[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.250' (ECDSA) to the list of known hosts. 2020/05/24 17:02:31 fuzzer started 2020/05/24 17:02:31 dialing manager at 10.128.0.26:41143 2020/05/24 17:02:31 syscalls: 3055 2020/05/24 17:02:31 code coverage: enabled 2020/05/24 17:02:31 comparison tracing: enabled 2020/05/24 17:02:31 extra coverage: enabled 2020/05/24 17:02:31 setuid sandbox: enabled 2020/05/24 17:02:31 namespace sandbox: enabled 2020/05/24 17:02:31 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/24 17:02:31 fault injection: enabled 2020/05/24 17:02:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/24 17:02:31 net packet injection: enabled 2020/05/24 17:02:31 net device setup: enabled 2020/05/24 17:02:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/24 17:02:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/24 17:02:31 USB emulation: enabled 17:04:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) socket$alg(0x26, 0x5, 0x0) write$tun(r0, &(0x7f0000000440)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) syzkaller login: [ 175.597907][ T6828] IPVS: ftp: loaded support on port[0] = 21 17:04:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="58c01c9a09d3065d419158cb5d8a819afd617733e50bd40e4662175c69dcd54691898166", 0x24, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 175.784983][ T6828] chnl_net:caif_netlink_parms(): no params data found [ 175.884899][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.896087][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.904746][ T6828] device bridge_slave_0 entered promiscuous mode [ 175.919861][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.927157][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.938614][ T6828] device bridge_slave_1 entered promiscuous mode [ 175.993312][ T6828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.019602][ T6828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.031433][ T6958] IPVS: ftp: loaded support on port[0] = 21 17:04:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) [ 176.088236][ T6828] team0: Port device team_slave_0 added [ 176.109073][ T6828] team0: Port device team_slave_1 added [ 176.155073][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.173560][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.233031][ T6828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.256530][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.273172][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.318079][ T6828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.376200][ T7006] IPVS: ftp: loaded support on port[0] = 21 17:04:23 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffa0d35b1004bb080045"], 0x0) [ 176.538652][ T6828] device hsr_slave_0 entered promiscuous mode [ 176.603359][ T6828] device hsr_slave_1 entered promiscuous mode [ 176.710462][ T6958] chnl_net:caif_netlink_parms(): no params data found 17:04:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) [ 176.888454][ T7107] IPVS: ftp: loaded support on port[0] = 21 [ 177.234428][ T7006] chnl_net:caif_netlink_parms(): no params data found [ 177.258843][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.267452][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.285185][ T6958] device bridge_slave_0 entered promiscuous mode [ 177.309661][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.318285][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.329486][ T6958] device bridge_slave_1 entered promiscuous mode [ 177.350229][ T7249] IPVS: ftp: loaded support on port[0] = 21 17:04:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) write(r0, 0x0, 0x0) [ 177.449028][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.500589][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.557617][ T6828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.657726][ T6828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.731064][ T6828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.798079][ T6828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.907389][ T6958] team0: Port device team_slave_0 added [ 177.917217][ T6958] team0: Port device team_slave_1 added [ 177.955433][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.962525][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.966535][ T7339] IPVS: ftp: loaded support on port[0] = 21 [ 177.972304][ T7006] device bridge_slave_0 entered promiscuous mode [ 178.037056][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.045497][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.056497][ T7006] device bridge_slave_1 entered promiscuous mode [ 178.094885][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.101982][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.131661][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.157511][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.165032][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.191429][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.228952][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.239781][ T7107] chnl_net:caif_netlink_parms(): no params data found [ 178.273543][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.378188][ T6958] device hsr_slave_0 entered promiscuous mode [ 178.423899][ T6958] device hsr_slave_1 entered promiscuous mode [ 178.463087][ T6958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.470911][ T6958] Cannot create hsr debugfs directory [ 178.526141][ T7006] team0: Port device team_slave_0 added [ 178.532372][ T7249] chnl_net:caif_netlink_parms(): no params data found [ 178.611657][ T7006] team0: Port device team_slave_1 added [ 178.719639][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.729068][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.739338][ T7107] device bridge_slave_0 entered promiscuous mode [ 178.763098][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.770815][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.799866][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.839190][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.846905][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.856656][ T7107] device bridge_slave_1 entered promiscuous mode [ 178.878712][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.889243][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.917163][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.949540][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.959326][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.968249][ T7249] device bridge_slave_0 entered promiscuous mode [ 179.008015][ T7107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.030941][ T7107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.063150][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.070684][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.080094][ T7249] device bridge_slave_1 entered promiscuous mode [ 179.199983][ T7006] device hsr_slave_0 entered promiscuous mode [ 179.273437][ T7006] device hsr_slave_1 entered promiscuous mode [ 179.313132][ T7006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.321027][ T7006] Cannot create hsr debugfs directory [ 179.340952][ T7107] team0: Port device team_slave_0 added [ 179.354044][ T7107] team0: Port device team_slave_1 added [ 179.362476][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.375938][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.467133][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 179.501455][ T7249] team0: Port device team_slave_0 added [ 179.512143][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.521588][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.549548][ T7107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.590393][ T7249] team0: Port device team_slave_1 added [ 179.606938][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.614970][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.643111][ T7107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.692087][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.699257][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.726500][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.758547][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.778031][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.786279][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.813902][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.843762][ T6958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.910406][ T6958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.029844][ T7107] device hsr_slave_0 entered promiscuous mode [ 180.073666][ T7107] device hsr_slave_1 entered promiscuous mode [ 180.113729][ T7107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.121477][ T7107] Cannot create hsr debugfs directory [ 180.141972][ T6958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.235833][ T7249] device hsr_slave_0 entered promiscuous mode [ 180.273295][ T7249] device hsr_slave_1 entered promiscuous mode [ 180.323007][ T7249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.330606][ T7249] Cannot create hsr debugfs directory [ 180.371892][ T6958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.434834][ T6828] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.445097][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.456409][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.470808][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.478940][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.488910][ T7339] device bridge_slave_0 entered promiscuous mode [ 180.541060][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.549905][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.560115][ T7339] device bridge_slave_1 entered promiscuous mode [ 180.592659][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.614728][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.623933][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.632463][ T2477] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.640481][ T2477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.649927][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.680625][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.743728][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.755400][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.764637][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.771703][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.780360][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.841726][ T7339] team0: Port device team_slave_0 added [ 180.868455][ T7339] team0: Port device team_slave_1 added [ 180.890800][ T7006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.927043][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.970649][ T7006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.039410][ T7006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.122944][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.134227][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.143489][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.152289][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.162332][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.174954][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.202327][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.219225][ T7006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.299386][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.314719][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.325590][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.335097][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.342182][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.370614][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.400172][ T6828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.435150][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.448200][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.585917][ T7339] device hsr_slave_0 entered promiscuous mode [ 181.643613][ T7339] device hsr_slave_1 entered promiscuous mode [ 181.692972][ T7339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.700551][ T7339] Cannot create hsr debugfs directory [ 181.722486][ T7107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.821148][ T7107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.856720][ T7107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.909562][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.917196][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.927791][ T6828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.966014][ T7249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.007156][ T7107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.096717][ T7249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.145717][ T7249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.241696][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.251453][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.279001][ T7249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.360351][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.369726][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.379859][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.389326][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.417726][ T6828] device veth0_vlan entered promiscuous mode [ 182.451101][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.500768][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.581921][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.594707][ T6828] device veth1_vlan entered promiscuous mode [ 182.615244][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.626895][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.635300][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.643813][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.651785][ T7339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.689980][ T7339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.727241][ T7339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.798154][ T7339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.859018][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.868285][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.878586][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.885781][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.895064][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.915877][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.942992][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.951768][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.965942][ T2477] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.973158][ T2477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.982325][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.033452][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.042605][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.054354][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.064552][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.073447][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.081875][ T2477] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.089048][ T2477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.097236][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.106436][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.149220][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.159186][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.168385][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.178187][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.187480][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.197390][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.206224][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.213505][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.254465][ T6828] device veth0_macvtap entered promiscuous mode [ 183.279504][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.288010][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.301283][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.311283][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.320998][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.330160][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.339714][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.363326][ T6958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.401099][ T7107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.410229][ T6828] device veth1_macvtap entered promiscuous mode [ 183.427688][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.442804][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.497062][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.506302][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.517151][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.527206][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.536357][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.556065][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.573373][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.582043][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.608385][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.645206][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.665133][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.677918][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.688080][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.698061][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.709334][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.718888][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.734005][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.745644][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.755545][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.775649][ T7249] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.792871][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.800621][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.825383][ T7107] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.850569][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.861095][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.870407][ T2477] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.877605][ T2477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.956882][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.978923][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.989071][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.003314][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.012170][ T2488] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.019336][ T2488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.029394][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.038725][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.108021][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.125630][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.134343][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.144051][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.155010][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.163764][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.177282][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.187801][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.197781][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.205696][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.214525][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.344235][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.363518][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.383542][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.403115][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.412100][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.462872][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.515222][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.525547][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.559174][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.578666][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.590240][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.601393][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.611743][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.621495][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.659052][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.671673][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.682458][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.692009][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.715732][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.876784][ T6958] device veth0_vlan entered promiscuous mode [ 184.887093][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.900316][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.909243][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.922095][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.931318][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.941193][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.950265][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.960249][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.969518][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.979018][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.990378][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.008620][ T7249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.021093][ T7249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.059027][ T6958] device veth1_vlan entered promiscuous mode [ 185.087045][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.099558][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.110200][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.119467][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.129229][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.139360][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.146532][ T8081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.156401][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.166235][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.390806][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.399345][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.409443][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.419721][ T2488] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.426891][ T2488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.436728][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.449761][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.465587][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.480454][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.489326][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.525435][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.534840][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.551889][ T7006] device veth0_vlan entered promiscuous mode 17:04:33 executing program 0: [ 185.583340][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.606846][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.624334][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:04:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405c576cd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602437bb2e9b66ff1246c93e5c0289644e334432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf89b394807474b3c3156630d3c563ad9c4372975e40a7a1b5005084f485b5188167968e78cc40d2ce2a61821d9b918ff28101373eb3e27a55809a1b4fd25fad93a3895811c01d087796fb714628b0bbe6998867033d2f3f11f144655a602008097e47b222bf1e1b7f5601ca2b07a0cc4cd4f6640b705", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 185.632081][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.652723][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.660337][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.722806][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.731719][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.750950][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 17:04:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405c576cd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602437bb2e9b66ff1246c93e5c0289644e334432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf89b394807474b3c3156630d3c563ad9c4372975e40a7a1b5005084f485b5188167968e78cc40d2ce2a61821d9b918ff28101373eb3e27a55809a1b4fd25fad93a3895811c01d087796fb714628b0bbe6998867033d2f3f11f144655a602008097e47b222bf1e1b7f5601ca2b07a0cc4cd4f6640b705a4d48242093f79204b44be9dcb63", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 185.769463][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.778813][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.800263][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.810243][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.837059][ T7107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.865584][ T7006] device veth1_vlan entered promiscuous mode [ 185.912363][ T7339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.922332][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.934908][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.951003][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.970418][ T6958] device veth0_macvtap entered promiscuous mode [ 186.019946][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.031894][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.046406][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.060617][ T6958] device veth1_macvtap entered promiscuous mode [ 186.099968][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.115686][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.130216][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.162720][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.171152][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.183915][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.191943][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.209744][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.219641][ T7107] device veth0_vlan entered promiscuous mode [ 186.241082][ T7006] device veth0_macvtap entered promiscuous mode [ 186.261149][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.279019][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.290974][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.302687][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.316012][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.332121][ T7006] device veth1_macvtap entered promiscuous mode [ 186.342148][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.352179][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.361746][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.371893][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.394202][ T7107] device veth1_vlan entered promiscuous mode [ 186.404622][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.417714][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.430191][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.445551][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.457856][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.471176][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.481640][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.492694][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.545207][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.571143][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.582084][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.594211][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.605389][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.618102][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.785640][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.803998][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.824273][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.840099][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.856480][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.868100][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.886848][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.901915][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.916261][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 17:04:34 executing program 1: [ 186.937755][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.966840][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.996199][ T7107] device veth0_macvtap entered promiscuous mode [ 187.026646][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 17:04:34 executing program 1: [ 187.038980][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.053856][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.064380][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.074265][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.084866][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.103973][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.128545][ T7107] device veth1_macvtap entered promiscuous mode [ 187.156153][ T7249] device veth0_vlan entered promiscuous mode [ 187.195084][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 17:04:34 executing program 1: [ 187.222401][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.246048][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 17:04:34 executing program 1: [ 187.279837][ T7339] device veth0_vlan entered promiscuous mode [ 187.352489][ T7249] device veth1_vlan entered promiscuous mode [ 187.380538][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.392159][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 17:04:34 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000380)='./file0\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x218, 0x0, 0x0}, 0x40) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) [ 187.401428][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.420357][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.434904][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.449558][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.482968][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.503671][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.508659][ T8141] NFS: mount program didn't pass remote address [ 187.537695][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.565860][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.589040][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.607337][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.668820][ T7339] device veth1_vlan entered promiscuous mode [ 187.744411][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.762177][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.772675][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.784848][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.797076][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.808580][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.826951][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.848462][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.873988][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:04:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xa7}, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) fadvise64(r1, 0x4000, 0x0, 0x4) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000100)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0xbab0f075fd7d6854, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000001c0)={0x1, 0x0, 0x1a, 0x0, 0xde, &(0x7f00000007c0)}) socket(0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) [ 187.927080][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.946863][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.985115][ T7249] device veth0_macvtap entered promiscuous mode [ 188.039759][ T8154] FAT-fs (loop2): bogus number of FAT sectors [ 188.070116][ T7249] device veth1_macvtap entered promiscuous mode [ 188.080193][ T8154] FAT-fs (loop2): Can't find a valid FAT filesystem [ 188.204889][ C1] hrtimer: interrupt took 35631 ns [ 188.226638][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.271979][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:04:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="6653070000053c27bc3376003639405c576cd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602437bb2e9b66ff1246c93e5c0289644e334432479aed75d492b41dbcee00a06dc9d8eb9adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf89b394807474b3c3156630d3c563ad9c4372975e40a7a1b5005084f485b5188167968e78cc40d2ce2a61821d9b918ff28101373eb3e27a55809a1b4fd25fad93a3895811c01d087796fb714628b0bbe6998867033d2f3f11f144655a602008097e47b222bf1e1b7f5601ca2b07a0cc4cd4f6640b705a4d4824243b31496ee097fc1e22888093f79204b44be9dcb63acab680eb9c18d5b7b593208248b349af26a96ae5ede68c2ddc7c6e97fe0ac0a9a9f5c3406d69a6863ed4cb434cbd6a80c3808100e0b9db89ba7aa8b5ba117d699318fa89742d26f2dc44ed18503", 0x146}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xee01}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 188.346182][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.424366][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.452314][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.487526][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.528000][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.570967][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.620938][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.675834][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.695139][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.735836][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.766399][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.799554][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.842611][ T8160] FAT-fs (loop2): bogus number of FAT sectors [ 188.857868][ T8160] FAT-fs (loop2): Can't find a valid FAT filesystem [ 188.860953][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.894614][ T7339] device veth0_macvtap entered promiscuous mode [ 188.909398][ T7339] device veth1_macvtap entered promiscuous mode [ 188.957392][ T8175] blk_update_request: I/O error, dev loop2, sector 32 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 188.969363][ T8175] Buffer I/O error on dev loop2, logical block 32, lost async page write [ 188.978924][ T8175] blk_update_request: I/O error, dev loop2, sector 33 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 188.990707][ T8175] Buffer I/O error on dev loop2, logical block 33, lost async page write [ 188.999695][ T8175] blk_update_request: I/O error, dev loop2, sector 34 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 189.011308][ T8175] Buffer I/O error on dev loop2, logical block 34, lost async page write [ 189.019904][ T8175] blk_update_request: I/O error, dev loop2, sector 35 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 189.031390][ T8175] Buffer I/O error on dev loop2, logical block 35, lost async page write [ 189.040252][ T8175] blk_update_request: I/O error, dev loop2, sector 36 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 189.049804][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.052000][ T8175] Buffer I/O error on dev loop2, logical block 36, lost async page write [ 189.071661][ T8175] blk_update_request: I/O error, dev loop2, sector 37 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 189.083138][ T8175] Buffer I/O error on dev loop2, logical block 37, lost async page write [ 189.092003][ T8175] blk_update_request: I/O error, dev loop2, sector 38 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 189.100183][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.103738][ T8175] Buffer I/O error on dev loop2, logical block 38, lost async page write [ 189.103824][ T8175] blk_update_request: I/O error, dev loop2, sector 39 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 189.103836][ T8175] Buffer I/O error on dev loop2, logical block 39, lost async page write [ 189.200590][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.212774][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.229618][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.276803][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.296350][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.308599][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.325062][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.347274][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.361469][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.380378][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.434961][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.447526][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.460402][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.472290][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.482951][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.494324][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.504905][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.518949][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.541434][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.573412][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.600683][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.624193][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.645833][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.713714][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.727414][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.739079][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.750606][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.760830][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.771753][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.781752][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.792379][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.803604][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.814868][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.827876][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.876897][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.886915][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:04:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x0, 0x0, 0x4) [ 190.052629][ T8188] FAT-fs (loop4): bogus number of FAT sectors [ 190.058855][ T8188] FAT-fs (loop4): Can't find a valid FAT filesystem 17:04:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) write(r0, 0x0, 0x0) 17:04:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x173, {[@main]}}, 0x0}, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:04:37 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) semop(0x0, &(0x7f0000000380)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 17:04:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141429e0", 0x0, 0x10, 0x0, 0x3f000000}, 0x28) 17:04:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) write(r0, 0x0, 0x0) 17:04:37 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) close(r1) 17:04:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) write(r0, 0x0, 0x0) [ 190.653168][ T2489] usb 2-1: new high-speed USB device number 2 using dummy_hcd 17:04:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write(r0, 0x0, 0x0) 17:04:38 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket(0x0, 0x803, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) epoll_create1(0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x420, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 190.863853][ T8193] FAT-fs (loop4): bogus number of FAT sectors [ 190.880644][ T8193] FAT-fs (loop4): Can't find a valid FAT filesystem 17:04:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405c576cd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602437bb2e9b66ff1246c93e5c0289644e334432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf89b394807474b3c3156630d3c563ad9c4372975e40a7a1b5005084f485b5188167968e78cc40d2ce2a61821d9b918ff28101373eb3e27a55809a1b4fd25fad93a3895811c01d087796fb714628b0bbe6998867033d2f3f11f144655a602008097e47b222bf1e1b7f5601ca2b07a0cc4cd4f6640b705a4d48242093f79204b44be", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 191.023061][ T2489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.059270][ T2489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.128064][ T2489] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.158662][ T2489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.190744][ T2489] usb 2-1: config 0 descriptor?? 17:04:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f5e0cfa9450", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 17:04:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write(r0, 0x0, 0x0) 17:04:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) fadvise64(r1, 0x4000, 0x0, 0x4) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000100)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0xbab0f075fd7d6854, 0x0) socket(0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) [ 191.553806][ T8242] FAT-fs (loop2): bogus number of FAT sectors [ 191.567724][ T8242] FAT-fs (loop2): Can't find a valid FAT filesystem [ 191.707634][ T2489] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 191.815158][ T2489] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 192.005296][ T2489] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 192.074776][ T2489] usb 2-1: USB disconnect, device number 2 [ 192.190657][ T2489] ================================================================== [ 192.199411][ T2489] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 192.207180][ T2489] Read of size 8 at addr ffff888096609158 by task kworker/0:2/2489 [ 192.215953][ T2489] [ 192.218319][ T2489] CPU: 0 PID: 2489 Comm: kworker/0:2 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 192.228050][ T2489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.238182][ T2489] Workqueue: usb_hub_wq hub_event [ 192.244210][ T2489] Call Trace: [ 192.247875][ T2489] dump_stack+0x18f/0x20d [ 192.252448][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 192.257331][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 192.262310][ T2489] print_address_description.constprop.0.cold+0xd3/0x413 [ 192.269361][ T2489] ? cdev_device_del+0x69/0x80 [ 192.274160][ T2489] ? evdev_disconnect+0x3d/0xb0 [ 192.279050][ T2489] ? __input_unregister_device+0x1b0/0x430 [ 192.285340][ T2489] ? input_unregister_device+0xb4/0xf0 [ 192.290828][ T2489] ? hidinput_disconnect+0x15e/0x3d0 [ 192.296414][ T2489] ? vprintk_func+0x97/0x1a6 [ 192.301149][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 192.306525][ T2489] kasan_report.cold+0x1f/0x37 [ 192.312005][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 192.317521][ T2489] __mutex_lock+0x1033/0x13c0 [ 192.322523][ T2489] ? evdev_cleanup+0x21/0x190 [ 192.327211][ T2489] ? print_usage_bug+0x240/0x240 [ 192.332239][ T2489] ? trace_hardirqs_off+0x50/0x220 [ 192.337706][ T2489] ? mutex_trylock+0x2c0/0x2c0 [ 192.342807][ T2489] ? mark_held_locks+0x9f/0xe0 [ 192.347779][ T2489] ? kfree+0x1eb/0x2b0 [ 192.352610][ T2489] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 192.359033][ T2489] ? kfree_const+0x51/0x60 [ 192.363444][ T2489] ? evdev_cleanup+0x21/0x190 [ 192.368369][ T2489] evdev_cleanup+0x21/0x190 [ 192.372967][ T2489] evdev_disconnect+0x45/0xb0 [ 192.378616][ T2489] __input_unregister_device+0x1b0/0x430 [ 192.385379][ T2489] input_unregister_device+0xb4/0xf0 [ 192.390871][ T2489] hidinput_disconnect+0x15e/0x3d0 [ 192.396592][ T2489] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 192.402316][ T2489] hid_disconnect+0x13f/0x1a0 [ 192.407473][ T2489] hid_device_remove+0x186/0x240 [ 192.412486][ T2489] ? hid_compare_device_paths+0xc0/0xc0 [ 192.418119][ T2489] device_release_driver_internal+0x231/0x500 [ 192.424633][ T2489] bus_remove_device+0x2dc/0x4a0 [ 192.429865][ T2489] device_del+0x481/0xd30 [ 192.434561][ T2489] ? device_link_add_missing_supplier_links+0x370/0x370 [ 192.442545][ T2489] ? mark_held_locks+0x9f/0xe0 [ 192.447482][ T2489] ? _raw_spin_unlock_irq+0x1f/0x80 [ 192.452694][ T2489] hid_destroy_device+0xe1/0x150 [ 192.457624][ T2489] usbhid_disconnect+0x9f/0xe0 [ 192.462590][ T2489] usb_unbind_interface+0x1bd/0x8a0 [ 192.468772][ T2489] ? __pm_runtime_idle+0xd1/0x320 [ 192.474393][ T2489] ? usb_autoresume_device+0x60/0x60 [ 192.479861][ T2489] device_release_driver_internal+0x432/0x500 [ 192.486301][ T2489] bus_remove_device+0x2dc/0x4a0 [ 192.491952][ T2489] device_del+0x481/0xd30 [ 192.496864][ T2489] ? device_link_add_missing_supplier_links+0x370/0x370 [ 192.503957][ T2489] ? usb_remove_ep_devs+0x3e/0x80 [ 192.509101][ T2489] ? remove_intf_ep_devs+0x13f/0x1d0 [ 192.514380][ T2489] usb_disable_device+0x211/0x690 [ 192.519416][ T2489] usb_disconnect+0x284/0x8d0 [ 192.524274][ T2489] hub_event+0x17ca/0x38f0 [ 192.528774][ T2489] ? hub_port_debounce+0x260/0x260 [ 192.533875][ T2489] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 192.540065][ T2489] ? debug_smp_processor_id+0x2f/0x185 [ 192.545521][ T2489] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 192.551361][ T2489] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 192.558036][ T2489] process_one_work+0x965/0x16a0 [ 192.563005][ T2489] ? lock_release+0x800/0x800 [ 192.567797][ T2489] ? pwq_dec_nr_in_flight+0x310/0x310 [ 192.573448][ T2489] ? rwlock_bug.part.0+0x90/0x90 [ 192.578951][ T2489] worker_thread+0x7ab/0xe20 [ 192.583546][ T2489] ? process_one_work+0x16a0/0x16a0 [ 192.588889][ T2489] kthread+0x3b5/0x4a0 [ 192.592961][ T2489] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 192.598786][ T2489] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 192.604974][ T2489] ret_from_fork+0x24/0x30 [ 192.609644][ T2489] [ 192.611966][ T2489] Allocated by task 2489: [ 192.616657][ T2489] save_stack+0x1b/0x40 [ 192.621069][ T2489] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 192.626836][ T2489] kmem_cache_alloc_trace+0x153/0x7d0 [ 192.632653][ T2489] evdev_connect+0x80/0x4d0 [ 192.637418][ T2489] input_attach_handler+0x194/0x200 [ 192.642718][ T2489] input_register_device.cold+0xf5/0x246 [ 192.648475][ T2489] hidinput_connect+0x4f8f/0xdb30 [ 192.653659][ T2489] hid_connect+0x96b/0xbc0 [ 192.658146][ T2489] hid_hw_start+0xa2/0x130 [ 192.663933][ T2489] hid_device_probe+0x397/0x3f0 [ 192.668942][ T2489] really_probe+0x281/0x6d0 [ 192.673605][ T2489] driver_probe_device+0xfe/0x1d0 [ 192.678907][ T2489] __device_attach_driver+0x1c2/0x220 [ 192.684275][ T2489] bus_for_each_drv+0x162/0x1e0 [ 192.689300][ T2489] __device_attach+0x21a/0x360 [ 192.694133][ T2489] bus_probe_device+0x1e4/0x290 [ 192.698969][ T2489] device_add+0xaf1/0x1900 [ 192.703386][ T2489] hid_add_device+0x33c/0x9a0 [ 192.708271][ T2489] usbhid_probe+0xac8/0xff0 [ 192.713064][ T2489] usb_probe_interface+0x305/0x7a0 [ 192.718522][ T2489] really_probe+0x281/0x6d0 [ 192.723124][ T2489] driver_probe_device+0xfe/0x1d0 [ 192.728310][ T2489] __device_attach_driver+0x1c2/0x220 [ 192.733839][ T2489] bus_for_each_drv+0x162/0x1e0 [ 192.738676][ T2489] __device_attach+0x21a/0x360 [ 192.743598][ T2489] bus_probe_device+0x1e4/0x290 [ 192.748705][ T2489] device_add+0xaf1/0x1900 [ 192.753478][ T2489] usb_set_configuration+0xec5/0x1740 [ 192.759455][ T2489] usb_generic_driver_probe+0x9d/0xe0 [ 192.765283][ T2489] usb_probe_device+0xc6/0x1f0 [ 192.770203][ T2489] really_probe+0x281/0x6d0 [ 192.774977][ T2489] driver_probe_device+0xfe/0x1d0 [ 192.780269][ T2489] __device_attach_driver+0x1c2/0x220 [ 192.785811][ T2489] bus_for_each_drv+0x162/0x1e0 [ 192.790996][ T2489] __device_attach+0x21a/0x360 [ 192.795741][ T2489] bus_probe_device+0x1e4/0x290 [ 192.800587][ T2489] device_add+0xaf1/0x1900 [ 192.804996][ T2489] usb_new_device.cold+0x753/0x103d [ 192.810192][ T2489] hub_event+0x1eca/0x38f0 [ 192.814604][ T2489] process_one_work+0x965/0x16a0 [ 192.819701][ T2489] worker_thread+0x96/0xe20 [ 192.824465][ T2489] kthread+0x3b5/0x4a0 [ 192.828965][ T2489] ret_from_fork+0x24/0x30 [ 192.833387][ T2489] [ 192.835698][ T2489] Freed by task 2489: [ 192.839685][ T2489] save_stack+0x1b/0x40 [ 192.843909][ T2489] __kasan_slab_free+0xf7/0x140 [ 192.848750][ T2489] kfree+0x109/0x2b0 [ 192.852647][ T2489] device_release+0x71/0x200 [ 192.857267][ T2489] kobject_put+0x1c8/0x2f0 [ 192.861713][ T2489] cdev_device_del+0x69/0x80 [ 192.866389][ T2489] evdev_disconnect+0x3d/0xb0 [ 192.871188][ T2489] __input_unregister_device+0x1b0/0x430 [ 192.876934][ T2489] input_unregister_device+0xb4/0xf0 [ 192.882215][ T2489] hidinput_disconnect+0x15e/0x3d0 [ 192.887328][ T2489] hid_disconnect+0x13f/0x1a0 [ 192.891983][ T2489] hid_device_remove+0x186/0x240 [ 192.896924][ T2489] device_release_driver_internal+0x231/0x500 [ 192.903058][ T2489] bus_remove_device+0x2dc/0x4a0 [ 192.908761][ T2489] device_del+0x481/0xd30 [ 192.913072][ T2489] hid_destroy_device+0xe1/0x150 [ 192.918015][ T2489] usbhid_disconnect+0x9f/0xe0 [ 192.922776][ T2489] usb_unbind_interface+0x1bd/0x8a0 [ 192.928082][ T2489] device_release_driver_internal+0x432/0x500 [ 192.934129][ T2489] bus_remove_device+0x2dc/0x4a0 [ 192.939059][ T2489] device_del+0x481/0xd30 [ 192.943381][ T2489] usb_disable_device+0x211/0x690 [ 192.948394][ T2489] usb_disconnect+0x284/0x8d0 [ 192.953054][ T2489] hub_event+0x17ca/0x38f0 [ 192.957456][ T2489] process_one_work+0x965/0x16a0 [ 192.962378][ T2489] worker_thread+0x7ab/0xe20 [ 192.966948][ T2489] kthread+0x3b5/0x4a0 [ 192.971001][ T2489] ret_from_fork+0x24/0x30 [ 192.975391][ T2489] [ 192.977708][ T2489] The buggy address belongs to the object at ffff888096609000 [ 192.977708][ T2489] which belongs to the cache kmalloc-2k of size 2048 [ 192.992103][ T2489] The buggy address is located 344 bytes inside of [ 192.992103][ T2489] 2048-byte region [ffff888096609000, ffff888096609800) [ 193.005459][ T2489] The buggy address belongs to the page: [ 193.011092][ T2489] page:ffffea0002598240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 193.020189][ T2489] flags: 0xfffe0000000200(slab) [ 193.025298][ T2489] raw: 00fffe0000000200 ffffea00025122c8 ffffea0002639c08 ffff8880aa000e00 [ 193.033953][ T2489] raw: 0000000000000000 ffff888096609000 0000000100000001 0000000000000000 [ 193.042524][ T2489] page dumped because: kasan: bad access detected [ 193.048923][ T2489] [ 193.051228][ T2489] Memory state around the buggy address: [ 193.056863][ T2489] ffff888096609000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.064922][ T2489] ffff888096609080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.072965][ T2489] >ffff888096609100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.081003][ T2489] ^ [ 193.087939][ T2489] ffff888096609180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.096215][ T2489] ffff888096609200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.104254][ T2489] ================================================================== [ 193.112398][ T2489] Disabling lock debugging due to kernel taint [ 193.272958][ T2489] Kernel panic - not syncing: panic_on_warn set ... [ 193.279593][ T2489] CPU: 0 PID: 2489 Comm: kworker/0:2 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 193.290619][ T2489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.300718][ T2489] Workqueue: usb_hub_wq hub_event [ 193.305772][ T2489] Call Trace: [ 193.309080][ T2489] dump_stack+0x18f/0x20d [ 193.313455][ T2489] ? __mutex_lock+0xf50/0x13c0 [ 193.318413][ T2489] panic+0x2e3/0x75c [ 193.322353][ T2489] ? __warn_printk+0xf3/0xf3 [ 193.326994][ T2489] ? preempt_schedule_common+0x5e/0xc0 [ 193.332466][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 193.337504][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 193.342382][ T2489] ? preempt_schedule_thunk+0x16/0x18 [ 193.347902][ T2489] ? trace_hardirqs_on+0x55/0x230 [ 193.352942][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 193.357804][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 193.362822][ T2489] end_report+0x4d/0x53 [ 193.366984][ T2489] kasan_report.cold+0xd/0x37 [ 193.371700][ T2489] ? __mutex_lock+0x1033/0x13c0 [ 193.376645][ T2489] __mutex_lock+0x1033/0x13c0 [ 193.381332][ T2489] ? evdev_cleanup+0x21/0x190 [ 193.386024][ T2489] ? print_usage_bug+0x240/0x240 [ 193.390966][ T2489] ? trace_hardirqs_off+0x50/0x220 [ 193.396217][ T2489] ? mutex_trylock+0x2c0/0x2c0 [ 193.400996][ T2489] ? mark_held_locks+0x9f/0xe0 [ 193.405768][ T2489] ? kfree+0x1eb/0x2b0 [ 193.409844][ T2489] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 193.415833][ T2489] ? kfree_const+0x51/0x60 [ 193.420365][ T2489] ? evdev_cleanup+0x21/0x190 [ 193.425155][ T2489] evdev_cleanup+0x21/0x190 [ 193.430190][ T2489] evdev_disconnect+0x45/0xb0 [ 193.434876][ T2489] __input_unregister_device+0x1b0/0x430 [ 193.440521][ T2489] input_unregister_device+0xb4/0xf0 [ 193.445809][ T2489] hidinput_disconnect+0x15e/0x3d0 [ 193.450928][ T2489] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 193.450949][ T8256] FAT-fs (loop2): bogus number of FAT sectors [ 193.456484][ T2489] hid_disconnect+0x13f/0x1a0 [ 193.456503][ T2489] hid_device_remove+0x186/0x240 [ 193.456516][ T2489] ? hid_compare_device_paths+0xc0/0xc0 [ 193.456529][ T2489] device_release_driver_internal+0x231/0x500 [ 193.456540][ T2489] bus_remove_device+0x2dc/0x4a0 [ 193.456559][ T2489] device_del+0x481/0xd30 [ 193.462734][ T8256] FAT-fs (loop2): Can't find a valid FAT filesystem [ 193.467277][ T2489] ? device_link_add_missing_supplier_links+0x370/0x370 [ 193.467291][ T2489] ? mark_held_locks+0x9f/0xe0 [ 193.467313][ T2489] ? _raw_spin_unlock_irq+0x1f/0x80 [ 193.517120][ T2489] hid_destroy_device+0xe1/0x150 [ 193.522084][ T2489] usbhid_disconnect+0x9f/0xe0 [ 193.526871][ T2489] usb_unbind_interface+0x1bd/0x8a0 [ 193.532082][ T2489] ? __pm_runtime_idle+0xd1/0x320 [ 193.537146][ T2489] ? usb_autoresume_device+0x60/0x60 [ 193.542457][ T2489] device_release_driver_internal+0x432/0x500 [ 193.548542][ T2489] bus_remove_device+0x2dc/0x4a0 [ 193.553511][ T2489] device_del+0x481/0xd30 [ 193.557864][ T2489] ? device_link_add_missing_supplier_links+0x370/0x370 [ 193.565156][ T2489] ? usb_remove_ep_devs+0x3e/0x80 17:04:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x173, {[@main]}}, 0x0}, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:04:41 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:04:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write(r0, 0x0, 0x0) 17:04:41 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket(0x0, 0x803, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) epoll_create1(0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x420, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 193.570200][ T2489] ? remove_intf_ep_devs+0x13f/0x1d0 [ 193.575521][ T2489] usb_disable_device+0x211/0x690 [ 193.580568][ T2489] usb_disconnect+0x284/0x8d0 [ 193.585266][ T2489] hub_event+0x17ca/0x38f0 [ 193.589751][ T2489] ? hub_port_debounce+0x260/0x260 [ 193.594876][ T2489] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 193.600806][ T2489] ? debug_smp_processor_id+0x2f/0x185 [ 193.606299][ T2489] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 193.611895][ T2489] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 193.617983][ T2489] process_one_work+0x965/0x16a0 [ 193.622945][ T2489] ? lock_release+0x800/0x800 [ 193.627723][ T2489] ? pwq_dec_nr_in_flight+0x310/0x310 [ 193.633117][ T2489] ? rwlock_bug.part.0+0x90/0x90 [ 193.638110][ T2489] worker_thread+0x7ab/0xe20 [ 193.642724][ T2489] ? process_one_work+0x16a0/0x16a0 [ 193.647939][ T2489] kthread+0x3b5/0x4a0 [ 193.652020][ T2489] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 193.657761][ T2489] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 193.663587][ T2489] ret_from_fork+0x24/0x30 [ 193.669380][ T2489] Kernel Offset: disabled [ 193.673708][ T2489] Rebooting in 86400 seconds..