[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. 2020/10/15 10:26:26 fuzzer started 2020/10/15 10:26:27 dialing manager at 10.128.0.26:45997 2020/10/15 10:26:27 syscalls: 3264 2020/10/15 10:26:27 code coverage: enabled 2020/10/15 10:26:27 comparison tracing: enabled 2020/10/15 10:26:27 extra coverage: enabled 2020/10/15 10:26:27 setuid sandbox: enabled 2020/10/15 10:26:27 namespace sandbox: enabled 2020/10/15 10:26:27 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/15 10:26:27 fault injection: enabled 2020/10/15 10:26:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/15 10:26:27 net packet injection: enabled 2020/10/15 10:26:27 net device setup: enabled 2020/10/15 10:26:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/15 10:26:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/15 10:26:27 USB emulation: enabled 2020/10/15 10:26:27 hci packet injection: enabled 2020/10/15 10:26:27 wifi device emulation: enabled 10:27:07 executing program 0: r0 = socket(0x11, 0xa, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 10:27:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 10:27:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 10:27:08 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0}) 10:27:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000080)) 10:27:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syzkaller login: [ 99.883387][ T6888] IPVS: ftp: loaded support on port[0] = 21 [ 100.036900][ T6903] IPVS: ftp: loaded support on port[0] = 21 [ 100.257473][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 100.299626][ T7024] IPVS: ftp: loaded support on port[0] = 21 [ 100.410237][ T6903] chnl_net:caif_netlink_parms(): no params data found [ 100.489038][ T7144] IPVS: ftp: loaded support on port[0] = 21 [ 100.611695][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.620480][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.628938][ T6888] device bridge_slave_0 entered promiscuous mode [ 100.647964][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.655277][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.663182][ T6888] device bridge_slave_1 entered promiscuous mode [ 100.716559][ T7203] IPVS: ftp: loaded support on port[0] = 21 [ 100.804178][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.920116][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.930846][ T7258] IPVS: ftp: loaded support on port[0] = 21 [ 101.132445][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 101.142695][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.150321][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.158534][ T6903] device bridge_slave_0 entered promiscuous mode [ 101.167525][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.174642][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.182545][ T6903] device bridge_slave_1 entered promiscuous mode [ 101.194062][ T6888] team0: Port device team_slave_0 added [ 101.203694][ T6888] team0: Port device team_slave_1 added [ 101.217319][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 101.302399][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.311182][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.338255][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.369763][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.386161][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.393124][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.419195][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.452971][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.602077][ T6888] device hsr_slave_0 entered promiscuous mode [ 101.612934][ T6888] device hsr_slave_1 entered promiscuous mode [ 101.640274][ T6903] team0: Port device team_slave_0 added [ 101.663530][ T6903] team0: Port device team_slave_1 added [ 101.674596][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.681668][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.691269][ T7144] device bridge_slave_0 entered promiscuous mode [ 101.742782][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.766559][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.775497][ T7144] device bridge_slave_1 entered promiscuous mode [ 101.782439][ T7203] chnl_net:caif_netlink_parms(): no params data found [ 101.806985][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.813941][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.841936][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.854289][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.861987][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.865425][ T2606] Bluetooth: hci0: command 0x0409 tx timeout [ 101.876594][ T7024] device bridge_slave_0 entered promiscuous mode [ 101.932793][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.940139][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.966513][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.978959][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.986734][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.995323][ T7024] device bridge_slave_1 entered promiscuous mode [ 102.024445][ T3923] Bluetooth: hci1: command 0x0409 tx timeout [ 102.065388][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.089364][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.110311][ T7258] chnl_net:caif_netlink_parms(): no params data found [ 102.127476][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.143262][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.156480][ T6903] device hsr_slave_0 entered promiscuous mode [ 102.163913][ T6903] device hsr_slave_1 entered promiscuous mode [ 102.170852][ T6903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.180515][ T6903] Cannot create hsr debugfs directory [ 102.262686][ T7024] team0: Port device team_slave_0 added [ 102.274655][ T3923] Bluetooth: hci2: command 0x0409 tx timeout [ 102.301767][ T7144] team0: Port device team_slave_0 added [ 102.322430][ T7024] team0: Port device team_slave_1 added [ 102.358660][ T7144] team0: Port device team_slave_1 added [ 102.403361][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.416045][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.423701][ T7203] device bridge_slave_0 entered promiscuous mode [ 102.449347][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.461393][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.488076][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.501847][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.509230][ T2606] Bluetooth: hci3: command 0x0409 tx timeout [ 102.523049][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.549652][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.571337][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.578574][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.587865][ T7203] device bridge_slave_1 entered promiscuous mode [ 102.679122][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.687141][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.715070][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.728522][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.744459][ T3923] Bluetooth: hci4: command 0x0409 tx timeout [ 102.758947][ T7024] device hsr_slave_0 entered promiscuous mode [ 102.768317][ T7024] device hsr_slave_1 entered promiscuous mode [ 102.775233][ T7024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.782785][ T7024] Cannot create hsr debugfs directory [ 102.795450][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.802403][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.828638][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.841839][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.857712][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.866649][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.874315][ T7258] device bridge_slave_0 entered promiscuous mode [ 102.883738][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.891203][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.899636][ T7258] device bridge_slave_1 entered promiscuous mode [ 102.905022][ T2606] Bluetooth: hci5: command 0x0409 tx timeout [ 102.974094][ T6888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.015408][ T7203] team0: Port device team_slave_0 added [ 103.037898][ T6888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.050150][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.064311][ T7144] device hsr_slave_0 entered promiscuous mode [ 103.074135][ T7144] device hsr_slave_1 entered promiscuous mode [ 103.082248][ T7144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.089935][ T7144] Cannot create hsr debugfs directory [ 103.100590][ T7203] team0: Port device team_slave_1 added [ 103.111002][ T6888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.123814][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.160109][ T6888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.217630][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.230440][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.256595][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.311724][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.321636][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.348804][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.373227][ T7258] team0: Port device team_slave_0 added [ 103.382423][ T7258] team0: Port device team_slave_1 added [ 103.468798][ T7203] device hsr_slave_0 entered promiscuous mode [ 103.475762][ T7203] device hsr_slave_1 entered promiscuous mode [ 103.482265][ T7203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.492501][ T7203] Cannot create hsr debugfs directory [ 103.508716][ T6903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.522028][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.533270][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.567025][ T7258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.582463][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.590445][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.617536][ T7258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.643516][ T6903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.697833][ T6903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.707507][ T6903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.770672][ T7258] device hsr_slave_0 entered promiscuous mode [ 103.778614][ T7258] device hsr_slave_1 entered promiscuous mode [ 103.787852][ T7258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.795712][ T7258] Cannot create hsr debugfs directory [ 103.934666][ T7024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.944702][ T2606] Bluetooth: hci0: command 0x041b tx timeout [ 103.996806][ T7024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.011957][ T7024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.023749][ T7024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.105203][ T2606] Bluetooth: hci1: command 0x041b tx timeout [ 104.172805][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.196298][ T7144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.250715][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.261893][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.279245][ T7144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.301453][ T7144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.327576][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.342504][ T7203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.349827][ T2606] Bluetooth: hci2: command 0x041b tx timeout [ 104.363128][ T7144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.396114][ T7203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.441688][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.448905][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.463830][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.473318][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.480793][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.490979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.500273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.509178][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.516320][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.528015][ T7203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.555286][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.563736][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.584782][ T32] Bluetooth: hci3: command 0x041b tx timeout [ 104.606117][ T7203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.638195][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.652235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.683164][ T6903] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.705858][ T7258] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.720807][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.730150][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.741371][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.750565][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.759598][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.768271][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.777116][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.786069][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.793111][ T2606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.800831][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.809471][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.818081][ T2606] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.825246][ T2606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.832835][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.855958][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 104.880531][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.888422][ T7258] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.907765][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.916784][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.924784][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.933083][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.942006][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.951615][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.961121][ T6888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.984518][ T32] Bluetooth: hci5: command 0x041b tx timeout [ 104.998433][ T7258] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.008369][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.054181][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.067945][ T7258] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.079833][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.091867][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.101543][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.110558][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.120906][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.129153][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.137990][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.146197][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.154274][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.171084][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.201751][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.213064][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.223098][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.233555][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.242747][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.251884][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.260839][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.267985][ T2606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.278176][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.311915][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.321624][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.331202][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.341745][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.348890][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.381277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.390197][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.399962][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.433870][ T6888] device veth0_vlan entered promiscuous mode [ 105.456793][ T6903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.473730][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.485699][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.494144][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.508880][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.523483][ T2653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.552482][ T6888] device veth1_vlan entered promiscuous mode [ 105.580504][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.589251][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.597437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.605822][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.617263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.626429][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.635731][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.644842][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.690580][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.699315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.715397][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.723636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.758720][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.773400][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.805000][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.813629][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.822494][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.832549][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.842940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.852040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.861503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.870818][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.879821][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.886968][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.907766][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.919278][ T6888] device veth0_macvtap entered promiscuous mode [ 105.938412][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.980350][ T6888] device veth1_macvtap entered promiscuous mode [ 106.022745][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.034822][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.043022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.052703][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.061789][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.068941][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.077880][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.087253][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.097556][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.106185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.116420][ T17] Bluetooth: hci0: command 0x040f tx timeout [ 106.149447][ T7258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.163759][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.185339][ T2474] Bluetooth: hci1: command 0x040f tx timeout [ 106.203842][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.220388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.232855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.245221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.253375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.269145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.279109][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.288441][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.297173][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.305416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.328314][ T6903] device veth0_vlan entered promiscuous mode [ 106.354149][ T7203] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.368801][ T7258] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.376817][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.387100][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.396395][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.404013][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.412558][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.420819][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.425365][ T17] Bluetooth: hci2: command 0x040f tx timeout [ 106.442704][ T6903] device veth1_vlan entered promiscuous mode [ 106.462935][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.495009][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.503010][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.516917][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.527963][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.537363][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.546168][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.555108][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.563630][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.573136][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.581942][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.589069][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.597274][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.606500][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.615347][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.623855][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.632362][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.639475][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.647521][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.656989][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.664935][ T17] Bluetooth: hci3: command 0x040f tx timeout [ 106.665526][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.678044][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.685968][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.695037][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.703383][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.710511][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.723283][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.773973][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.782519][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.790766][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.799508][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.809450][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.818866][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.856432][ T6888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.866175][ T6888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.875316][ T6888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.884111][ T6888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.900192][ T7024] device veth0_vlan entered promiscuous mode [ 106.905006][ T17] Bluetooth: hci4: command 0x040f tx timeout [ 106.919345][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.929944][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.943927][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.953739][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.962649][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.971488][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.980334][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.993164][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.005899][ T6903] device veth0_macvtap entered promiscuous mode [ 107.054780][ T7024] device veth1_vlan entered promiscuous mode [ 107.062536][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.066631][ T17] Bluetooth: hci5: command 0x040f tx timeout [ 107.071335][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.083991][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.092148][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.100854][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.109813][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.118427][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.126287][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.133682][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.142552][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.151971][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.160822][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.169299][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.178270][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.187310][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.196196][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.207931][ T6903] device veth1_macvtap entered promiscuous mode [ 107.237905][ T7258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.253584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.262390][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.271688][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.282283][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.342681][ T7203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.360837][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.385608][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.399982][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.411089][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.424277][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.439575][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.455253][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.479235][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.492356][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.505309][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.514085][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.523629][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.534779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.543459][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.591039][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.602409][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.616401][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.640565][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.655351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.664127][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.673877][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.709996][ T7024] device veth0_macvtap entered promiscuous mode [ 107.731490][ T6903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.741428][ T6903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.752501][ T6903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.761318][ T6903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.783249][ T2673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.810545][ T2673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.829484][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.837770][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.846421][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.855360][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.881843][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.901421][ T7024] device veth1_macvtap entered promiscuous mode [ 107.924958][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.932984][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.945993][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.996384][ T7144] device veth0_vlan entered promiscuous mode [ 108.026077][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.038125][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.093344][ T2673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.106159][ T2673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.109908][ T7144] device veth1_vlan entered promiscuous mode [ 108.128812][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.141897][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.150474][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.166399][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.181055][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.181861][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.204626][ T17] Bluetooth: hci0: command 0x0419 tx timeout [ 108.215452][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.234518][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.242824][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.257694][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.264867][ T32] Bluetooth: hci1: command 0x0419 tx timeout [ 108.270088][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.297490][ T7258] device veth0_vlan entered promiscuous mode [ 108.313479][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.325629][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.333811][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.343930][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.362582][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.373283][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.389751][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.412016][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.451231][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 10:27:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) syz_open_procfs(0x0, &(0x7f0000272000)) [ 108.472022][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.484283][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.505102][ T32] Bluetooth: hci2: command 0x0419 tx timeout [ 108.506951][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.559434][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.587630][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.606452][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.625683][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.645070][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.657410][ T7024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.674394][ T7024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.686704][ T7024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.697739][ T7024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.715509][ T7144] device veth0_macvtap entered promiscuous mode [ 108.732367][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.743810][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.753474][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.764417][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.772297][ T32] Bluetooth: hci3: command 0x0419 tx timeout [ 108.772973][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.795570][ T7258] device veth1_vlan entered promiscuous mode 10:27:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) syz_open_procfs(0x0, &(0x7f0000272000)) [ 108.818904][ T7144] device veth1_macvtap entered promiscuous mode [ 108.852439][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.861809][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.871209][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.915976][ T7203] device veth0_vlan entered promiscuous mode 10:27:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) syz_open_procfs(0x0, &(0x7f0000272000)) [ 108.962699][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.985293][ T32] Bluetooth: hci4: command 0x0419 tx timeout [ 109.006832][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.037796][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.064317][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:27:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) [ 109.098955][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.114868][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.143936][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.153122][ T8178] Bluetooth: hci5: command 0x0419 tx timeout [ 109.183217][ T7203] device veth1_vlan entered promiscuous mode 10:27:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) [ 109.228083][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.241043][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 10:27:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) syz_open_procfs(0x0, &(0x7f0000272000)) [ 109.272476][ T7258] device veth0_macvtap entered promiscuous mode [ 109.298468][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.310887][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.322202][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.333972][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.345626][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 10:27:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) [ 109.373775][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.410970][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.444778][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.453435][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.483124][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 10:27:18 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="23e9e76eb8c14e5b4f3a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='afs\x00', 0x0, 0x0) [ 109.493561][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.507817][ T7258] device veth1_macvtap entered promiscuous mode [ 109.542190][ T7144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.560538][ T7144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.576049][ T7144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.588102][ T7144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.635083][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.643320][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.733245][ T7203] device veth0_macvtap entered promiscuous mode [ 109.763099][ T8178] ================================================================== [ 109.771421][ T8178] BUG: KASAN: use-after-free in afs_manage_cell+0xf72/0x11c0 [ 109.778808][ T8178] Write of size 8 at addr ffff88809dced088 by task kworker/1:5/8178 [ 109.786778][ T8178] [ 109.789112][ T8178] CPU: 1 PID: 8178 Comm: kworker/1:5 Not tainted 5.9.0-syzkaller #0 [ 109.797084][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.807145][ T8178] Workqueue: afs afs_manage_cell [ 109.812087][ T8178] Call Trace: [ 109.815394][ T8178] dump_stack+0x198/0x1fb [ 109.819725][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 109.824748][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 109.829777][ T8178] print_address_description.constprop.0.cold+0xae/0x497 [ 109.836800][ T8178] ? check_preemption_disabled+0x50/0x130 [ 109.842520][ T8178] ? _raw_spin_lock_irqsave+0xa9/0xd0 [ 109.847903][ T8178] ? vprintk_func+0x95/0x1e0 [ 109.852498][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 109.858046][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 109.863078][ T8178] kasan_report.cold+0x1f/0x37 [ 109.867856][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 109.872888][ T8178] afs_manage_cell+0xf72/0x11c0 [ 109.877861][ T8178] ? afs_cell_destroy+0x240/0x240 [ 109.882896][ T8178] ? lock_is_held_type+0xcf/0x110 [ 109.887934][ T8178] process_one_work+0x933/0x15a0 [ 109.892889][ T8178] ? pwq_dec_nr_in_flight+0x320/0x320 [ 109.898273][ T8178] ? rwlock_bug.part.0+0x90/0x90 [ 109.903227][ T8178] worker_thread+0x64c/0x1120 [ 109.907921][ T8178] ? __kthread_parkme+0x13f/0x1e0 [ 109.912952][ T8178] ? process_one_work+0x15a0/0x15a0 [ 109.918157][ T8178] kthread+0x3b5/0x4a0 [ 109.922228][ T8178] ? __kthread_bind_mask+0xc0/0xc0 [ 109.927359][ T8178] ret_from_fork+0x1f/0x30 [ 109.931790][ T8178] [ 109.934116][ T8178] Allocated by task 8260: [ 109.938449][ T8178] kasan_save_stack+0x1b/0x40 [ 109.943129][ T8178] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 109.948764][ T8178] kmem_cache_alloc_trace+0x174/0x300 [ 109.954138][ T8178] afs_lookup_cell+0x5b8/0x1450 [ 109.958995][ T8178] afs_parse_param+0x404/0x8c0 [ 109.963760][ T8178] vfs_parse_fs_param+0x203/0x550 [ 109.968786][ T8178] vfs_parse_fs_string+0xe6/0x150 [ 109.973830][ T8178] path_mount+0x5de/0x20a0 [ 109.978238][ T8178] __x64_sys_mount+0x27f/0x300 [ 109.978265][ T8178] do_syscall_64+0x2d/0x70 [ 109.978285][ T8178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 109.978291][ T8178] [ 109.978298][ T8178] Freed by task 7203: [ 109.984014][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.987539][ T8178] kasan_save_stack+0x1b/0x40 [ 109.987561][ T8178] kasan_set_track+0x1c/0x30 [ 109.987573][ T8178] kasan_set_free_info+0x1b/0x30 [ 109.987584][ T8178] __kasan_slab_free+0xd8/0x120 [ 109.987602][ T8178] kfree+0x10e/0x2a0 [ 109.987616][ T8178] rcu_core+0x5ca/0x1130 [ 109.998081][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.999827][ T8178] __do_softirq+0x203/0xac5 [ 109.999838][ T8178] [ 110.032643][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.034712][ T8178] Last call_rcu(): [ 110.034732][ T8178] kasan_save_stack+0x1b/0x40 [ 110.034744][ T8178] kasan_record_aux_stack+0x82/0xb0 [ 110.034758][ T8178] call_rcu+0x15e/0x7c0 [ 110.034771][ T8178] afs_manage_cell+0x250/0x11c0 [ 110.034784][ T8178] process_one_work+0x933/0x15a0 [ 110.034803][ T8178] worker_thread+0x64c/0x1120 [ 110.034814][ T8178] kthread+0x3b5/0x4a0 [ 110.042341][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.046610][ T8178] ret_from_fork+0x1f/0x30 [ 110.046616][ T8178] [ 110.046626][ T8178] The buggy address belongs to the object at ffff88809dced000 [ 110.046626][ T8178] which belongs to the cache kmalloc-1k of size 1024 [ 110.046638][ T8178] The buggy address is located 136 bytes inside of [ 110.046638][ T8178] 1024-byte region [ffff88809dced000, ffff88809dced400) [ 110.046648][ T8178] The buggy address belongs to the page: [ 110.139945][ T8178] page:0000000047856fe6 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9dced [ 110.150091][ T8178] flags: 0xfffe0000000200(slab) [ 110.154948][ T8178] raw: 00fffe0000000200 ffffea00027e6208 ffffea00023eb3c8 ffff8880aa040700 [ 110.160614][ T7203] device veth1_macvtap entered promiscuous mode [ 110.163527][ T8178] raw: 0000000000000000 ffff88809dced000 0000000100000002 0000000000000000 [ 110.178316][ T8178] page dumped because: kasan: bad access detected [ 110.178469][ T7258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.184714][ T8178] [ 110.184720][ T8178] Memory state around the buggy address: [ 110.184733][ T8178] ffff88809dcecf80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 110.184744][ T8178] ffff88809dced000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.184754][ T8178] >ffff88809dced080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.184766][ T8178] ^ [ 110.197016][ T7258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.197481][ T8178] ffff88809dced100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.203182][ T7258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.211220][ T8178] ffff88809dced180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.211227][ T8178] ================================================================== [ 110.211232][ T8178] Disabling lock debugging due to kernel taint [ 110.221345][ T8178] Kernel panic - not syncing: panic_on_warn set ... [ 110.221362][ T8178] CPU: 1 PID: 8178 Comm: kworker/1:5 Tainted: G B 5.9.0-syzkaller #0 [ 110.221369][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.221384][ T8178] Workqueue: afs afs_manage_cell [ 110.221391][ T8178] Call Trace: [ 110.221407][ T8178] dump_stack+0x198/0x1fb [ 110.221419][ T8178] ? afs_manage_cell+0xf00/0x11c0 [ 110.221431][ T8178] panic+0x382/0x7fb [ 110.221443][ T8178] ? __warn_printk+0xf3/0xf3 [ 110.221458][ T8178] ? preempt_schedule_common+0x59/0xc0 [ 110.221470][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 110.221483][ T8178] ? preempt_schedule_thunk+0x16/0x18 [ 110.221497][ T8178] ? trace_hardirqs_on+0x51/0x1c0 [ 110.221508][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 110.221518][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 110.221530][ T8178] end_report+0x58/0x5e [ 110.221541][ T8178] kasan_report.cold+0xd/0x37 [ 110.221553][ T8178] ? afs_manage_cell+0xf72/0x11c0 [ 110.221564][ T8178] afs_manage_cell+0xf72/0x11c0 [ 110.221577][ T8178] ? afs_cell_destroy+0x240/0x240 [ 110.221590][ T8178] ? lock_is_held_type+0xcf/0x110 [ 110.221604][ T8178] process_one_work+0x933/0x15a0 [ 110.221619][ T8178] ? pwq_dec_nr_in_flight+0x320/0x320 [ 110.221634][ T8178] ? rwlock_bug.part.0+0x90/0x90 [ 110.221648][ T8178] worker_thread+0x64c/0x1120 [ 110.221662][ T8178] ? __kthread_parkme+0x13f/0x1e0 [ 110.221674][ T8178] ? process_one_work+0x15a0/0x15a0 [ 110.221685][ T8178] kthread+0x3b5/0x4a0 [ 110.221696][ T8178] ? __kthread_bind_mask+0xc0/0xc0 [ 110.221708][ T8178] ret_from_fork+0x1f/0x30 [ 110.222997][ T8178] Kernel Offset: disabled [ 110.445063][ T8178] Rebooting in 86400 seconds..