 [ 178.698100][ T2481] ? lock_release+0x800/0x800 [ 178.702761][ T2481] ? pwq_dec_nr_in_flight+0x310/0x310 [ 178.708108][ T2481] ? rwlock_bug.part.0+0x90/0x90 [ 178.713034][ T2481] worker_thread+0x96/0xe20 [ 178.717538][ T2481] ? process_one_work+0x16a0/0x16a0 [ 178.722717][ T2481] kthread+0x3b5/0x4a0 [ 178.726771][ T2481] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 178.732475][ T2481] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 178.738179][ T2481] ret_from_fork+0x24/0x30 [ 178.743886][ T2481] Kernel Offset: disabled [ 178.748208][ T2481] Rebooting in 86400 seconds..