Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. 2020/05/23 07:50:26 fuzzer started 2020/05/23 07:50:26 dialing manager at 10.128.0.26:38661 2020/05/23 07:50:26 syscalls: 3055 2020/05/23 07:50:26 code coverage: enabled 2020/05/23 07:50:26 comparison tracing: enabled 2020/05/23 07:50:26 extra coverage: enabled 2020/05/23 07:50:26 setuid sandbox: enabled 2020/05/23 07:50:26 namespace sandbox: enabled 2020/05/23 07:50:26 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 07:50:26 fault injection: enabled 2020/05/23 07:50:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 07:50:26 net packet injection: enabled 2020/05/23 07:50:26 net device setup: enabled 2020/05/23 07:50:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 07:50:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 07:50:26 USB emulation: enabled 07:52:19 executing program 0: syzkaller login: [ 171.123312][ T6826] IPVS: ftp: loaded support on port[0] = 21 07:52:19 executing program 1: [ 171.271191][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 171.422992][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.435442][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.452389][ T6826] device bridge_slave_0 entered promiscuous mode [ 171.463340][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.471525][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.481453][ T6826] device bridge_slave_1 entered promiscuous mode [ 171.515821][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.517736][ T6956] IPVS: ftp: loaded support on port[0] = 21 [ 171.528593][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.569256][ T6826] team0: Port device team_slave_0 added [ 171.589752][ T6826] team0: Port device team_slave_1 added 07:52:19 executing program 2: [ 171.649203][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.658349][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.685109][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.707975][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.715953][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.742691][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.917454][ T6826] device hsr_slave_0 entered promiscuous mode 07:52:20 executing program 3: [ 171.966305][ T6826] device hsr_slave_1 entered promiscuous mode [ 172.022869][ T6956] chnl_net:caif_netlink_parms(): no params data found [ 172.023836][ T7039] IPVS: ftp: loaded support on port[0] = 21 [ 172.285063][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.292366][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.306925][ T6956] device bridge_slave_0 entered promiscuous mode [ 172.356052][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.363512][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state 07:52:20 executing program 4: [ 172.404335][ T6956] device bridge_slave_1 entered promiscuous mode [ 172.443901][ T7174] IPVS: ftp: loaded support on port[0] = 21 [ 172.532197][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.630224][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.654782][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 172.670869][ T6826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.753270][ T6826] netdevsim netdevsim0 netdevsim1: renamed from eth1 07:52:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x1, 0x100, 0x0, 0x20000002}) [ 172.829891][ T6956] team0: Port device team_slave_0 added [ 172.845159][ T6956] team0: Port device team_slave_1 added [ 172.866088][ T6826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.920690][ T6826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.017261][ T7280] IPVS: ftp: loaded support on port[0] = 21 [ 173.037970][ T7310] IPVS: ftp: loaded support on port[0] = 21 [ 173.048824][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.055909][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.084642][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.100632][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.108942][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.135961][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.208027][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.217777][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.227623][ T7039] device bridge_slave_0 entered promiscuous mode [ 173.289110][ T6956] device hsr_slave_0 entered promiscuous mode [ 173.334756][ T6956] device hsr_slave_1 entered promiscuous mode [ 173.394406][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.402266][ T6956] Cannot create hsr debugfs directory [ 173.426397][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.433486][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.442514][ T7039] device bridge_slave_1 entered promiscuous mode [ 173.513866][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.593531][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.727715][ T7039] team0: Port device team_slave_0 added [ 173.759020][ T7039] team0: Port device team_slave_1 added [ 173.768709][ T7310] chnl_net:caif_netlink_parms(): no params data found [ 173.792076][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 173.930222][ T7280] chnl_net:caif_netlink_parms(): no params data found [ 173.940059][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.951224][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.977493][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.990391][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.997554][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.024139][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.156846][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.163929][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.172868][ T7310] device bridge_slave_0 entered promiscuous mode [ 174.229183][ T7039] device hsr_slave_0 entered promiscuous mode [ 174.294861][ T7039] device hsr_slave_1 entered promiscuous mode [ 174.344356][ T7039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.352004][ T7039] Cannot create hsr debugfs directory [ 174.371893][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.401753][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.411597][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.421639][ T7310] device bridge_slave_1 entered promiscuous mode [ 174.511727][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.521206][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.530284][ T7280] device bridge_slave_0 entered promiscuous mode [ 174.586063][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.593142][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.605086][ T7280] device bridge_slave_1 entered promiscuous mode [ 174.612167][ T6956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.667631][ T7310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.681626][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.692386][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.701250][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.709299][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.717441][ T7174] device bridge_slave_0 entered promiscuous mode [ 174.733365][ T6956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.777337][ T6956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.831798][ T6956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.891154][ T7310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.907233][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.915813][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.923634][ T7174] device bridge_slave_1 entered promiscuous mode [ 174.943273][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.971489][ T7310] team0: Port device team_slave_0 added [ 174.990154][ T7280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.019393][ T7310] team0: Port device team_slave_1 added [ 175.040372][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.049564][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.058292][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.065599][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.075672][ T7280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.088794][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.120565][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.150207][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.187004][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.197555][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.206712][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.213755][ T2514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.246474][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.253441][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.280618][ T7310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.295632][ T7280] team0: Port device team_slave_0 added [ 175.312017][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.321317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.338475][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.346262][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.373007][ T7310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.410328][ T7280] team0: Port device team_slave_1 added [ 175.418731][ T7174] team0: Port device team_slave_0 added [ 175.430011][ T7174] team0: Port device team_slave_1 added [ 175.459687][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.471206][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.481674][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.496665][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.505975][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.576415][ T7310] device hsr_slave_0 entered promiscuous mode [ 175.614538][ T7310] device hsr_slave_1 entered promiscuous mode [ 175.664331][ T7310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.671981][ T7310] Cannot create hsr debugfs directory [ 175.701722][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.708965][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.736132][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.750732][ T7039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.820331][ T7039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.894365][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.904204][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.931504][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.943625][ T7039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.996897][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.006001][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.018148][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.027050][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.036781][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.043732][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.071106][ T7280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.114885][ T7039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.162238][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.171654][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.199122][ T7280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.212577][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.338138][ T7174] device hsr_slave_0 entered promiscuous mode [ 176.404367][ T7174] device hsr_slave_1 entered promiscuous mode [ 176.444076][ T7174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.451758][ T7174] Cannot create hsr debugfs directory [ 176.462121][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.539352][ T7280] device hsr_slave_0 entered promiscuous mode [ 176.584725][ T7280] device hsr_slave_1 entered promiscuous mode [ 176.624145][ T7280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.631773][ T7280] Cannot create hsr debugfs directory [ 176.751278][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.763854][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.771786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.781014][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.789954][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.843630][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.867377][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.886209][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.898763][ T3188] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.905937][ T3188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.929738][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.985995][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.996984][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.005750][ T2482] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.012834][ T2482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.020629][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.056153][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.124467][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.133334][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.152282][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.162038][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.174161][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.182981][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.192895][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.201763][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.210771][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.232357][ T7310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.312075][ T7310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.373361][ T6956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.386614][ T6956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.406047][ T6826] device veth0_vlan entered promiscuous mode [ 177.413250][ T7310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.466608][ T7310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.540405][ T7174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.586700][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.596555][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.605633][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.614813][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.629098][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.659882][ T7174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.726881][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.735061][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.748590][ T6826] device veth1_vlan entered promiscuous mode [ 177.778381][ T7174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.814478][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.822742][ T7174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.941405][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.951216][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.960200][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.968284][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.976634][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.996833][ T7280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.059326][ T7280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.126821][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.145803][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.156181][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.165494][ T7280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.198370][ T7280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.260083][ T6826] device veth0_macvtap entered promiscuous mode [ 178.277952][ T6826] device veth1_macvtap entered promiscuous mode [ 178.311017][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.320466][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.329172][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.338699][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.348153][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.355411][ T7812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.400090][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.408524][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.419554][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.428444][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.435601][ T2514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.443721][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.464981][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.475165][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.496850][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.532531][ T7039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.543586][ T7039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.558385][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.568505][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.579258][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.588255][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.597636][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.606591][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.615692][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.625003][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.633390][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.642090][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.650682][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.662373][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.670528][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.697821][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.726643][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.739516][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.771607][ T6956] device veth0_vlan entered promiscuous mode [ 178.794964][ T6956] device veth1_vlan entered promiscuous mode [ 178.802487][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.812451][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.821446][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.851310][ T7310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.871232][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.881684][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.894486][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.902757][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.915079][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.930635][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0 07:52:27 executing program 0: [ 179.115345][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.140991][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.152899][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.209056][ T7310] 8021q: adding VLAN 0 to HW filter on device team0 07:52:27 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x200017, 0x0, 0x7fff, 0x80, 0x0, 0x1}}) [ 179.261961][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.271747][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.297073][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 07:52:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/75, 0x4b}], 0x1, 0x7fff) [ 179.358641][ T7280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.400933][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.415507][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.425234][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.434208][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.442700][ T3188] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.449905][ T3188] bridge0: port 1(bridge_slave_0) entered forwarding state 07:52:27 executing program 0: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f00000001c0), 0x10) [ 179.494190][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.503156][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.555253][ T6956] device veth0_macvtap entered promiscuous mode [ 179.576475][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.596035][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 07:52:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5cfcbf8c0c947422c7fdeee22a6cb4a6125b17b7de830c5ebc8379b4c9edeb1fee25713685248fe3fea28af2a811a9b6c54ad78a25892b83c11544de95683ec4e50ba7a514c59ae9cb6b0c201947b3e396094fce1dd466a4c4a5ae40560581a123d1e9dda0fbf4dd807f294f4e8d44c762dcc160a4c8186e0c216bf280dd70af31a008", 0x83}, {0x0}], 0x2) [ 179.642352][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.658706][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.673191][ T2482] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.680423][ T2482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.695240][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.707020][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.717209][ T2482] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.724388][ T2482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.741688][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.751060][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.765430][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.778647][ T3187] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.785917][ T3187] bridge0: port 2(bridge_slave_1) entered forwarding state 07:52:28 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x17, 0x0, 0x7fff}}) [ 179.821495][ T6956] device veth1_macvtap entered promiscuous mode [ 179.830701][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.839095][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.868498][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.878087][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.885395][ T8097] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.895410][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.903391][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 07:52:28 executing program 0: getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000007b00)) [ 179.913528][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.923301][ T7039] device veth0_vlan entered promiscuous mode [ 179.935953][ T7280] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.978489][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.988300][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.998844][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.009972][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.019844][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.029398][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.069869][ T7039] device veth1_vlan entered promiscuous mode [ 180.108052][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.123062][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.133378][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.145799][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.154962][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.165035][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.173577][ T3187] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.180758][ T3187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.189957][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.203470][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.241837][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.252871][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.265707][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.280743][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.289877][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.298911][ T2482] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.306088][ T2482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.315517][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.324892][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.333338][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.342469][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.351665][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.360748][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.369715][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.378412][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.387912][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.397627][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.406405][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.434164][ T7174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.448232][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.458727][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.470303][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.481699][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.492549][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.501537][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.510263][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.521421][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.530513][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.539289][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.548921][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.557895][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.586162][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.602183][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.611548][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.620838][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.643556][ T7039] device veth0_macvtap entered promiscuous mode [ 180.681860][ T7280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.693523][ T7280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.709207][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.718201][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.727060][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.736228][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.745362][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.752789][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.760732][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.770176][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.781529][ T7039] device veth1_macvtap entered promiscuous mode [ 180.819701][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.829598][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.838538][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.899535][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.911602][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.922157][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.933112][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.946091][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.957133][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.968296][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.976525][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.989120][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.000267][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.011340][ T7310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.032648][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.048309][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.059141][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.070123][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.081686][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.146956][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.156324][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.165981][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.173526][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.203395][ T7280] 8021q: adding VLAN 0 to HW filter on device batadv0 07:52:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) [ 181.366443][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.379190][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.463066][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.479379][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.496619][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.511218][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 07:52:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', {0x7, 0x0, @remote}}) [ 181.556144][ T7174] device veth0_vlan entered promiscuous mode [ 181.583276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.611257][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.687897][ T7174] device veth1_vlan entered promiscuous mode [ 181.908198][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.921202][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.930666][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.971187][ T7310] device veth0_vlan entered promiscuous mode [ 181.980385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.990201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.999944][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.011527][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.021401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.046617][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.055228][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.065054][ T7310] device veth1_vlan entered promiscuous mode [ 182.077424][ T7280] device veth0_vlan entered promiscuous mode [ 182.111034][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.118979][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.145780][ T7280] device veth1_vlan entered promiscuous mode [ 182.314905][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.323022][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.332886][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.342664][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.355323][ T7174] device veth0_macvtap entered promiscuous mode [ 182.380286][ T7310] device veth0_macvtap entered promiscuous mode [ 182.391690][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.401588][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.411461][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.432701][ T2482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.448439][ T7174] device veth1_macvtap entered promiscuous mode [ 182.470831][ T7310] device veth1_macvtap entered promiscuous mode [ 182.494197][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.515505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.534178][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.542701][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.578204][ T7280] device veth0_macvtap entered promiscuous mode [ 182.597899][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.609539][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.620169][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.632411][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.642321][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.652817][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.667246][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.675242][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.686697][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.696820][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.707858][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.717782][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.728341][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.738249][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.748739][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.760208][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.772848][ T7280] device veth1_macvtap entered promiscuous mode [ 182.781612][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.790635][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.799233][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.808551][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.817723][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.826627][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.838967][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.850950][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.860876][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.876283][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.886229][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.896725][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.908632][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.918922][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.930381][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.940545][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.952804][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.963904][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.974425][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.984354][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.995081][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.006912][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.015219][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.024447][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.033349][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.042925][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.232085][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.250882][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.261014][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.281673][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.291651][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.310651][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 07:52:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x0, 0x8, 0x401}, 0x14}}, 0x0) [ 183.322837][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.340613][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.354489][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.373378][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.392967][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.477442][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.490424][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.507270][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.518684][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.529772][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.540290][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.550420][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.560895][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.570822][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.581758][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.594251][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.605776][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.617312][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.678100][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.707675][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:52:32 executing program 4: [ 183.985499][ T2509] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.236086][ T2509] usb 6-1: Using ep0 maxpacket: 16 [ 184.384267][ T2509] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 184.396708][ T2509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.407835][ T2509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.417744][ T2509] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 184.430734][ T2509] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 184.439917][ T2509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.450504][ T2509] usb 6-1: config 0 descriptor?? [ 184.951504][ T2509] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0001/input/input5 [ 184.981073][ T2509] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0001/input/input6 [ 185.100863][ T2509] kye 0003:0458:5013.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 186.124298][ C0] kye 0003:0458:5013.0001: usb_submit_urb(ctrl) failed: -1 [ 187.043570][ T2509] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 187.283468][ T2509] usb 6-1: Using ep0 maxpacket: 16 07:52:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x1, 0x100, 0x0, 0x20000002}) 07:52:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009340)={0x38, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8}}}]}]}, 0x38}}, 0x0) 07:52:35 executing program 0: 07:52:35 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x800000080004103) 07:52:35 executing program 3: 07:52:35 executing program 4: [ 187.554743][ T17] usb 6-1: USB disconnect, device number 2 [ 187.593925][ T2509] ================================================================== [ 187.602376][ T2509] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 187.609583][ T2509] Read of size 8 at addr ffff88808997c150 by task kworker/1:2/2509 [ 187.617470][ T2509] [ 187.619810][ T2509] CPU: 1 PID: 2509 Comm: kworker/1:2 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 187.629349][ T2509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.639515][ T2509] Workqueue: events __usb_queue_reset_device [ 187.645500][ T2509] Call Trace: [ 187.648925][ T2509] dump_stack+0x18f/0x20d [ 187.653451][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 187.658307][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 187.663169][ T2509] print_address_description.constprop.0.cold+0xd3/0x413 [ 187.670212][ T2509] ? cdev_device_del+0x69/0x80 [ 187.674993][ T2509] ? mousedev_destroy+0x20/0xa0 [ 187.679860][ T2509] ? __input_unregister_device+0x1b0/0x430 [ 187.685706][ T2509] ? input_unregister_device+0xb4/0xf0 [ 187.691185][ T2509] ? hidinput_disconnect+0x15e/0x3d0 [ 187.696490][ T2509] ? vprintk_func+0x97/0x1a6 [ 187.701104][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 187.705982][ T2509] kasan_report.cold+0x1f/0x37 [ 187.710761][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 187.715626][ T2509] __mutex_lock+0x1033/0x13c0 [ 187.720317][ T2509] ? mousedev_cleanup+0x21/0x180 [ 187.725264][ T2509] ? print_usage_bug+0x240/0x240 [ 187.730213][ T2509] ? trace_hardirqs_off+0x50/0x220 [ 187.735339][ T2509] ? mutex_trylock+0x2c0/0x2c0 [ 187.740114][ T2509] ? mark_held_locks+0x9f/0xe0 [ 187.744904][ T2509] ? kfree+0x1eb/0x2b0 [ 187.748980][ T2509] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 187.754973][ T2509] ? kfree_const+0x51/0x60 [ 187.759409][ T2509] ? mousedev_cleanup+0x21/0x180 [ 187.764350][ T2509] mousedev_cleanup+0x21/0x180 [ 187.769124][ T2509] mousedev_destroy+0x28/0xa0 [ 187.773808][ T2509] __input_unregister_device+0x1b0/0x430 [ 187.779625][ T2509] input_unregister_device+0xb4/0xf0 [ 187.784918][ T2509] hidinput_disconnect+0x15e/0x3d0 [ 187.790061][ T2509] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 187.795613][ T2509] hid_disconnect+0x13f/0x1a0 [ 187.800302][ T2509] hid_device_remove+0x186/0x240 [ 187.805256][ T2509] ? hid_compare_device_paths+0xc0/0xc0 [ 187.810812][ T2509] device_release_driver_internal+0x231/0x500 [ 187.816900][ T2509] bus_remove_device+0x2dc/0x4a0 [ 187.821854][ T2509] device_del+0x481/0xd30 [ 187.826201][ T2509] ? device_link_add_missing_supplier_links+0x370/0x370 [ 187.833153][ T2509] ? mark_held_locks+0x9f/0xe0 [ 187.837936][ T2509] ? _raw_spin_unlock_irq+0x1f/0x80 [ 187.843155][ T2509] hid_destroy_device+0xe1/0x150 [ 187.848108][ T2509] usbhid_disconnect+0x9f/0xe0 [ 187.852890][ T2509] usb_unbind_interface+0x1bd/0x8a0 [ 187.858121][ T2509] ? __pm_runtime_idle+0xd1/0x320 [ 187.863160][ T2509] ? usb_autoresume_device+0x60/0x60 [ 187.869764][ T2509] device_release_driver_internal+0x432/0x500 [ 187.875857][ T2509] usb_driver_release_interface+0x102/0x180 [ 187.881785][ T2509] unbind_marked_interfaces.isra.0+0x170/0x1f0 [ 187.887967][ T2509] usb_unbind_and_rebind_marked_interfaces+0x34/0x70 [ 187.894662][ T2509] usb_reset_device+0x739/0x8d0 [ 187.899540][ T2509] __usb_queue_reset_device+0x68/0x90 [ 187.905014][ T2509] process_one_work+0x965/0x16a0 [ 187.909970][ T2509] ? lock_release+0x800/0x800 [ 187.914687][ T2509] ? pwq_dec_nr_in_flight+0x310/0x310 [ 187.920077][ T2509] ? rwlock_bug.part.0+0x90/0x90 [ 187.925035][ T2509] worker_thread+0x96/0xe20 [ 187.929561][ T2509] ? process_one_work+0x16a0/0x16a0 [ 187.934782][ T2509] kthread+0x3b5/0x4a0 [ 187.938860][ T2509] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 187.944592][ T2509] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 187.950325][ T2509] ret_from_fork+0x24/0x30 [ 187.954755][ T2509] [ 187.957083][ T2509] Allocated by task 2509: [ 187.961416][ T2509] save_stack+0x1b/0x40 [ 187.965582][ T2509] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 187.971219][ T2509] kmem_cache_alloc_trace+0x153/0x7d0 [ 187.976593][ T2509] mousedev_create+0x90/0xa20 [ 187.977147][ T8201] BPF:[1] PTR (anon) [ 187.981261][ T2509] mousedev_connect+0x20/0x280 [ 187.981293][ T2509] input_attach_handler+0x194/0x200 [ 187.981305][ T2509] input_register_device.cold+0xf5/0x246 [ 187.981319][ T2509] hidinput_connect+0x4f8f/0xdb30 [ 187.981334][ T2509] hid_connect+0x96b/0xbc0 [ 188.010264][ T2509] hid_hw_start+0xa2/0x130 [ 188.013403][ T8201] BPF:type_id=1 [ 188.014679][ T2509] kye_probe+0x44/0x536 [ 188.014694][ T2509] hid_device_probe+0x2be/0x3f0 [ 188.014709][ T2509] really_probe+0x281/0x6d0 [ 188.014720][ T2509] driver_probe_device+0xfe/0x1d0 [ 188.014737][ T2509] __device_attach_driver+0x1c2/0x220 [ 188.022871][ T8201] BPF: [ 188.027205][ T2509] bus_for_each_drv+0x162/0x1e0 [ 188.027217][ T2509] __device_attach+0x21a/0x360 [ 188.027226][ T2509] bus_probe_device+0x1e4/0x290 [ 188.027236][ T2509] device_add+0xaf1/0x1900 [ 188.027249][ T2509] hid_add_device+0x33c/0x9a0 [ 188.027260][ T2509] usbhid_probe+0xac8/0xff0 [ 188.027276][ T2509] usb_probe_interface+0x305/0x7a0 [ 188.027284][ T2509] really_probe+0x281/0x6d0 [ 188.027295][ T2509] driver_probe_device+0xfe/0x1d0 [ 188.027307][ T2509] __device_attach_driver+0x1c2/0x220 [ 188.027319][ T2509] bus_for_each_drv+0x162/0x1e0 [ 188.027330][ T2509] __device_attach+0x21a/0x360 [ 188.027340][ T2509] bus_probe_device+0x1e4/0x290 [ 188.027350][ T2509] device_add+0xaf1/0x1900 [ 188.027368][ T2509] usb_set_configuration+0xec5/0x1740 [ 188.054011][ T8201] BPF:Loop detected [ 188.054595][ T2509] usb_generic_driver_probe+0x9d/0xe0 [ 188.073973][ T8201] BPF: [ 188.073973][ T8201] [ 188.078082][ T2509] usb_probe_device+0xc6/0x1f0 [ 188.078097][ T2509] really_probe+0x281/0x6d0 [ 188.078109][ T2509] driver_probe_device+0xfe/0x1d0 [ 188.078121][ T2509] __device_attach_driver+0x1c2/0x220 [ 188.078132][ T2509] bus_for_each_drv+0x162/0x1e0 [ 188.078147][ T2509] __device_attach+0x21a/0x360 [ 188.102701][ T8204] BPF:[1] PTR (anon) [ 188.107411][ T2509] bus_probe_device+0x1e4/0x290 [ 188.107425][ T2509] device_add+0xaf1/0x1900 [ 188.107442][ T2509] usb_new_device.cold+0x753/0x103d [ 188.107455][ T2509] hub_event+0x1eca/0x38f0 [ 188.107471][ T2509] process_one_work+0x965/0x16a0 [ 188.107482][ T2509] worker_thread+0x96/0xe20 [ 188.107493][ T2509] kthread+0x3b5/0x4a0 [ 188.107513][ T2509] ret_from_fork+0x24/0x30 [ 188.123022][ T8204] BPF:type_id=1 [ 188.126401][ T2509] [ 188.126411][ T2509] Freed by task 2509: [ 188.126434][ T2509] save_stack+0x1b/0x40 [ 188.126446][ T2509] __kasan_slab_free+0xf7/0x140 [ 188.126455][ T2509] kfree+0x109/0x2b0 [ 188.126469][ T2509] device_release+0x71/0x200 [ 188.126483][ T2509] kobject_put+0x1c8/0x2f0 [ 188.126497][ T2509] cdev_device_del+0x69/0x80 [ 188.126517][ T2509] mousedev_destroy+0x20/0xa0 [ 188.139352][ T8204] BPF: [ 188.140589][ T2509] __input_unregister_device+0x1b0/0x430 [ 188.140605][ T2509] input_unregister_device+0xb4/0xf0 [ 188.140621][ T2509] hidinput_disconnect+0x15e/0x3d0 [ 188.140637][ T2509] hid_disconnect+0x13f/0x1a0 [ 188.162095][ T8204] BPF:Loop detected [ 188.164559][ T2509] hid_device_remove+0x186/0x240 [ 188.164576][ T2509] device_release_driver_internal+0x231/0x500 [ 188.164587][ T2509] bus_remove_device+0x2dc/0x4a0 [ 188.164598][ T2509] device_del+0x481/0xd30 [ 188.164609][ T2509] hid_destroy_device+0xe1/0x150 [ 188.164621][ T2509] usbhid_disconnect+0x9f/0xe0 [ 188.164642][ T2509] usb_unbind_interface+0x1bd/0x8a0 [ 188.181406][ T8204] BPF: [ 188.181406][ T8204] [ 188.183474][ T2509] device_release_driver_internal+0x432/0x500 [ 188.183493][ T2509] usb_driver_release_interface+0x102/0x180 [ 188.183506][ T2509] unbind_marked_interfaces.isra.0+0x170/0x1f0 [ 188.183517][ T2509] usb_unbind_and_rebind_marked_interfaces+0x34/0x70 [ 188.183529][ T2509] usb_reset_device+0x739/0x8d0 [ 188.183541][ T2509] __usb_queue_reset_device+0x68/0x90 [ 188.183561][ T2509] process_one_work+0x965/0x16a0 [ 188.328304][ T8206] BPF:[1] PTR (anon) [ 188.334115][ T2509] worker_thread+0x96/0xe20 [ 188.334130][ T2509] kthread+0x3b5/0x4a0 [ 188.334146][ T2509] ret_from_fork+0x24/0x30 [ 188.334151][ T2509] [ 188.334160][ T2509] The buggy address belongs to the object at ffff88808997c000 [ 188.334160][ T2509] which belongs to the cache kmalloc-2k of size 2048 [ 188.334171][ T2509] The buggy address is located 336 bytes inside of [ 188.334171][ T2509] 2048-byte region [ffff88808997c000, ffff88808997c800) [ 188.334176][ T2509] The buggy address belongs to the page: 07:52:35 executing program 3: 07:52:36 executing program 3: 07:52:36 executing program 3: 07:52:36 executing program 3: clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0x2, 0x1}, @struct]}}, &(0x7f0000004600)=""/210, 0x32, 0xd2, 0x8}, 0x20) 07:52:36 executing program 3: clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0x2, 0x1}, @struct]}}, &(0x7f0000004600)=""/210, 0x32, 0xd2, 0x8}, 0x20) [ 188.334188][ T2509] page:ffffea0002265f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 188.334205][ T2509] flags: 0xfffe0000000200(slab) [ 188.345827][ T8206] BPF:type_id=1 [ 188.349317][ T2509] raw: 00fffe0000000200 ffffea00026cce48 ffffea00026f3b88 ffff8880aa000e00 [ 188.349336][ T2509] raw: 0000000000000000 ffff88808997c000 0000000100000001 0000000000000000 [ 188.368168][ T8206] BPF: [ 188.368540][ T2509] page dumped because: kasan: bad access detected [ 188.368547][ T2509] [ 188.368552][ T2509] Memory state around the buggy address: [ 188.368567][ T2509] ffff88808997c000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.368578][ T2509] ffff88808997c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.368594][ T2509] >ffff88808997c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.402006][ T8206] BPF:Loop detected [ 188.410701][ T2509] ^ [ 188.410717][ T2509] ffff88808997c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.410727][ T2509] ffff88808997c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.410733][ T2509] ================================================================== [ 188.410739][ T2509] Disabling lock debugging due to kernel taint [ 188.461630][ T2509] Kernel panic - not syncing: panic_on_warn set ... [ 188.528344][ T2509] CPU: 1 PID: 2509 Comm: kworker/1:2 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 188.539269][ T2509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.549344][ T2509] Workqueue: events __usb_queue_reset_device [ 188.555322][ T2509] Call Trace: [ 188.558607][ T2509] dump_stack+0x18f/0x20d [ 188.562922][ T2509] ? __mutex_lock+0xf50/0x13c0 [ 188.567704][ T2509] panic+0x2e3/0x75c [ 188.571586][ T2509] ? __warn_printk+0xf3/0xf3 [ 188.576157][ T2509] ? preempt_schedule_common+0x5e/0xc0 [ 188.581611][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 188.586452][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 188.591294][ T2509] ? preempt_schedule_thunk+0x16/0x18 [ 188.596645][ T2509] ? trace_hardirqs_on+0x55/0x230 [ 188.601647][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 188.606474][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 188.611303][ T2509] end_report+0x4d/0x53 [ 188.615458][ T2509] kasan_report.cold+0xd/0x37 [ 188.620113][ T2509] ? __mutex_lock+0x1033/0x13c0 [ 188.624942][ T2509] __mutex_lock+0x1033/0x13c0 [ 188.629599][ T2509] ? mousedev_cleanup+0x21/0x180 [ 188.634515][ T2509] ? print_usage_bug+0x240/0x240 [ 188.639432][ T2509] ? trace_hardirqs_off+0x50/0x220 [ 188.644534][ T2509] ? mutex_trylock+0x2c0/0x2c0 [ 188.649278][ T2509] ? mark_held_locks+0x9f/0xe0 [ 188.654543][ T2509] ? kfree+0x1eb/0x2b0 [ 188.658591][ T2509] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 188.664567][ T2509] ? kfree_const+0x51/0x60 [ 188.668977][ T2509] ? mousedev_cleanup+0x21/0x180 [ 188.673905][ T2509] mousedev_cleanup+0x21/0x180 [ 188.678647][ T2509] mousedev_destroy+0x28/0xa0 [ 188.683327][ T2509] __input_unregister_device+0x1b0/0x430 [ 188.688954][ T2509] input_unregister_device+0xb4/0xf0 [ 188.694234][ T2509] hidinput_disconnect+0x15e/0x3d0 [ 188.699326][ T2509] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 188.704849][ T2509] hid_disconnect+0x13f/0x1a0 [ 188.709518][ T2509] hid_device_remove+0x186/0x240 [ 188.714435][ T2509] ? hid_compare_device_paths+0xc0/0xc0 [ 188.719959][ T2509] device_release_driver_internal+0x231/0x500 [ 188.726009][ T2509] bus_remove_device+0x2dc/0x4a0 [ 188.730941][ T2509] device_del+0x481/0xd30 [ 188.735265][ T2509] ? device_link_add_missing_supplier_links+0x370/0x370 [ 188.742190][ T2509] ? mark_held_locks+0x9f/0xe0 [ 188.746931][ T2509] ? _raw_spin_unlock_irq+0x1f/0x80 [ 188.752110][ T2509] hid_destroy_device+0xe1/0x150 [ 188.757040][ T2509] usbhid_disconnect+0x9f/0xe0 [ 188.761783][ T2509] usb_unbind_interface+0x1bd/0x8a0 [ 188.767010][ T2509] ? __pm_runtime_idle+0xd1/0x320 [ 188.772022][ T2509] ? usb_autoresume_device+0x60/0x60 [ 188.777290][ T2509] device_release_driver_internal+0x432/0x500 [ 188.783356][ T2509] usb_driver_release_interface+0x102/0x180 [ 188.789230][ T2509] unbind_marked_interfaces.isra.0+0x170/0x1f0 [ 188.795362][ T2509] usb_unbind_and_rebind_marked_interfaces+0x34/0x70 [ 188.802017][ T2509] usb_reset_device+0x739/0x8d0 [ 188.806850][ T2509] __usb_queue_reset_device+0x68/0x90 [ 188.812203][ T2509] process_one_work+0x965/0x16a0 [ 188.817383][ T2509] ? lock_release+0x800/0x800 [ 188.822038][ T2509] ? pwq_dec_nr_in_flight+0x310/0x310 [ 188.827387][ T2509] ? rwlock_bug.part.0+0x90/0x90 [ 188.832311][ T2509] worker_thread+0x96/0xe20 [ 188.836804][ T2509] ? process_one_work+0x16a0/0x16a0 [ 188.841989][ T2509] kthread+0x3b5/0x4a0 [ 188.846039][ T2509] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 188.851736][ T2509] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 188.857432][ T2509] ret_from_fork+0x24/0x30 [ 188.863112][ T2509] Kernel Offset: disabled [ 188.867544][ T2509] Rebooting in 86400 seconds..