[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.7' (ECDSA) to the list of known hosts. syzkaller login: [ 66.226922][ T8435] chnl_net:caif_netlink_parms(): no params data found [ 66.295408][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 66.331853][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 66.343855][ T8436] chnl_net:caif_netlink_parms(): no params data found [ 66.486262][ T8432] chnl_net:caif_netlink_parms(): no params data found [ 66.549603][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 66.690301][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.697381][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.708097][ T8435] device bridge_slave_0 entered promiscuous mode [ 66.754487][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.764791][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.773211][ T8435] device bridge_slave_1 entered promiscuous mode [ 66.780857][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.787925][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.795938][ T8436] device bridge_slave_0 entered promiscuous mode [ 66.809713][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.816927][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.824913][ T8433] device bridge_slave_0 entered promiscuous mode [ 66.832516][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.839560][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.847649][ T8437] device bridge_slave_0 entered promiscuous mode [ 66.862447][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.869508][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.878387][ T8436] device bridge_slave_1 entered promiscuous mode [ 66.898376][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.905511][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.914518][ T8433] device bridge_slave_1 entered promiscuous mode [ 66.922375][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.929421][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.938335][ T8437] device bridge_slave_1 entered promiscuous mode [ 67.024070][ T8435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.108699][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.119641][ T8435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.130502][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.139647][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.147241][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.155817][ T8432] device bridge_slave_0 entered promiscuous mode [ 67.163419][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.170831][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.178899][ T8434] device bridge_slave_0 entered promiscuous mode [ 67.187777][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.198896][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.231582][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.248584][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.258173][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.266570][ T8432] device bridge_slave_1 entered promiscuous mode [ 67.277187][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.285242][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.294063][ T8434] device bridge_slave_1 entered promiscuous mode [ 67.303122][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.340833][ T8435] team0: Port device team_slave_0 added [ 67.407718][ T8435] team0: Port device team_slave_1 added [ 67.416187][ T8437] team0: Port device team_slave_0 added [ 67.428796][ T8436] team0: Port device team_slave_0 added [ 67.462025][ T8433] team0: Port device team_slave_0 added [ 67.498265][ T8437] team0: Port device team_slave_1 added [ 67.506721][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.518569][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.529610][ T8436] team0: Port device team_slave_1 added [ 67.538488][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.548817][ T8433] team0: Port device team_slave_1 added [ 67.555937][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.563263][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.589970][ T8435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.631090][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.675828][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.684405][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.713160][ T8435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.771343][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.778299][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.804654][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.819424][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.827146][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.853546][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.867404][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.874639][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.901160][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.915270][ T8432] team0: Port device team_slave_0 added [ 67.936097][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.943165][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.969218][ T8436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.981831][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.988770][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.016629][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.042867][ T8432] team0: Port device team_slave_1 added [ 68.050708][ T8434] team0: Port device team_slave_0 added [ 68.080717][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.087760][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.115273][ T8436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.151987][ T8434] team0: Port device team_slave_1 added [ 68.163156][ T8435] device hsr_slave_0 entered promiscuous mode [ 68.170653][ T8435] device hsr_slave_1 entered promiscuous mode [ 68.191190][ T8437] device hsr_slave_0 entered promiscuous mode [ 68.200800][ T8437] device hsr_slave_1 entered promiscuous mode [ 68.207284][ T8437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.218672][ T8437] Cannot create hsr debugfs directory [ 68.311969][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.318923][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.346472][ T8432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.374083][ T8433] device hsr_slave_0 entered promiscuous mode [ 68.382757][ T8433] device hsr_slave_1 entered promiscuous mode [ 68.389199][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.399824][ T8433] Cannot create hsr debugfs directory [ 68.409334][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.417180][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.443649][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.456141][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.463147][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.489272][ T8432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.514420][ T8436] device hsr_slave_0 entered promiscuous mode [ 68.524066][ T8436] device hsr_slave_1 entered promiscuous mode [ 68.532495][ T8436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.541064][ T8436] Cannot create hsr debugfs directory [ 68.581848][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.588791][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.616179][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.821906][ T8434] device hsr_slave_0 entered promiscuous mode [ 68.833122][ T8434] device hsr_slave_1 entered promiscuous mode [ 68.839551][ T8434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.847913][ T8434] Cannot create hsr debugfs directory [ 68.859420][ T8432] device hsr_slave_0 entered promiscuous mode [ 68.866474][ T8432] device hsr_slave_1 entered promiscuous mode [ 68.873180][ T8432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.881860][ T8432] Cannot create hsr debugfs directory [ 69.163685][ T8437] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.195488][ T8437] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.239684][ T8437] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.277391][ T8437] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.338320][ T8433] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.378509][ T8433] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.388691][ T8433] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.403753][ T8433] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.461330][ T8435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.480977][ T8435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.495692][ T8435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.523698][ T8435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.570697][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.586832][ T8436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.598519][ T8436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.648413][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.658450][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.680536][ T8436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.701833][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.719616][ T8436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.738572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.752190][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.762319][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.769469][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.794898][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.803558][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.811392][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.820783][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.829027][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.836112][ T9440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.843783][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.853235][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.863993][ T8432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.879473][ T8432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.931314][ T8432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.939543][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.951282][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.958986][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.971882][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.984205][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.992975][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.001697][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.010019][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.021347][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.034858][ T8432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.046767][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.081645][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.093714][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.103713][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.112425][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.121087][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.128140][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.136143][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.150851][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.172914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.182020][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.192424][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.199472][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.217107][ T8435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.225386][ T8434] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.238519][ T8434] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.264330][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.272916][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.282396][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.292023][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.301968][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.311274][ T8434] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.327746][ T8434] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.366786][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.375582][ T8435] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.383228][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.391796][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.399280][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.409275][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.417914][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.425774][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.474386][ T8433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.485512][ T8433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.498572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.507219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.515924][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.523026][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.531201][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.539373][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.548426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.556954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.587985][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.597899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.608176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.619430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.631028][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.638074][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.645854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.655492][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.664273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.673379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.687555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.728345][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.737213][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.746434][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.755650][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.764749][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.773251][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.803025][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.812248][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.821574][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.829507][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.840051][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.847639][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.867661][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.879222][ T8437] device veth0_vlan entered promiscuous mode [ 70.906893][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.914583][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.922546][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.943254][ T8437] device veth1_vlan entered promiscuous mode [ 70.988081][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.042487][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.050835][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.058675][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.067932][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.076718][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.084938][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.092875][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.101091][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.120034][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.128314][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.143709][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.155170][ T8432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.169632][ T8437] device veth0_macvtap entered promiscuous mode [ 71.193192][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.218057][ T8437] device veth1_macvtap entered promiscuous mode [ 71.227448][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.252628][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.262360][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.272217][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.282131][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.291729][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.300776][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.309019][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.316122][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.329426][ T8432] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.367930][ T8433] device veth0_vlan entered promiscuous mode [ 71.376342][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.392580][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.400739][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.408766][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.416558][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.424377][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.433256][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.441999][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.449053][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.456802][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.464863][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.472687][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.481701][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.490613][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.497636][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.506109][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.514986][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.524090][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.531202][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.538708][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.551770][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.560809][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.591552][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.599339][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.608750][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.618156][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.627288][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.636726][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.645430][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.654533][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.663525][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.676994][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.714687][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.724852][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.734326][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.743828][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.752672][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.761742][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.768790][T10313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.776749][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.785829][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.794819][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.803958][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.812557][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.825581][ T8437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.838394][ T8437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.851428][ T8437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.862597][ T8437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.880080][ T8433] device veth1_vlan entered promiscuous mode [ 71.898228][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.909845][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.918316][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.927457][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.934598][ T9440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.962752][ T8435] device veth0_vlan entered promiscuous mode [ 71.984783][ T8436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.995869][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.007033][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.016750][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.025145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.033539][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.041990][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.051045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.071727][ T8435] device veth1_vlan entered promiscuous mode [ 72.108449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.116087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.124265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.133338][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.141363][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.150253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.158490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready executing program [ 72.217168][T10361] netlink: 'syz-executor076': attribute type 62 has an invalid length. [ 72.227967][T10361] netlink: 'syz-executor076': attribute type 3 has an invalid length. [ 72.236553][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.247607][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.250216][T10361] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 72.256674][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.275024][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.283439][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.293740][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.302653][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.311671][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.325263][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.367455][ T8432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.381370][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.396013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.402817][T10361] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.405025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.420308][T10361] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 72.437089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.446433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.455748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready executing program [ 72.480291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.488561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.498592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.504508][T10366] netlink: 'syz-executor076': attribute type 62 has an invalid length. [ 72.515351][ T8434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.522672][T10366] netlink: 'syz-executor076': attribute type 3 has an invalid length. [ 72.534856][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.541125][T10366] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 72.554611][T10366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.562111][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.564789][T10366] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 72.586966][ T8433] device veth0_macvtap entered promiscuous mode [ 72.611974][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.624660][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready executing program [ 72.647504][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.652605][T10373] netlink: 'syz-executor076': attribute type 62 has an invalid length. [ 72.675357][T10373] netlink: 'syz-executor076': attribute type 3 has an invalid length. [ 72.681884][ T8435] device veth0_macvtap entered promiscuous mode [ 72.684886][T10373] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 72.697761][ T8433] device veth1_macvtap entered promiscuous mode [ 72.720365][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.728759][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.739216][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.752000][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.759412][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.768338][T10373] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.782289][ T8435] device veth1_macvtap entered promiscuous mode [ 72.796868][T10373] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db executing program [ 72.828992][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.838188][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.884074][T10382] netlink: 'syz-executor076': attribute type 62 has an invalid length. [ 72.888692][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.893996][T10382] netlink: 'syz-executor076': attribute type 3 has an invalid length. [ 72.912654][T10382] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 72.917885][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.937316][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 72.948634][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.960044][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.971250][T10382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.983026][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.005527][T10382] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 73.009638][T10356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready executing program [ 73.032018][T10356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.057289][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 73.078801][T10387] netlink: 'syz-executor076': attribute type 62 has an invalid length. [ 73.079464][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.089494][T10387] netlink: 'syz-executor076': attribute type 3 has an invalid length. [ 73.097236][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 73.106393][T10387] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 73.123312][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.137827][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.148826][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 73.164693][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.176735][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.197247][T10387] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.207180][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.216485][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.218091][T10387] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 73.231681][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready executing program [ 73.246233][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.268175][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.276493][T10392] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 73.278393][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.304814][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.315223][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.330654][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 73.341469][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.352305][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 73.364230][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.375562][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.396135][T10392] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.397504][ T8433] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.409704][T10392] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 73.420171][ T8433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 73.448366][ T8433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.462886][ T8433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.481124][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.485023][T10397] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 73.494620][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.520794][ T8435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.530419][ T8435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.539110][ T8435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.548475][ T8435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.574003][T10397] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.593309][T10397] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 73.600541][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.624656][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready executing program [ 73.652230][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.658652][T10402] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 73.660592][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.694975][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.703209][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.712264][ T8434] device veth0_vlan entered promiscuous mode [ 73.727216][T10402] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.737715][T10402] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 73.766018][ T8436] device veth0_vlan entered promiscuous mode [ 73.783322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.793563][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready executing program [ 73.817096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.836666][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.841553][T10407] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. executing program [ 73.868836][ T8434] device veth1_vlan entered promiscuous mode [ 73.900368][T10407] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 executing program [ 73.936768][ T8432] device veth0_vlan entered promiscuous mode [ 73.940966][T10409] netlink: 43036 bytes leftover after parsing attributes in process `syz-executor076'. [ 73.951548][T10407] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 73.976461][ T8436] device veth1_vlan entered promiscuous mode executing program [ 73.997683][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.015749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.035180][T10409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 executing program [ 74.038104][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.053022][T10409] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 74.072379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.101764][T10421] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.118245][ T8432] device veth1_vlan entered promiscuous mode [ 74.151421][T10421] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 74.177289][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready executing program [ 74.196828][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready executing program executing program [ 74.233067][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.245886][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.263352][ T8434] device veth0_macvtap entered promiscuous mode [ 74.276399][T10429] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.293815][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.295206][T10429] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 74.306490][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready executing program [ 74.338493][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.348709][T10430] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.363146][ T8434] device veth1_macvtap entered promiscuous mode [ 74.375927][T10430] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db executing program [ 74.385522][ T8436] device veth0_macvtap entered promiscuous mode executing program [ 74.434451][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.445682][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.467333][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready executing program [ 74.498905][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.524307][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.535236][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.545627][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.556260][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.568617][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.580303][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.592011][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.603584][ T8432] device veth0_macvtap entered promiscuous mode [ 74.613092][ T8436] device veth1_macvtap entered promiscuous mode [ 74.626775][T10437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.637048][T10437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 74.649731][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.657551][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.673411][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.683176][T10340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready executing program [ 74.696199][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 executing program executing program [ 74.731138][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.753013][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.764412][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.775558][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.786666][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.798512][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.821469][T10449] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 executing program [ 74.826162][ T8434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.833457][T10449] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 74.866549][ T8434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 74.906270][ T8434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.926462][ T8434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.938794][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.939228][T10453] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.957953][T10453] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 74.958571][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.987248][ T8432] device veth1_macvtap entered promiscuous mode executing program [ 75.003622][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.017602][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.031844][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.043642][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.057280][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.068356][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.078804][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.090515][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.104049][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.112940][T10459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.117489][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.132965][T10459] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 75.140782][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program [ 75.174133][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.197115][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.219519][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.231466][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.242469][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.253937][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.265590][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.274352][T10460] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.290887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.293764][T10460] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 75.306922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready executing program executing program [ 75.352737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.368971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.379806][T10470] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.389278][T10470] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 75.403827][ T8436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.421340][ T8436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.438465][ T8436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 75.448066][ T8436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.468575][T10476] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.495210][T10476] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 75.499964][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.526160][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program executing program [ 75.561713][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.574497][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.584512][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.595110][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.605692][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.616285][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.626840][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.640104][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.651524][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.663067][T10482] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.687753][T10482] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 75.697270][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 executing program [ 75.713148][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.723957][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.741653][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.761194][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.771756][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.782427][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.792997][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.803185][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.815280][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.826614][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.834698][T10488] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.844508][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.855407][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready executing program executing program [ 75.864127][T10488] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 75.876084][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.891737][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.937841][T10495] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.953027][ T8432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.977640][T10495] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db executing program [ 76.000093][ T8432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.022809][T10495] ================================================================== [ 76.031067][T10495] BUG: KASAN: use-after-free in __list_add_valid+0x81/0xa0 [ 76.038264][T10495] Read of size 8 at addr ffff8880157a42c8 by task syz-executor076/10495 [ 76.046572][T10495] [ 76.048893][T10495] CPU: 0 PID: 10495 Comm: syz-executor076 Not tainted 5.14.0-rc3-syzkaller #0 [ 76.057730][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.067788][T10495] Call Trace: [ 76.071071][T10495] dump_stack_lvl+0xcd/0x134 [ 76.075691][T10495] print_address_description.constprop.0.cold+0x6c/0x309 [ 76.082724][T10495] ? __list_add_valid+0x81/0xa0 [ 76.087569][T10495] ? __list_add_valid+0x81/0xa0 [ 76.092407][T10495] kasan_report.cold+0x83/0xdf [ 76.097177][T10495] ? __list_add_valid+0x81/0xa0 [ 76.102011][T10495] __list_add_valid+0x81/0xa0 [ 76.106674][T10495] firmware_fallback_sysfs+0x455/0xe10 [ 76.112125][T10495] _request_firmware+0xa80/0xe80 [ 76.117053][T10495] request_firmware+0x32/0x50 [ 76.121717][T10495] reg_reload_regdb+0x7a/0x240 [ 76.126469][T10495] ? is_world_regdom+0xe0/0xe0 [ 76.131227][T10495] ? nl80211_set_qos_map+0x800/0x800 [ 76.136520][T10495] ? nl80211_pre_doit+0xa6/0x620 [ 76.141443][T10495] genl_family_rcv_msg_doit+0x228/0x320 [ 76.146980][T10495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 76.154346][T10495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 76.160571][T10495] ? ns_capable+0xd9/0x100 [ 76.164972][T10495] genl_rcv_msg+0x328/0x580 [ 76.169471][T10495] ? genl_get_cmd+0x480/0x480 [ 76.174160][T10495] ? nl80211_stop_sched_scan+0x3a0/0x3a0 [ 76.179785][T10495] ? lock_release+0x720/0x720 [ 76.184446][T10495] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 76.190252][T10495] netlink_rcv_skb+0x153/0x420 [ 76.195005][T10495] ? genl_get_cmd+0x480/0x480 [ 76.199680][T10495] ? netlink_ack+0xa60/0xa60 [ 76.204278][T10495] genl_rcv+0x24/0x40 [ 76.208264][T10495] netlink_unicast+0x533/0x7d0 [ 76.213017][T10495] ? netlink_attachskb+0x890/0x890 [ 76.218109][T10495] ? __virt_addr_valid+0x5d/0x2d0 [ 76.223115][T10495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 76.229338][T10495] ? __phys_addr_symbol+0x2c/0x70 [ 76.234344][T10495] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 76.240044][T10495] ? __check_object_size+0x16e/0x3f0 [ 76.245315][T10495] netlink_sendmsg+0x86d/0xdb0 [ 76.250089][T10495] ? netlink_unicast+0x7d0/0x7d0 [ 76.255014][T10495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 76.261252][T10495] ? netlink_unicast+0x7d0/0x7d0 [ 76.266179][T10495] sock_sendmsg+0xcf/0x120 [ 76.270601][T10495] ____sys_sendmsg+0x6e8/0x810 [ 76.275367][T10495] ? kernel_sendmsg+0x50/0x50 [ 76.280040][T10495] ? do_recvmmsg+0x6d0/0x6d0 [ 76.284618][T10495] ? do_huge_pmd_anonymous_page+0x1259/0x2740 [ 76.290673][T10495] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 76.296653][T10495] ___sys_sendmsg+0xf3/0x170 [ 76.301257][T10495] ? sendmsg_copy_msghdr+0x160/0x160 [ 76.306531][T10495] ? __fget_files+0x21b/0x3e0 [ 76.311207][T10495] ? lock_downgrade+0x6e0/0x6e0 [ 76.316063][T10495] ? __fget_files+0x23d/0x3e0 [ 76.320733][T10495] ? __fget_light+0xea/0x280 [ 76.325309][T10495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 76.331544][T10495] __sys_sendmsg+0xe5/0x1b0 [ 76.336060][T10495] ? __sys_sendmsg_sock+0x30/0x30 [ 76.341096][T10495] ? syscall_enter_from_user_mode+0x21/0x70 [ 76.346983][T10495] do_syscall_64+0x35/0xb0 [ 76.351390][T10495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.357274][T10495] RIP: 0033:0x449769 [ 76.361175][T10495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.380766][T10495] RSP: 002b:00007f6b6ab71308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.389163][T10495] RAX: ffffffffffffffda RBX: 00000000004cf4c8 RCX: 0000000000449769 [ 76.397119][T10495] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 76.405078][T10495] RBP: 00000000004cf4c0 R08: 0000000000000000 R09: 0000000000000000 [ 76.413033][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004cf4cc [ 76.421116][T10495] R13: 000000000049e584 R14: 80034802373e1537 R15: 0000000000022000 [ 76.429088][T10495] [ 76.431397][T10495] Allocated by task 10488: [ 76.435790][T10495] kasan_save_stack+0x1b/0x40 [ 76.440464][T10495] __kasan_kmalloc+0x9b/0xd0 [ 76.445036][T10495] _request_firmware+0x2de/0xe80 [ 76.449953][T10495] request_firmware+0x32/0x50 [ 76.454608][T10495] reg_reload_regdb+0x7a/0x240 [ 76.459352][T10495] genl_family_rcv_msg_doit+0x228/0x320 [ 76.464888][T10495] genl_rcv_msg+0x328/0x580 [ 76.469422][T10495] netlink_rcv_skb+0x153/0x420 [ 76.474202][T10495] genl_rcv+0x24/0x40 [ 76.478168][T10495] netlink_unicast+0x533/0x7d0 [ 76.482914][T10495] netlink_sendmsg+0x86d/0xdb0 [ 76.487661][T10495] sock_sendmsg+0xcf/0x120 [ 76.492063][T10495] ____sys_sendmsg+0x6e8/0x810 [ 76.496809][T10495] ___sys_sendmsg+0xf3/0x170 [ 76.501389][T10495] __sys_sendmsg+0xe5/0x1b0 [ 76.505892][T10495] do_syscall_64+0x35/0xb0 [ 76.510310][T10495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.516197][T10495] [ 76.518499][T10495] Freed by task 10488: [ 76.522540][T10495] kasan_save_stack+0x1b/0x40 [ 76.527197][T10495] kasan_set_track+0x1c/0x30 [ 76.531777][T10495] kasan_set_free_info+0x20/0x30 [ 76.536719][T10495] __kasan_slab_free+0xfb/0x130 [ 76.541550][T10495] slab_free_freelist_hook+0xdf/0x240 [ 76.546900][T10495] kfree+0xe4/0x530 [ 76.550693][T10495] free_fw_priv+0x2b1/0x4d0 [ 76.555176][T10495] release_firmware.part.0+0xc7/0xf0 [ 76.560441][T10495] _request_firmware+0x709/0xe80 [ 76.565357][T10495] request_firmware+0x32/0x50 [ 76.570019][T10495] reg_reload_regdb+0x7a/0x240 [ 76.574778][T10495] genl_family_rcv_msg_doit+0x228/0x320 [ 76.580311][T10495] genl_rcv_msg+0x328/0x580 [ 76.584819][T10495] netlink_rcv_skb+0x153/0x420 [ 76.589565][T10495] genl_rcv+0x24/0x40 [ 76.593527][T10495] netlink_unicast+0x533/0x7d0 [ 76.598272][T10495] netlink_sendmsg+0x86d/0xdb0 [ 76.603017][T10495] sock_sendmsg+0xcf/0x120 [ 76.607413][T10495] ____sys_sendmsg+0x6e8/0x810 [ 76.612165][T10495] ___sys_sendmsg+0xf3/0x170 [ 76.616755][T10495] __sys_sendmsg+0xe5/0x1b0 [ 76.621241][T10495] do_syscall_64+0x35/0xb0 [ 76.625642][T10495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.631518][T10495] [ 76.633819][T10495] The buggy address belongs to the object at ffff8880157a4200 [ 76.633819][T10495] which belongs to the cache kmalloc-256 of size 256 [ 76.647849][T10495] The buggy address is located 200 bytes inside of [ 76.647849][T10495] 256-byte region [ffff8880157a4200, ffff8880157a4300) [ 76.661108][T10495] The buggy address belongs to the page: [ 76.666731][T10495] page:ffffea000055e900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x157a4 [ 76.676887][T10495] head:ffffea000055e900 order:1 compound_mapcount:0 [ 76.683465][T10495] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 76.691864][T10495] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888010841b40 [ 76.700436][T10495] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 76.709009][T10495] page dumped because: kasan: bad access detected [ 76.715399][T10495] page_owner tracks the page as allocated [ 76.721116][T10495] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8432, ts 75826507872, free_ts 75710172175 [ 76.738107][T10495] get_page_from_freelist+0xa72/0x2f80 [ 76.743548][T10495] __alloc_pages+0x1b2/0x500 [ 76.748120][T10495] alloc_pages+0x18c/0x2a0 [ 76.752518][T10495] allocate_slab+0x32e/0x4b0 [ 76.757108][T10495] ___slab_alloc+0x4ba/0x820 [ 76.761684][T10495] __slab_alloc.constprop.0+0xa7/0xf0 [ 76.767037][T10495] kmem_cache_alloc_trace+0x30f/0x3c0 [ 76.772390][T10495] fib6_info_alloc+0xc1/0x210 [ 76.777056][T10495] ip6_route_info_create+0x33e/0x1aa0 [ 76.782417][T10495] ip6_route_add+0x24/0x150 [ 76.786903][T10495] addrconf_prefix_route+0x30a/0x4e0 [ 76.792170][T10495] addrconf_notify+0x1638/0x2400 [ 76.797093][T10495] notifier_call_chain+0xb5/0x200 [ 76.802102][T10495] call_netdevice_notifiers_info+0xb5/0x130 [ 76.807978][T10495] __dev_notify_flags+0x110/0x2b0 [ 76.812984][T10495] dev_change_flags+0x112/0x170 [ 76.817819][T10495] page last free stack trace: [ 76.822467][T10495] free_pcp_prepare+0x2c5/0x780 [ 76.827304][T10495] free_unref_page+0x19/0x690 [ 76.831986][T10495] qlist_free_all+0x5a/0xc0 [ 76.836468][T10495] kasan_quarantine_reduce+0x180/0x200 [ 76.841907][T10495] __kasan_slab_alloc+0x8e/0xa0 [ 76.846737][T10495] kmem_cache_alloc+0x1be/0x4a0 [ 76.851571][T10495] anon_vma_fork+0xed/0x630 [ 76.856077][T10495] dup_mm+0x9a0/0x1380 [ 76.860128][T10495] copy_process+0x6f54/0x7510 [ 76.864786][T10495] kernel_clone+0xe7/0xac0 [ 76.869182][T10495] __do_sys_clone+0xc8/0x110 [ 76.873756][T10495] do_syscall_64+0x35/0xb0 [ 76.878162][T10495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.884054][T10495] [ 76.886373][T10495] Memory state around the buggy address: [ 76.891980][T10495] ffff8880157a4180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.900030][T10495] ffff8880157a4200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.908076][T10495] >ffff8880157a4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.916111][T10495] ^ [ 76.922510][T10495] ffff8880157a4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.930557][T10495] ffff8880157a4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.938610][T10495] ================================================================== [ 76.946656][T10495] Disabling lock debugging due to kernel taint executing program [ 76.971034][ T8432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.990016][ T8432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 77.166544][T10495] Kernel panic - not syncing: panic_on_warn set ... [ 77.173152][T10495] CPU: 0 PID: 10495 Comm: syz-executor076 Tainted: G B 5.14.0-rc3-syzkaller #0 [ 77.183393][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.193442][T10495] Call Trace: [ 77.196716][T10495] dump_stack_lvl+0xcd/0x134 [ 77.201342][T10495] panic+0x306/0x73d [ 77.205240][T10495] ? __warn_printk+0xf3/0xf3 [ 77.209835][T10495] ? preempt_schedule_common+0x59/0xc0 executing program executing program executing program executing program [ 77.215296][T10495] ? __list_add_valid+0x81/0xa0 [ 77.220145][T10495] ? preempt_schedule_thunk+0x16/0x18 [ 77.225520][T10495] ? trace_hardirqs_on+0x38/0x1c0 [ 77.230556][T10495] ? trace_hardirqs_on+0x51/0x1c0 [ 77.235604][T10495] ? __list_add_valid+0x81/0xa0 [ 77.240455][T10495] ? __list_add_valid+0x81/0xa0 [ 77.245309][T10495] end_report.cold+0x5a/0x5a [ 77.249902][T10495] kasan_report.cold+0x71/0xdf [ 77.254683][T10495] ? __list_add_valid+0x81/0xa0 [ 77.259534][T10495] __list_add_valid+0x81/0xa0 executing program executing program executing program [ 77.264212][T10495] firmware_fallback_sysfs+0x455/0xe10 [ 77.269679][T10495] _request_firmware+0xa80/0xe80 [ 77.274619][T10495] request_firmware+0x32/0x50 [ 77.279300][T10495] reg_reload_regdb+0x7a/0x240 [ 77.284062][T10495] ? is_world_regdom+0xe0/0xe0 [ 77.288825][T10495] ? nl80211_set_qos_map+0x800/0x800 [ 77.294110][T10495] ? nl80211_pre_doit+0xa6/0x620 [ 77.299049][T10495] genl_family_rcv_msg_doit+0x228/0x320 [ 77.304600][T10495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 executing program executing program executing program executing program [ 77.311981][T10495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 77.318225][T10495] ? ns_capable+0xd9/0x100 [ 77.322646][T10495] genl_rcv_msg+0x328/0x580 [ 77.327175][T10495] ? genl_get_cmd+0x480/0x480 [ 77.331857][T10495] ? nl80211_stop_sched_scan+0x3a0/0x3a0 [ 77.337492][T10495] ? lock_release+0x720/0x720 [ 77.342173][T10495] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 77.347986][T10495] netlink_rcv_skb+0x153/0x420 [ 77.352779][T10495] ? genl_get_cmd+0x480/0x480 [ 77.357457][T10495] ? netlink_ack+0xa60/0xa60 [ 77.362058][T10495] genl_rcv+0x24/0x40 executing program executing program executing program [ 77.366047][T10495] netlink_unicast+0x533/0x7d0 [ 77.370815][T10495] ? netlink_attachskb+0x890/0x890 [ 77.375935][T10495] ? __virt_addr_valid+0x5d/0x2d0 [ 77.380967][T10495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 77.387218][T10495] ? __phys_addr_symbol+0x2c/0x70 [ 77.392255][T10495] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 77.398023][T10495] ? __check_object_size+0x16e/0x3f0 [ 77.403312][T10495] netlink_sendmsg+0x86d/0xdb0 [ 77.408086][T10495] ? netlink_unicast+0x7d0/0x7d0 executing program executing program executing program executing program [ 77.413034][T10495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 77.419304][T10495] ? netlink_unicast+0x7d0/0x7d0 [ 77.424252][T10495] sock_sendmsg+0xcf/0x120 [ 77.428674][T10495] ____sys_sendmsg+0x6e8/0x810 [ 77.433440][T10495] ? kernel_sendmsg+0x50/0x50 [ 77.438131][T10495] ? do_recvmmsg+0x6d0/0x6d0 [ 77.442728][T10495] ? do_huge_pmd_anonymous_page+0x1259/0x2740 [ 77.448801][T10495] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 77.454786][T10495] ___sys_sendmsg+0xf3/0x170 [ 77.459380][T10495] ? sendmsg_copy_msghdr+0x160/0x160 executing program executing program executing program [ 77.464673][T10495] ? __fget_files+0x21b/0x3e0 [ 77.469362][T10495] ? lock_downgrade+0x6e0/0x6e0 [ 77.474216][T10495] ? __fget_files+0x23d/0x3e0 [ 77.478904][T10495] ? __fget_light+0xea/0x280 [ 77.483505][T10495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 77.489835][T10495] __sys_sendmsg+0xe5/0x1b0 [ 77.494348][T10495] ? __sys_sendmsg_sock+0x30/0x30 [ 77.499380][T10495] ? syscall_enter_from_user_mode+0x21/0x70 [ 77.505278][T10495] do_syscall_64+0x35/0xb0 [ 77.509703][T10495] entry_SYSCALL_64_after_hwframe+0x44/0xae executing program executing program [ 77.515601][T10495] RIP: 0033:0x449769 [ 77.519489][T10495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.539096][T10495] RSP: 002b:00007f6b6ab71308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.547499][T10495] RAX: ffffffffffffffda RBX: 00000000004cf4c8 RCX: 0000000000449769 [ 77.555457][T10495] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 77.563414][T10495] RBP: 00000000004cf4c0 R08: 0000000000000000 R09: 0000000000000000 [ 77.571370][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004cf4cc [ 77.579346][T10495] R13: 000000000049e584 R14: 80034802373e1537 R15: 0000000000022000 [ 77.588603][T10495] Kernel Offset: disabled [ 77.592918][T10495] Rebooting in 86400 seconds..