[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. 2020/10/10 00:43:59 fuzzer started 2020/10/10 00:44:00 dialing manager at 10.128.0.26:46303 2020/10/10 00:44:00 syscalls: 3450 2020/10/10 00:44:00 code coverage: enabled 2020/10/10 00:44:00 comparison tracing: enabled 2020/10/10 00:44:00 extra coverage: enabled 2020/10/10 00:44:00 setuid sandbox: enabled 2020/10/10 00:44:00 namespace sandbox: enabled 2020/10/10 00:44:00 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/10 00:44:00 fault injection: enabled 2020/10/10 00:44:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/10 00:44:00 net packet injection: enabled 2020/10/10 00:44:00 net device setup: enabled 2020/10/10 00:44:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/10 00:44:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/10 00:44:00 USB emulation: enabled 2020/10/10 00:44:00 hci packet injection: enabled 2020/10/10 00:44:00 wifi device emulation: enabled 00:46:34 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 00:46:34 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "3d83904ec1a8c2d9db5901fe1ff1a9b4828b3b20125e943bbdf4b3359282ccce9a89353ce7d3869c0521d24007ccd5b428ab8521ce8315b79a5d6d8f3d738b"}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f0000002d00)=[{&(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "44d947c465d3830e357065e29f116b791b42d1fbb4ddcd3abe02d6af8741ae0e82d11520e82388c689f8009146363de5eed079d09b92d949457a0a9f1a77c1"}, 0x60, &(0x7f0000000380)=[{&(0x7f0000000100)="bade1e4df7b8459118cf829fe01d461212d1c3e52b5fd32b87098ec01fde6673b687c649bbd0baf4acdd1594a0616d638f45bc35d1413ffb981109f000a1b8f77465cf313c03e65d529d7a3037a20a07d5fe932707cd1d4f5f66f6243de744f558c8ccf96dfe7ad88f85c34cbcbbe1869f153c35fc3196ccabe9c92fcf45b407", 0x80}, {&(0x7f00000001c0)='x', 0x1}], 0x2}], 0x1, 0x0) 00:46:34 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:46:34 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x20, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040), &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0xe6, &(0x7f0000e0b000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd7000fddbdf2501000000000000000b000000000c001473797a3108000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44020) r2 = mq_open(&(0x7f0000000280)='eth0\x00', 0x0, 0x20, 0x0) mq_notify(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed"}}) 00:46:34 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f00004cc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00003d0000/0x3000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) 00:46:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0xe2ce, 0x0, 0x0, 0x20}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket(0x0, 0x5, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x410a20, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0xc) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syzkaller login: [ 214.942631][ T6910] IPVS: ftp: loaded support on port[0] = 21 [ 215.132037][ T6912] IPVS: ftp: loaded support on port[0] = 21 [ 215.294644][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 215.394413][ T6914] IPVS: ftp: loaded support on port[0] = 21 [ 215.468140][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.477637][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.487279][ T6910] device bridge_slave_0 entered promiscuous mode [ 215.542663][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.550150][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.577944][ T6910] device bridge_slave_1 entered promiscuous mode [ 215.662892][ T6916] IPVS: ftp: loaded support on port[0] = 21 [ 215.731618][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 215.783419][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.862716][ T6918] IPVS: ftp: loaded support on port[0] = 21 [ 215.890990][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.987469][ T6910] team0: Port device team_slave_0 added [ 216.034737][ T6910] team0: Port device team_slave_1 added [ 216.082890][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 216.092381][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.100938][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.111193][ T6912] device bridge_slave_0 entered promiscuous mode [ 216.122930][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.130189][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.138218][ T6912] device bridge_slave_1 entered promiscuous mode [ 216.276387][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.283369][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.310897][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.327286][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.334238][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.360343][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.428110][ T6945] IPVS: ftp: loaded support on port[0] = 21 [ 216.456051][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.505126][ T6910] device hsr_slave_0 entered promiscuous mode [ 216.513192][ T6910] device hsr_slave_1 entered promiscuous mode [ 216.526960][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 216.540665][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.641968][ T6912] team0: Port device team_slave_0 added [ 216.656746][ T6912] team0: Port device team_slave_1 added [ 216.739516][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.751353][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.760128][ T6914] device bridge_slave_0 entered promiscuous mode [ 216.806835][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.813923][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.826448][ T6914] device bridge_slave_1 entered promiscuous mode [ 216.833415][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 216.851698][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.859284][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.866449][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 216.889009][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.938803][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.948202][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.975481][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.043519][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.084570][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.095614][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 217.123722][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.131685][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.140509][ T6916] device bridge_slave_0 entered promiscuous mode [ 217.168104][ T6914] team0: Port device team_slave_0 added [ 217.178168][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.185232][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.194594][ T6916] device bridge_slave_1 entered promiscuous mode [ 217.232179][ T6912] device hsr_slave_0 entered promiscuous mode [ 217.244711][ T6912] device hsr_slave_1 entered promiscuous mode [ 217.252983][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.261558][ T6912] Cannot create hsr debugfs directory [ 217.274842][ T6914] team0: Port device team_slave_1 added [ 217.336116][ T2644] Bluetooth: hci2: command 0x0409 tx timeout [ 217.364171][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.373572][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.382935][ T6918] device bridge_slave_0 entered promiscuous mode [ 217.423719][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.433957][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.443349][ T6918] device bridge_slave_1 entered promiscuous mode [ 217.453896][ T6945] chnl_net:caif_netlink_parms(): no params data found [ 217.465694][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.495170][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.514374][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.541896][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.567719][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.576877][ T2644] Bluetooth: hci3: command 0x0409 tx timeout [ 217.605930][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.612913][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.640008][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.686654][ T6910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.706186][ T6910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.717092][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.742783][ T6916] team0: Port device team_slave_0 added [ 217.755196][ T6910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.772867][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.801690][ T6916] team0: Port device team_slave_1 added [ 217.817124][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 217.817448][ T6910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.894768][ T6918] team0: Port device team_slave_0 added [ 217.914579][ T6914] device hsr_slave_0 entered promiscuous mode [ 217.922515][ T6914] device hsr_slave_1 entered promiscuous mode [ 217.930206][ T6914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.938533][ T6914] Cannot create hsr debugfs directory [ 217.953616][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.962236][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.970628][ T6945] device bridge_slave_0 entered promiscuous mode [ 217.984012][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.993198][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.019383][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.032341][ T6918] team0: Port device team_slave_1 added [ 218.051922][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.061172][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.069977][ T6945] device bridge_slave_1 entered promiscuous mode [ 218.081599][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.088972][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.116018][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.152020][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.161385][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.189248][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.216351][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 218.235431][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.263398][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.272168][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.298913][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.324467][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.402746][ T6916] device hsr_slave_0 entered promiscuous mode [ 218.414986][ T6916] device hsr_slave_1 entered promiscuous mode [ 218.423786][ T6916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.431787][ T6916] Cannot create hsr debugfs directory [ 218.447740][ T6918] device hsr_slave_0 entered promiscuous mode [ 218.454467][ T6918] device hsr_slave_1 entered promiscuous mode [ 218.465740][ T6918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.473318][ T6918] Cannot create hsr debugfs directory [ 218.529043][ T6945] team0: Port device team_slave_0 added [ 218.550414][ T6945] team0: Port device team_slave_1 added [ 218.616534][ T6912] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.651665][ T6912] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.680101][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.687777][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.714609][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.742949][ T6912] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.754905][ T6912] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.773421][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.784195][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.810786][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.945716][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 219.003984][ T6945] device hsr_slave_0 entered promiscuous mode [ 219.011427][ T6945] device hsr_slave_1 entered promiscuous mode [ 219.021316][ T6945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.029942][ T6945] Cannot create hsr debugfs directory [ 219.089215][ T6914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.122764][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.156240][ T6914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.171824][ T6914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.185924][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 219.218184][ T6914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.240031][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.268990][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.279575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.295374][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.304502][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.313364][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.320696][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.333387][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.402200][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.411170][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.419768][ T2477] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.425658][ T2644] Bluetooth: hci2: command 0x041b tx timeout [ 219.426896][ T2477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.440829][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.457476][ T6916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.467572][ T6916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.477551][ T6916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.490507][ T6916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.537080][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.582573][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.610988][ T6918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.622475][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.632908][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.641862][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.656989][ T8166] Bluetooth: hci3: command 0x041b tx timeout [ 219.676144][ T6918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.693401][ T6918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.703304][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.712980][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.755405][ T6918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.784820][ T6910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.798298][ T6910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.810246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.820159][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.829774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.839075][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.848797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.884735][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.897583][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 219.908639][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.917549][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.926110][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.934919][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.944623][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.951749][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.959923][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.968799][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.977622][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.984727][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.992417][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.002741][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.066709][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.078261][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.086786][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.094197][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.103665][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.114096][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.136629][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.143832][ T6945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.161952][ T6945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.186733][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.196959][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.221585][ T6945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.234770][ T6945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.273723][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.285125][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.302039][ T6912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.313675][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.321313][ T2644] Bluetooth: hci5: command 0x041b tx timeout [ 220.349638][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.358919][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.400318][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.428099][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.437909][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.450234][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.490518][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.500635][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.513501][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.551572][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.568656][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.577275][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.584671][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.594654][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.603682][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.622011][ T6910] device veth0_vlan entered promiscuous mode [ 220.655481][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.663941][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.675892][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.684465][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.694200][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.701326][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.710453][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.719295][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.727962][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.735101][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.742701][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.751793][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.761426][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.768601][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.792311][ T6910] device veth1_vlan entered promiscuous mode [ 220.822915][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.832699][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.843455][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.852746][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.862237][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.870665][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.879597][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.889488][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.898880][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.907576][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.916687][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.925560][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.932657][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.941749][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.968808][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.983216][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.992869][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.003095][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.018782][ T8166] Bluetooth: hci0: command 0x040f tx timeout [ 221.041341][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.069320][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.079861][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.089532][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.098820][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.107671][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.117034][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.124726][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.154513][ T6914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.168694][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.193091][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.201664][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.210439][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.219847][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.252405][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.255360][ T2477] Bluetooth: hci1: command 0x040f tx timeout [ 221.262883][ T6910] device veth0_macvtap entered promiscuous mode [ 221.294746][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.318094][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.328259][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.337755][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.347725][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.358154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.376258][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.409594][ T6910] device veth1_macvtap entered promiscuous mode [ 221.440687][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.475509][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.483513][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.495992][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.503425][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.513147][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.521810][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.530624][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.539339][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.546517][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.554259][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.563314][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.571810][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.580727][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.589215][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.597189][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.607466][ T6912] device veth0_vlan entered promiscuous mode [ 221.615230][ T2644] Bluetooth: hci2: command 0x040f tx timeout [ 221.639331][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.658199][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.679088][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.692006][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.700642][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.710147][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.719043][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.726166][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.734257][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.753147][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.762031][ T2644] Bluetooth: hci3: command 0x040f tx timeout [ 221.782316][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.799952][ T6912] device veth1_vlan entered promiscuous mode [ 221.807650][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.823470][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.832929][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.849678][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.870423][ T6910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.881777][ T6910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.898313][ T6910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.909503][ T6910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.923611][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.933790][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.942910][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.951994][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.963507][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.972814][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.995267][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 222.024558][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.033599][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.042879][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.051459][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.058603][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.066907][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.076540][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.085122][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.093660][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.102760][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.109881][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.124733][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.165860][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.173854][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.183043][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.190802][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.199661][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.208205][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.217008][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.225393][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.233930][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.242990][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.252799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.264029][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.278826][ T6914] device veth0_vlan entered promiscuous mode [ 222.306386][ T6918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.333920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.379073][ T6914] device veth1_vlan entered promiscuous mode [ 222.386120][ T8166] Bluetooth: hci5: command 0x040f tx timeout [ 222.428793][ T6912] device veth0_macvtap entered promiscuous mode [ 222.484439][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.506312][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.529846][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.543941][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.553192][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.566709][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.575050][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.583243][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.592029][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.608404][ T6912] device veth1_macvtap entered promiscuous mode [ 222.642300][ T6945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.659171][ T6945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.707688][ T6850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.735480][ T6850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.742887][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.753538][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.774447][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.788088][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.797806][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.807822][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.816777][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.824532][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.834073][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.843855][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.900218][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.910931][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.923530][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.937349][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.959695][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.968579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.978763][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.984291][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.995922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.005035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.012551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.027431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.040166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.050091][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.061222][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.074347][ T6914] device veth0_macvtap entered promiscuous mode [ 223.089980][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.105332][ T8166] Bluetooth: hci0: command 0x0419 tx timeout [ 223.112468][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.130572][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.152894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.161555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.172419][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.182717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.192345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.203640][ T6914] device veth1_macvtap entered promiscuous mode [ 223.226757][ T6916] device veth0_vlan entered promiscuous mode [ 223.251152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.269876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.292984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.316379][ T6912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.329146][ T6912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.342222][ T7110] Bluetooth: hci1: command 0x0419 tx timeout [ 223.347242][ T6912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.365307][ T6912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.389597][ T6916] device veth1_vlan entered promiscuous mode [ 223.413675][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.431146][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.450947][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.473701][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.492140][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.506751][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 00:46:44 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x60801, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) [ 223.535000][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.555784][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.582532][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.591886][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.625161][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 00:46:44 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff6000/0x6000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000280)="0fd69c20161d17f6d43fd801d18b3869878d02f335862d2a0cec73fedf1405e226", 0x21}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000200)) [ 223.655386][ T8219] Bluetooth: hci2: command 0x0419 tx timeout [ 223.658671][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.691496][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.702944][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.715491][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.749634][ T8258] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 223.786894][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.802522][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.820248][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.823029][ T8219] Bluetooth: hci3: command 0x0419 tx timeout [ 223.835667][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.863802][ T6914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.882499][ T6914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.891707][ T6914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.902212][ T6914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:46:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 224.022314][ T6918] device veth0_vlan entered promiscuous mode [ 224.059893][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.081043][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.099988][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.112679][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.152742][ T6916] device veth0_macvtap entered promiscuous mode [ 224.159969][ T8231] Bluetooth: hci4: command 0x0419 tx timeout 00:46:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x7f000001, @loopback}, "00006371ae9b1c01"}}}}}, 0x0) [ 224.217996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.230572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.246790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 00:46:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 224.292394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.308225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.322643][ T6916] device veth1_macvtap entered promiscuous mode [ 224.379040][ T6918] device veth1_vlan entered promiscuous mode [ 224.408586][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.424924][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.455793][ T8231] Bluetooth: hci5: command 0x0419 tx timeout 00:46:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 224.505847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.514048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.542422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.565293][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.615902][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.623937][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.636135][ T6945] device veth0_vlan entered promiscuous mode [ 224.677469][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.700141][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.718746][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.765528][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.794431][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.806771][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:46:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 224.838232][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.867003][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.870910][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.915614][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.932848][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.953003][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.964136][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.983679][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.004561][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.039724][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.048671][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.062385][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.072030][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.080923][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.091125][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.101608][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.110927][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.122068][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.132427][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.141377][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.186522][ T6916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.229563][ T6916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.264627][ T6916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.273365][ T6916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.298521][ T6945] device veth1_vlan entered promiscuous mode [ 225.328730][ T8337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.358565][ T8337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:46:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 225.397153][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.410190][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.436077][ T6918] device veth0_macvtap entered promiscuous mode [ 225.467760][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.478600][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.525462][ T6918] device veth1_macvtap entered promiscuous mode [ 225.585037][ T8348] ================================================================== [ 225.593355][ T8348] BUG: KASAN: use-after-free in __io_uring_files_cancel+0x417/0x440 [ 225.601357][ T8348] Read of size 1 at addr ffff888033978a00 by task syz-executor.1/8348 [ 225.609508][ T8348] [ 225.611848][ T8348] CPU: 1 PID: 8348 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201009-syzkaller #0 [ 225.621648][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.631710][ T8348] Call Trace: [ 225.635125][ T8348] dump_stack+0x198/0x1fb [ 225.639462][ T8348] ? __io_uring_files_cancel+0x417/0x440 [ 225.645106][ T8348] ? __io_uring_files_cancel+0x417/0x440 [ 225.650749][ T8348] print_address_description.constprop.0.cold+0xae/0x497 [ 225.657784][ T8348] ? _raw_spin_lock_irqsave+0xa9/0xd0 [ 225.663170][ T8348] ? vprintk_func+0x95/0x1e0 [ 225.667776][ T8348] ? __io_uring_files_cancel+0x417/0x440 [ 225.673414][ T8348] ? __io_uring_files_cancel+0x417/0x440 [ 225.679053][ T8348] kasan_report.cold+0x1f/0x37 [ 225.683830][ T8348] ? __io_uring_files_cancel+0x417/0x440 [ 225.689471][ T8348] __io_uring_files_cancel+0x417/0x440 [ 225.694942][ T8348] ? __io_uring_free+0xb0/0xb0 [ 225.699720][ T8348] ? copy_semundo+0x2f0/0x2f0 [ 225.704416][ T8348] exit_files+0xe4/0x170 [ 225.708675][ T8348] do_exit+0xae9/0x2930 [ 225.712847][ T8348] ? lock_is_held_type+0xcf/0x110 [ 225.717880][ T8348] ? find_held_lock+0x2d/0x110 [ 225.722656][ T8348] ? mm_update_next_owner+0x7a0/0x7a0 [ 225.728035][ T8348] ? get_signal+0x34f/0x1f00 [ 225.732634][ T8348] ? lock_downgrade+0x7a0/0x7a0 [ 225.737504][ T8348] ? lock_is_held_type+0xcf/0x110 [ 225.742542][ T8348] do_group_exit+0x125/0x310 [ 225.747144][ T8348] get_signal+0x428/0x1f00 [ 225.751600][ T8348] arch_do_signal+0x82/0x2470 [ 225.756292][ T8348] ? _copy_to_user+0xdc/0x150 [ 225.760980][ T8348] ? copy_siginfo_to_user32+0xa0/0xa0 [ 225.766366][ T8348] ? __x64_sys_futex+0x378/0x4e0 [ 225.771311][ T8348] ? __x64_sys_futex+0x382/0x4e0 [ 225.776258][ T8348] ? do_futex+0x1a30/0x1a30 [ 225.780769][ T8348] ? check_preemption_disabled+0x50/0x130 [ 225.786507][ T8348] ? check_preemption_disabled+0x50/0x130 [ 225.792246][ T8348] exit_to_user_mode_prepare+0x1b1/0x210 [ 225.797893][ T8348] syscall_exit_to_user_mode+0x7a/0x2c0 [ 225.803452][ T8348] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.809355][ T8348] RIP: 0033:0x45de29 [ 225.813247][ T8348] Code: Unable to access opcode bytes at RIP 0x45ddff. [ 225.820096][ T8348] RSP: 002b:00007f7abccb0cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.828523][ T8348] RAX: fffffffffffffe00 RBX: 000000000118bf28 RCX: 000000000045de29 [ 225.836512][ T8348] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000118bf28 [ 225.844673][ T8348] RBP: 000000000118bf20 R08: 0000000000000000 R09: 0000000000000000 [ 225.852656][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 225.860641][ T8348] R13: 00007ffe1b39ff2f R14: 00007f7abccb19c0 R15: 000000000118bf2c [ 225.868640][ T8348] [ 225.870974][ T8348] Allocated by task 8348: [ 225.875312][ T8348] kasan_save_stack+0x1b/0x40 [ 225.879991][ T8348] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 225.882959][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.885619][ T8348] kmem_cache_alloc+0x162/0x550 [ 225.885644][ T8348] xas_alloc+0x330/0x440 [ 225.885657][ T8348] xas_create+0x2db/0x1020 [ 225.885673][ T8348] xas_store+0x8a/0x1bb0 [ 225.893793][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.897990][ T8348] io_uring_add_task_file+0x212/0x430 [ 225.898004][ T8348] io_uring_setup+0x2727/0x3660 [ 225.898017][ T8348] do_syscall_64+0x2d/0x70 [ 225.898032][ T8348] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.898036][ T8348] [ 225.898044][ T8348] Freed by task 6918: [ 225.898056][ T8348] kasan_save_stack+0x1b/0x40 [ 225.898068][ T8348] kasan_set_track+0x1c/0x30 [ 225.898079][ T8348] kasan_set_free_info+0x1b/0x30 [ 225.898090][ T8348] __kasan_slab_free+0xd8/0x120 [ 225.898100][ T8348] kmem_cache_free.part.0+0x74/0x1d0 [ 225.898112][ T8348] rcu_core+0x645/0x1240 [ 225.898122][ T8348] __do_softirq+0x203/0xac5 [ 225.898126][ T8348] [ 225.898131][ T8348] Last call_rcu(): [ 225.898141][ T8348] kasan_save_stack+0x1b/0x40 [ 225.898154][ T8348] kasan_record_aux_stack+0x82/0xb0 [ 225.898166][ T8348] call_rcu+0x15e/0x7d0 [ 225.898178][ T8348] xas_store+0xbcc/0x1bb0 [ 225.898189][ T8348] io_uring_del_task_file+0x105/0x1a0 [ 225.898202][ T8348] __io_uring_files_cancel+0x3dd/0x440 [ 225.898215][ T8348] exit_files+0xe4/0x170 [ 225.898228][ T8348] do_exit+0xae9/0x2930 [ 225.898239][ T8348] do_group_exit+0x125/0x310 [ 225.898252][ T8348] get_signal+0x428/0x1f00 [ 225.898265][ T8348] arch_do_signal+0x82/0x2470 [ 225.898279][ T8348] exit_to_user_mode_prepare+0x1b1/0x210 [ 225.898292][ T8348] syscall_exit_to_user_mode+0x7a/0x2c0 [ 225.898307][ T8348] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.898312][ T8348] [ 225.898317][ T8348] Second to last call_rcu(): [ 225.898328][ T8348] kasan_save_stack+0x1b/0x40 [ 225.898341][ T8348] kasan_record_aux_stack+0x82/0xb0 [ 225.898353][ T8348] call_rcu+0x15e/0x7d0 [ 225.898365][ T8348] delete_node+0xef/0x8c0 [ 225.898377][ T8348] __radix_tree_delete+0x190/0x370 [ 225.898389][ T8348] radix_tree_delete_item+0xe7/0x230 [ 225.898400][ T8348] free_pid+0x9b/0x260 [ 225.898417][ T8348] __change_pid+0x1c7/0x2d0 [ 225.898429][ T8348] release_task+0xd1c/0x14d0 [ 225.898438][ T8348] do_exit+0x143f/0x2930 [ 225.898458][ T8348] call_usermodehelper_exec_async+0x413/0x580 [ 225.916542][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.919192][ T8348] ret_from_fork+0x1f/0x30 [ 225.919198][ T8348] [ 225.919208][ T8348] The buggy address belongs to the object at ffff888033978a00 [ 225.919208][ T8348] which belongs to the cache radix_tree_node of size 576 [ 225.919220][ T8348] The buggy address is located 0 bytes inside of [ 225.919220][ T8348] 576-byte region [ffff888033978a00, ffff888033978c40) [ 225.919232][ T8348] The buggy address belongs to the page: [ 225.936375][ T6945] device veth0_macvtap entered promiscuous mode [ 225.939720][ T8348] page:0000000089b24eb5 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888033978ffb pfn:0x33978 [ 225.958800][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.960150][ T8348] flags: 0xfffe0000000200(slab) [ 225.960169][ T8348] raw: 00fffe0000000200 ffffea0000c66688 ffffea0000ce5e48 ffff88800ec6f000 [ 225.960186][ T8348] raw: ffff888033978ffb ffff8880339781c0 0000000100000005 0000000000000000 [ 225.977361][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.979077][ T8348] page dumped because: kasan: bad access detected [ 225.979083][ T8348] [ 225.979089][ T8348] Memory state around the buggy address: [ 225.979101][ T8348] ffff888033978900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.979115][ T8348] ffff888033978980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.983698][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.985129][ T8348] >ffff888033978a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.985135][ T8348] ^ [ 225.985146][ T8348] ffff888033978a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.985157][ T8348] ffff888033978b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.985162][ T8348] ================================================================== [ 225.985168][ T8348] Disabling lock debugging due to kernel taint [ 225.987530][ T8348] Kernel panic - not syncing: panic_on_warn set ... [ 225.993540][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.995025][ T8348] CPU: 1 PID: 8348 Comm: syz-executor.1 Tainted: G B 5.9.0-rc8-next-20201009-syzkaller #0 [ 225.995032][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.995036][ T8348] Call Trace: [ 225.995052][ T8348] dump_stack+0x198/0x1fb [ 225.995068][ T8348] ? __io_uring_files_cancel+0x3a0/0x440 [ 225.995078][ T8348] panic+0x382/0x7fb [ 225.995088][ T8348] ? __warn_printk+0xf3/0xf3 [ 225.995100][ T8348] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 225.995114][ T8348] ? trace_hardirqs_on+0x51/0x1c0 [ 225.995127][ T8348] ? __io_uring_files_cancel+0x417/0x440 [ 225.995139][ T8348] ? __io_uring_files_cancel+0x417/0x440 [ 225.995152][ T8348] end_report+0x58/0x5e [ 225.995165][ T8348] kasan_report.cold+0xd/0x37 [ 225.995178][ T8348] ? __io_uring_files_cancel+0x417/0x440 [ 225.995190][ T8348] __io_uring_files_cancel+0x417/0x440 [ 225.995203][ T8348] ? __io_uring_free+0xb0/0xb0 [ 225.995217][ T8348] ? copy_semundo+0x2f0/0x2f0 [ 225.995228][ T8348] exit_files+0xe4/0x170 [ 225.995241][ T8348] do_exit+0xae9/0x2930 [ 225.995255][ T8348] ? lock_is_held_type+0xcf/0x110 [ 225.995267][ T8348] ? find_held_lock+0x2d/0x110 [ 225.995278][ T8348] ? mm_update_next_owner+0x7a0/0x7a0 [ 225.995290][ T8348] ? get_signal+0x34f/0x1f00 [ 225.995301][ T8348] ? lock_downgrade+0x7a0/0x7a0 [ 225.995314][ T8348] ? lock_is_held_type+0xcf/0x110 [ 225.995325][ T8348] do_group_exit+0x125/0x310 [ 225.995337][ T8348] get_signal+0x428/0x1f00 [ 225.995353][ T8348] arch_do_signal+0x82/0x2470 [ 225.995366][ T8348] ? _copy_to_user+0xdc/0x150 [ 225.995377][ T8348] ? copy_siginfo_to_user32+0xa0/0xa0 [ 225.995388][ T8348] ? __x64_sys_futex+0x378/0x4e0 [ 225.995397][ T8348] ? __x64_sys_futex+0x382/0x4e0 [ 225.995408][ T8348] ? do_futex+0x1a30/0x1a30 [ 225.995419][ T8348] ? check_preemption_disabled+0x50/0x130 [ 225.995432][ T8348] ? check_preemption_disabled+0x50/0x130 [ 225.995446][ T8348] exit_to_user_mode_prepare+0x1b1/0x210 [ 225.995457][ T8348] syscall_exit_to_user_mode+0x7a/0x2c0 [ 225.995472][ T8348] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.995481][ T8348] RIP: 0033:0x45de29 [ 225.995487][ T8348] Code: Unable to access opcode bytes at RIP 0x45ddff. [ 225.995494][ T8348] RSP: 002b:00007f7abccb0cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.995507][ T8348] RAX: fffffffffffffe00 RBX: 000000000118bf28 RCX: 000000000045de29 [ 225.995515][ T8348] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000118bf28 [ 225.995522][ T8348] RBP: 000000000118bf20 R08: 0000000000000000 R09: 0000000000000000 [ 225.995529][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 225.995535][ T8348] R13: 00007ffe1b39ff2f R14: 00007f7abccb19c0 R15: 000000000118bf2c [ 225.996953][ T8348] Kernel Offset: disabled [ 226.582217][ T8348] Rebooting in 86400 seconds..