[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. 2020/08/07 15:08:36 fuzzer started 2020/08/07 15:08:36 dialing manager at 10.128.0.26:43293 2020/08/07 15:08:36 syscalls: 3274 2020/08/07 15:08:36 code coverage: enabled 2020/08/07 15:08:36 comparison tracing: enabled 2020/08/07 15:08:36 extra coverage: enabled 2020/08/07 15:08:36 setuid sandbox: enabled 2020/08/07 15:08:36 namespace sandbox: enabled 2020/08/07 15:08:36 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/07 15:08:36 fault injection: enabled 2020/08/07 15:08:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/07 15:08:36 net packet injection: enabled 2020/08/07 15:08:36 net device setup: enabled 2020/08/07 15:08:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/07 15:08:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/07 15:08:36 USB emulation: enabled 2020/08/07 15:08:36 hci packet injection: enabled 15:10:02 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f00000000c0), 0x8) syzkaller login: [ 146.616873][ T6866] IPVS: ftp: loaded support on port[0] = 21 [ 146.751052][ T6866] chnl_net:caif_netlink_parms(): no params data found 15:10:02 executing program 1: r0 = socket(0x2, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000100), &(0x7f00000001c0)=0x4) [ 146.849350][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.857668][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.866419][ T6866] device bridge_slave_0 entered promiscuous mode [ 146.878944][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.886082][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.895282][ T6866] device bridge_slave_1 entered promiscuous mode [ 146.930442][ T6866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.943218][ T6866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.974202][ T6866] team0: Port device team_slave_0 added [ 146.982748][ T6866] team0: Port device team_slave_1 added [ 147.004946][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.013128][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.039514][ T6866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.053457][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.060915][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.088859][ T6866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.108322][ T7020] IPVS: ftp: loaded support on port[0] = 21 15:10:03 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000040)=ANY=[], 0x3ef) [ 147.160178][ T6866] device hsr_slave_0 entered promiscuous mode [ 147.229824][ T6866] device hsr_slave_1 entered promiscuous mode [ 147.317865][ T7032] IPVS: ftp: loaded support on port[0] = 21 15:10:03 executing program 3: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)=0xa0) [ 147.742733][ T7190] IPVS: ftp: loaded support on port[0] = 21 [ 147.774224][ T7020] chnl_net:caif_netlink_parms(): no params data found [ 147.789950][ T7032] chnl_net:caif_netlink_parms(): no params data found 15:10:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f40)="04", 0x1}], 0x1}, 0x0) [ 147.900889][ T6866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.000123][ T6866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.061379][ T6866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.135633][ T6866] netdevsim netdevsim0 netdevsim3: renamed from eth3 15:10:04 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) [ 148.264381][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.286520][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.294185][ T7020] device bridge_slave_0 entered promiscuous mode [ 148.310067][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.313980][ T7315] IPVS: ftp: loaded support on port[0] = 21 [ 148.319603][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.332672][ T7020] device bridge_slave_1 entered promiscuous mode [ 148.354055][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.375730][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.384719][ T7032] device bridge_slave_0 entered promiscuous mode [ 148.394900][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.402943][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.411085][ T7032] device bridge_slave_1 entered promiscuous mode [ 148.447934][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.463273][ T7361] IPVS: ftp: loaded support on port[0] = 21 [ 148.496598][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.507995][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.522018][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.619900][ T7020] team0: Port device team_slave_0 added [ 148.629634][ T7032] team0: Port device team_slave_0 added [ 148.673949][ T7020] team0: Port device team_slave_1 added [ 148.709402][ T7032] team0: Port device team_slave_1 added [ 148.747009][ T7190] chnl_net:caif_netlink_parms(): no params data found [ 148.767787][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.774748][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.801679][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.815629][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.823478][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.850842][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.918590][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.925565][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.952172][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.013803][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.022457][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.051122][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.119165][ T7020] device hsr_slave_0 entered promiscuous mode [ 149.166930][ T7020] device hsr_slave_1 entered promiscuous mode [ 149.206515][ T7020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.214491][ T7020] Cannot create hsr debugfs directory [ 149.264731][ T7315] chnl_net:caif_netlink_parms(): no params data found [ 149.361496][ T7032] device hsr_slave_0 entered promiscuous mode [ 149.426802][ T7032] device hsr_slave_1 entered promiscuous mode [ 149.476429][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.483991][ T7032] Cannot create hsr debugfs directory [ 149.505217][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.515054][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.523709][ T7190] device bridge_slave_0 entered promiscuous mode [ 149.532199][ T7361] chnl_net:caif_netlink_parms(): no params data found [ 149.581847][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.591060][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.600028][ T7190] device bridge_slave_1 entered promiscuous mode [ 149.674358][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.692661][ T7190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.744887][ T7190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.767533][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.774598][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.783093][ T7315] device bridge_slave_0 entered promiscuous mode [ 149.792670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.805102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.819403][ T6866] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.843749][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.851147][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.860456][ T7315] device bridge_slave_1 entered promiscuous mode [ 149.906982][ T7190] team0: Port device team_slave_0 added [ 149.937470][ T7190] team0: Port device team_slave_1 added [ 149.964839][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.974479][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.001681][ T7190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.013987][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.022813][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.031026][ T7361] device bridge_slave_0 entered promiscuous mode [ 150.049209][ T7315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.063274][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.072690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.082125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.089342][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.102223][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.102241][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.102255][ T7190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.146982][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.147022][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.147976][ T7361] device bridge_slave_1 entered promiscuous mode [ 150.195626][ T7315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.227193][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.244304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.253256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.262903][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.272018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.279146][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.289305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.339368][ T7190] device hsr_slave_0 entered promiscuous mode [ 150.356728][ T7190] device hsr_slave_1 entered promiscuous mode [ 150.406539][ T7190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.414134][ T7190] Cannot create hsr debugfs directory [ 150.422509][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.460559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.474267][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.485175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.494764][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.503808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.524865][ T7315] team0: Port device team_slave_0 added [ 150.552463][ T7032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.610493][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.618502][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.627669][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.636113][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.644890][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.655683][ T7361] team0: Port device team_slave_0 added [ 150.663466][ T7315] team0: Port device team_slave_1 added [ 150.678382][ T7032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.729552][ T7032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.801305][ T7361] team0: Port device team_slave_1 added [ 150.815621][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.849700][ T7032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.924648][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.934173][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.962285][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.001170][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.011068][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.038254][ T7315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.057844][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.064779][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.091609][ T7315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.112007][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.119116][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.145316][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.220463][ T7315] device hsr_slave_0 entered promiscuous mode [ 151.287106][ T7315] device hsr_slave_1 entered promiscuous mode [ 151.326356][ T7315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.333913][ T7315] Cannot create hsr debugfs directory [ 151.352541][ T7020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.415588][ T7020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.448790][ T7020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.530005][ T7361] device hsr_slave_0 entered promiscuous mode [ 151.586936][ T7361] device hsr_slave_1 entered promiscuous mode [ 151.646392][ T7361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.654027][ T7361] Cannot create hsr debugfs directory [ 151.678173][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.685568][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.702339][ T6866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.711773][ T7020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.899294][ T7190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 151.982067][ T7190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.031446][ T7190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.080879][ T7190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.196313][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.206024][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.319151][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.328409][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.340796][ T6866] device veth0_vlan entered promiscuous mode [ 152.373779][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.384401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.392655][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.430079][ T6866] device veth1_vlan entered promiscuous mode [ 152.437619][ T7361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.470425][ T7361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.532344][ T7361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.613700][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.621232][ T7361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.680959][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.699744][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.709459][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.719174][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.727502][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.735081][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.743283][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.766682][ T7315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.803224][ T7020] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.811542][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.820758][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.829594][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.836699][ T7816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.849480][ T7190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.866435][ T7315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.898466][ T7315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.952212][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.960159][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.970375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.979338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.986443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.994418][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.003573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.024499][ T7190] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.048064][ T6866] device veth0_macvtap entered promiscuous mode [ 153.056083][ T7315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.119079][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.130850][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.140128][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.148555][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.173602][ T6866] device veth1_macvtap entered promiscuous mode [ 153.191060][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.198998][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.208578][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.217957][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.227364][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.234417][ T7531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.242435][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.251523][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.260171][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.269133][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.277633][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.284680][ T7531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.292375][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.301052][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.361558][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.371768][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.381357][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.389907][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.398624][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.408047][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.415092][ T7531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.423238][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.432667][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.441158][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.448271][ T7531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.455833][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.464932][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.473323][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.483623][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.492529][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.501274][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.510029][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.518772][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.527602][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.535546][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.552248][ T7032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.568966][ T7032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.589615][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.601392][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.610940][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.623356][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.633379][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.645055][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.689873][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.699205][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.708771][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.717814][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.725170][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.732817][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.741393][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.771928][ T6866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.784548][ T6866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.793993][ T6866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.803264][ T6866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.826617][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.835370][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.844601][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.853319][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.865487][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.879141][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.982984][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.991389][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.000344][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.009047][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.018122][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.036402][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.043853][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.059915][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.147968][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.160192][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.168835][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.176606][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.192896][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.210228][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.294594][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.303147][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.320775][ T7315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.330598][ T7361] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.356188][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.367056][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.375436][ T2579] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.382541][ T2579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.391391][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.400400][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.409118][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.416226][ T2579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.424729][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.441363][ T7032] device veth0_vlan entered promiscuous mode [ 154.463055][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.471593][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.481000][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.493511][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.505006][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.514138][ T2579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.546801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.555438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.564949][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.573855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.582801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.591648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.600453][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.609147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.618333][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.632607][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.658039][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.665910][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.677576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.685984][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.694978][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.703019][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.711604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.720211][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.729395][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.737723][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.747154][ T7032] device veth1_vlan entered promiscuous mode [ 154.755126][ T7020] device veth0_vlan entered promiscuous mode [ 154.768640][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.781434][ T7190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.796319][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.804364][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.814175][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.823222][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.830322][ T7816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.838011][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.846681][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.855007][ T7816] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.862096][ T7816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.871620][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.911740][ T7020] device veth1_vlan entered promiscuous mode [ 154.919361][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.931007][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.939539][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.948838][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.010595][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.018994][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.028283][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.039946][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.048861][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.057715][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.066647][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.074937][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.083424][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.092165][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.100317][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.108685][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.134955][ T7032] device veth0_macvtap entered promiscuous mode [ 155.165408][ T7190] device veth0_vlan entered promiscuous mode [ 155.178813][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.189727][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.200457][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.210239][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.219188][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.230173][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.238706][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.246196][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.254258][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.266018][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.285597][ T7020] device veth0_macvtap entered promiscuous mode [ 155.304194][ T7190] device veth1_vlan entered promiscuous mode [ 155.313668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.322819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.332820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.342096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.357892][ T7032] device veth1_macvtap entered promiscuous mode [ 155.366933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.385297][ T7020] device veth1_macvtap entered promiscuous mode [ 155.434826][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.454681][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.472726][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.603484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.617008][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.628818][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.656648][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.677756][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.708356][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 15:10:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 155.756149][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.788578][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.836236][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.876689][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.893298][ T7190] device veth0_macvtap entered promiscuous mode [ 155.907338][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.918947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.928613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.937445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.946316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.954855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.968044][ T7032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.978182][ T7032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.988112][ T7032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.997186][ T7032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.017688][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.033476][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.045074][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.056523][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.069862][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.081821][ T7190] device veth1_macvtap entered promiscuous mode [ 156.096534][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.104545][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.113221][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.123073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:10:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 156.202591][ T7020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.212371][ T7020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.235652][ T7020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.254019][ T7020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.298640][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.317192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.328399][ T7315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.400141][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.416459][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.427483][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.438321][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 15:10:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 156.448929][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.461391][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.473836][ T7190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.639925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.648569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.658588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.667497][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.679535][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.691831][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.701839][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.713093][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.723615][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.734114][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.745388][ T7190] batman_adv: batadv0: Interface activated: batadv_slave_1 15:10:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 156.806148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.814646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.837056][ T7190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.845761][ T7190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.878399][ T7190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.890880][ T7190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.955337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.965188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.990704][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 15:10:13 executing program 0: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 157.001269][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.010927][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.020150][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 15:10:13 executing program 0: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 157.073774][ T7361] device veth0_vlan entered promiscuous mode 15:10:13 executing program 0: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 157.202580][ T7361] device veth1_vlan entered promiscuous mode [ 157.230523][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.246729][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.255114][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.269477][ T7315] device veth0_vlan entered promiscuous mode [ 157.307572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.322028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.337800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.354219][ T7315] device veth1_vlan entered promiscuous mode [ 157.386155][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.394408][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.405664][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.428502][ T7816] Bluetooth: hci0: command 0x0409 tx timeout [ 157.431900][ T7361] device veth0_macvtap entered promiscuous mode [ 157.457985][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.467037][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.475113][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.485719][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.497248][ T7361] device veth1_macvtap entered promiscuous mode [ 157.512923][ T7315] device veth0_macvtap entered promiscuous mode [ 157.524719][ T7315] device veth1_macvtap entered promiscuous mode [ 157.552157][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.563296][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.574183][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.584674][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.595181][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.615902][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.626568][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.640684][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.653141][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.676572][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.698728][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.722254][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.791919][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.801951][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.812520][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.822938][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.847038][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.864883][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 157.899910][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.957025][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.971817][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.981315][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 15:10:14 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) r3 = open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:14 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 158.014322][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.023737][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.042302][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.107122][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.115851][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.133958][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.152621][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.163763][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.167580][ T26] audit: type=1800 audit(1596813014.281:2): pid=8204 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15757 res=0 errno=0 [ 158.176532][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.204056][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.209199][ T26] audit: type=1800 audit(1596813014.321:3): pid=8211 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15757 res=0 errno=0 [ 158.214790][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.267171][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.282731][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.295819][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.323905][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.359834][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.402431][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 15:10:14 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @private1, [], [], 'macvlan0\x00', 'ip6tnl0\x00'}, 0x0, 0x118, 0xf8, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @common=@hl={{0x28, 'hl\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 158.443621][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.460017][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.478506][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.516013][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.557035][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.585288][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.596478][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.608815][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.623746][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.640041][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.676781][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.685522][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.713054][ T7361] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.736277][ T7361] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.744995][ T7361] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.775990][ T7361] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.790454][ T7315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.800341][ T7315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.809236][ T7315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.818004][ T7315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.516874][ T12] Bluetooth: hci0: command 0x041b tx timeout [ 159.666047][ T12] Bluetooth: hci1: command 0x0409 tx timeout [ 159.906907][ T12] Bluetooth: hci2: command 0x0409 tx timeout 15:10:16 executing program 4: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x200000, 0x90, [0x20000040, 0x0, 0x0, 0x20000070, 0x200000a0], 0x0, 0x0, 0x0}, 0x108) 15:10:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:16 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) r3 = open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:16 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000180)) 15:10:16 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) [ 160.386930][ T7531] Bluetooth: hci3: command 0x0409 tx timeout 15:10:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x8, 0x4, 0x4, 0x100000009}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) 15:10:16 executing program 5: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x802, 0x0) write$proc_mixer(r0, &(0x7f0000000400)=ANY=[], 0xbe) 15:10:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x84, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000040, 0x0, 0x0, 0x20000070, 0x200000a0], 0x0, 0x0, 0x0}, 0x8) 15:10:16 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 15:10:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 160.540268][ T26] audit: type=1800 audit(1596813016.661:4): pid=8269 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15769 res=0 errno=0 15:10:16 executing program 4: r0 = syz_io_uring_setup(0x6b52, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x56b0, 0x0, 0x0, 0x0, 0x0) 15:10:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x8, 0x4, 0x4, 0x100000009}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) 15:10:16 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) r3 = open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) [ 160.618211][ T8273] ALSA: mixer_oss: invalid OSS volume '' 15:10:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) 15:10:16 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, 0x0, 0x0) 15:10:16 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) 15:10:16 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x403, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8fffffffe00000000122e25d386dd", 0x0, 0x403, 0xe00, 0x22d}, 0x28) 15:10:17 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) r3 = open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) [ 160.843071][ T8303] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 160.850006][ T26] audit: type=1800 audit(1596813016.971:5): pid=8298 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15781 res=0 errno=0 15:10:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, 0x0, 0x0) [ 161.005601][ T26] audit: type=1800 audit(1596813017.121:6): pid=8314 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15769 res=0 errno=0 15:10:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [0x5], [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}]}) 15:10:17 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:17 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 15:10:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, 0x0, 0x0) 15:10:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) [ 161.204802][ T26] audit: type=1800 audit(1596813017.321:7): pid=8326 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15779 res=0 errno=0 15:10:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) 15:10:17 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:17 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 15:10:17 executing program 0: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:10:17 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0433"], 0x2) 15:10:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) [ 161.594708][ T12] Bluetooth: hci0: command 0x040f tx timeout 15:10:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x28}) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000000)=0x8) 15:10:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xd81, 0x9}) 15:10:17 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 161.715757][ T26] audit: type=1800 audit(1596813017.831:8): pid=8353 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15781 res=0 errno=0 [ 161.746055][ T12] Bluetooth: hci1: command 0x041b tx timeout 15:10:17 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:18 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_max_data_len={{}, {0x8}}}}, 0xf) 15:10:18 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x21011, &(0x7f00000016c0)=ANY=[]) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x820, &(0x7f0000000140)={[{@mode={'mode'}}]}) [ 161.991363][ T26] audit: type=1800 audit(1596813018.111:9): pid=8382 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15790 res=0 errno=0 [ 161.996099][ T12] Bluetooth: hci2: command 0x041b tx timeout [ 162.306786][ T7816] Bluetooth: hci5: command 0x0409 tx timeout [ 162.466350][ T7816] Bluetooth: hci3: command 0x041b tx timeout 15:10:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) 15:10:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) 15:10:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:18 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:18 executing program 4: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x0, &(0x7f0000000100), 0xffffffff}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)='./bus\x00', 0x18}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 15:10:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:18 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x55}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000000ffffffa6000000ffff00009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x55}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:19 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) 15:10:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x55}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:10:19 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x800c4d04, &(0x7f0000000040)) 15:10:19 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002300010000000000000000a90a"], 0x18}], 0x1}, 0x0) 15:10:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1800000023000100000000000000000007"], 0x18}], 0x1}, 0x0) 15:10:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x11, &(0x7f0000000340)={r1}, 0x8) 15:10:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 163.586622][ T26] audit: type=1800 audit(1596813019.711:10): pid=8466 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15794 res=0 errno=0 15:10:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x55}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:19 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) [ 163.667614][ T5] Bluetooth: hci0: command 0x0419 tx timeout 15:10:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "181d49c032497e44", "6c090000000000000099d5cf37f0c67d", "c35f0b20", "0100"}, 0x28) write(r0, &(0x7f0000000240)="fc0000004900071f8a092504090007000aab07a5a2ff00000000e293210001c008000000000000000000ffff0000000000001ec28656aaa79bb94b46fe000000bc000200000300f92fbe780196370100008000000000d64997a4d17402b1ed548d59c40a366c57c6070000000000000002ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab820f06f70cce190a60aa47e98839971592064e763b6f380f5bd92c83170e5bba4a463a1e00566f91cfded815b2ccd2430095ed94e0ad91bd0734babc7c", 0xc6) 15:10:19 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e2201091403"], 0x25) 15:10:19 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 15:10:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 163.827485][ T5] Bluetooth: hci1: command 0x040f tx timeout 15:10:20 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 163.859156][ T26] audit: type=1800 audit(1596813019.981:11): pid=8492 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15762 res=0 errno=0 15:10:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1f) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x10040) 15:10:20 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 15:10:20 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0413"], 0x2) [ 164.105195][ T26] audit: type=1800 audit(1596813020.222:12): pid=8512 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 164.145878][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 164.385957][ T5] Bluetooth: hci5: command 0x041b tx timeout 15:10:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x11, &(0x7f0000000340)={r1}, 0x8) 15:10:20 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e02027dd96a739af5034fb041"], 0x4d) 15:10:20 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 15:10:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:20 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0xd21, 0x0, 0x0, {0x25}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 15:10:20 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x6) r0 = open(&(0x7f0000000280)='./bus\x00', 0x127842, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x34) [ 164.545781][ T7816] Bluetooth: hci3: command 0x040f tx timeout [ 164.643010][ T1540] Bluetooth: hci0: Dropping invalid advertising data [ 164.650456][ T1540] ================================================================== [ 164.658732][ T1540] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x38b4/0x3fd0 [ 164.659218][ T26] audit: type=1800 audit(1596813020.772:13): pid=8538 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15791 res=0 errno=0 [ 164.666530][ T1540] Read of size 1 at addr ffff888090f27204 by task kworker/u5:0/1540 [ 164.666549][ T1540] [ 164.666569][ T1540] CPU: 1 PID: 1540 Comm: kworker/u5:0 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 164.666578][ T1540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.666596][ T1540] Workqueue: hci0 hci_rx_work [ 164.720345][ T1540] Call Trace: [ 164.723639][ T1540] dump_stack+0x18f/0x20d [ 164.727979][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 164.733103][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 164.738222][ T1540] print_address_description.constprop.0.cold+0xae/0x497 [ 164.745256][ T1540] ? lockdep_hardirqs_off+0x7e/0xb0 [ 164.750461][ T1540] ? vprintk_func+0x97/0x1a6 [ 164.755067][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 164.760183][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 164.765297][ T1540] kasan_report.cold+0x1f/0x37 [ 164.770071][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 164.775190][ T1540] hci_le_meta_evt+0x38b4/0x3fd0 [ 164.780137][ T1540] ? mark_lock+0xbc/0x1710 [ 164.784574][ T1540] ? mark_lock+0xbc/0x1710 [ 164.789007][ T1540] ? mark_lock+0xbc/0x1710 [ 164.793434][ T1540] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 164.800285][ T1540] ? mark_lock+0xbc/0x1710 [ 164.804708][ T1540] ? __lock_acquire+0x16cb/0x5640 [ 164.809741][ T1540] ? __lock_acquire+0x16cb/0x5640 [ 164.814776][ T1540] hci_event_packet+0x2e25/0x87a8 [ 164.819809][ T1540] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 164.825798][ T1540] ? __lock_acquire+0x16cb/0x5640 [ 164.830833][ T1540] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 164.836388][ T1540] ? lock_acquire+0x1f1/0xad0 [ 164.841072][ T1540] ? skb_dequeue+0x1c/0x180 [ 164.845581][ T1540] ? find_held_lock+0x2d/0x110 [ 164.850351][ T1540] ? mark_lock+0xbc/0x1710 [ 164.854778][ T1540] ? mark_held_locks+0x9f/0xe0 [ 164.859561][ T1540] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 164.865562][ T1540] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 164.871556][ T1540] ? trace_hardirqs_on+0x5f/0x220 [ 164.876588][ T1540] ? lockdep_hardirqs_on+0x76/0xf0 [ 164.881713][ T1540] hci_rx_work+0x22e/0xb50 [ 164.886145][ T1540] process_one_work+0x94c/0x1670 [ 164.891095][ T1540] ? lock_release+0x8e0/0x8e0 [ 164.895776][ T1540] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 164.901157][ T1540] ? rwlock_bug.part.0+0x90/0x90 [ 164.906101][ T1540] ? lockdep_hardirqs_off+0x7e/0xb0 [ 164.911314][ T1540] worker_thread+0x64c/0x1120 [ 164.916012][ T1540] ? process_one_work+0x1670/0x1670 [ 164.921216][ T1540] kthread+0x3b5/0x4a0 [ 164.925292][ T1540] ? __kthread_bind_mask+0xc0/0xc0 [ 164.930409][ T1540] ? __kthread_bind_mask+0xc0/0xc0 [ 164.935538][ T1540] ret_from_fork+0x1f/0x30 [ 164.939966][ T1540] [ 164.942292][ T1540] Allocated by task 8536: [ 164.946626][ T1540] kasan_save_stack+0x1b/0x40 [ 164.951312][ T1540] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 164.956947][ T1540] __alloc_skb+0xae/0x550 [ 164.961276][ T1540] vhci_write+0xbd/0x450 [ 164.965532][ T1540] new_sync_write+0x422/0x650 [ 164.970213][ T1540] vfs_write+0x5ad/0x730 [ 164.974489][ T1540] ksys_write+0x12d/0x250 [ 164.978829][ T1540] do_syscall_64+0x2d/0x70 [ 164.983246][ T1540] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 164.989125][ T1540] [ 164.991455][ T1540] The buggy address belongs to the object at ffff888090f27000 [ 164.991455][ T1540] which belongs to the cache kmalloc-512 of size 512 [ 165.005503][ T1540] The buggy address is located 4 bytes to the right of [ 165.005503][ T1540] 512-byte region [ffff888090f27000, ffff888090f27200) [ 165.019119][ T1540] The buggy address belongs to the page: [ 165.024756][ T1540] page:0000000002634046 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888090f27800 pfn:0x90f27 [ 165.036205][ T1540] flags: 0xfffe0000000200(slab) [ 165.041076][ T1540] raw: 00fffe0000000200 ffffea0002850d48 ffffea0002418488 ffff8880aa000600 [ 165.049669][ T1540] raw: ffff888090f27800 ffff888090f27000 0000000100000002 0000000000000000 [ 165.058248][ T1540] page dumped because: kasan: bad access detected [ 165.064655][ T1540] [ 165.066979][ T1540] Memory state around the buggy address: [ 165.072621][ T1540] ffff888090f27100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.080683][ T1540] ffff888090f27180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15:10:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x55}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x55}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x55}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:10:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x2f}}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 165.088754][ T1540] >ffff888090f27200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.096813][ T1540] ^ [ 165.100884][ T1540] ffff888090f27280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.109045][ T1540] ffff888090f27300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.117104][ T1540] ================================================================== [ 165.125163][ T1540] Disabling lock debugging due to kernel taint [ 165.139534][ T1540] Kernel panic - not syncing: panic_on_warn set ... [ 165.146138][ T1540] CPU: 1 PID: 1540 Comm: kworker/u5:0 Tainted: G B 5.8.0-rc7-next-20200731-syzkaller #0 [ 165.157405][ T1540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.167456][ T1540] Workqueue: hci0 hci_rx_work [ 165.172136][ T1540] Call Trace: [ 165.175429][ T1540] dump_stack+0x18f/0x20d [ 165.179760][ T1540] ? hci_le_meta_evt+0x3820/0x3fd0 [ 165.184871][ T1540] panic+0x2e3/0x75c [ 165.188766][ T1540] ? __warn_printk+0xf3/0xf3 [ 165.193356][ T1540] ? preempt_schedule_common+0x59/0xc0 [ 165.198823][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 165.203934][ T1540] ? preempt_schedule_thunk+0x16/0x18 [ 165.209312][ T1540] ? trace_hardirqs_on+0x55/0x220 [ 165.214343][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 165.219465][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 165.224580][ T1540] end_report+0x4d/0x53 [ 165.228746][ T1540] kasan_report.cold+0xd/0x37 [ 165.233428][ T1540] ? hci_le_meta_evt+0x38b4/0x3fd0 [ 165.238543][ T1540] hci_le_meta_evt+0x38b4/0x3fd0 [ 165.243491][ T1540] ? mark_lock+0xbc/0x1710 [ 165.247905][ T1540] ? mark_lock+0xbc/0x1710 [ 165.252325][ T1540] ? mark_lock+0xbc/0x1710 [ 165.256745][ T1540] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 165.263773][ T1540] ? mark_lock+0xbc/0x1710 [ 165.268201][ T1540] ? __lock_acquire+0x16cb/0x5640 [ 165.273230][ T1540] ? __lock_acquire+0x16cb/0x5640 [ 165.278262][ T1540] hci_event_packet+0x2e25/0x87a8 [ 165.283291][ T1540] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 165.289267][ T1540] ? __lock_acquire+0x16cb/0x5640 [ 165.294290][ T1540] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 165.299835][ T1540] ? lock_acquire+0x1f1/0xad0 [ 165.304510][ T1540] ? skb_dequeue+0x1c/0x180 [ 165.309009][ T1540] ? find_held_lock+0x2d/0x110 [ 165.313768][ T1540] ? mark_lock+0xbc/0x1710 [ 165.318186][ T1540] ? mark_held_locks+0x9f/0xe0 [ 165.322946][ T1540] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 165.328749][ T1540] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 165.334726][ T1540] ? trace_hardirqs_on+0x5f/0x220 [ 165.339750][ T1540] ? lockdep_hardirqs_on+0x76/0xf0 [ 165.344858][ T1540] hci_rx_work+0x22e/0xb50 [ 165.349274][ T1540] process_one_work+0x94c/0x1670 [ 165.354211][ T1540] ? lock_release+0x8e0/0x8e0 [ 165.358888][ T1540] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 165.364259][ T1540] ? rwlock_bug.part.0+0x90/0x90 [ 165.369196][ T1540] ? lockdep_hardirqs_off+0x7e/0xb0 [ 165.374393][ T1540] worker_thread+0x64c/0x1120 [ 165.379074][ T1540] ? process_one_work+0x1670/0x1670 [ 165.384267][ T1540] kthread+0x3b5/0x4a0 [ 165.388333][ T1540] ? __kthread_bind_mask+0xc0/0xc0 [ 165.393446][ T1540] ? __kthread_bind_mask+0xc0/0xc0 [ 165.398554][ T1540] ret_from_fork+0x1f/0x30 [ 165.404313][ T1540] Kernel Offset: disabled [ 165.408626][ T1540] Rebooting in 86400 seconds..