[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.6' (ECDSA) to the list of known hosts. 2020/08/02 11:18:45 fuzzer started 2020/08/02 11:18:45 dialing manager at 10.128.0.26:46491 2020/08/02 11:18:45 syscalls: 3273 2020/08/02 11:18:45 code coverage: enabled 2020/08/02 11:18:45 comparison tracing: enabled 2020/08/02 11:18:45 extra coverage: enabled 2020/08/02 11:18:45 setuid sandbox: enabled 2020/08/02 11:18:45 namespace sandbox: enabled 2020/08/02 11:18:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/02 11:18:45 fault injection: enabled 2020/08/02 11:18:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/02 11:18:45 net packet injection: enabled 2020/08/02 11:18:45 net device setup: enabled 2020/08/02 11:18:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/02 11:18:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/02 11:18:45 USB emulation: enabled 2020/08/02 11:18:45 hci packet injection: enabled 11:21:47 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) syzkaller login: [ 240.627003][ T6851] IPVS: ftp: loaded support on port[0] = 21 11:21:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/248, 0xf8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000001840)=[{&(0x7f00000000c0)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) [ 240.783794][ T6851] chnl_net:caif_netlink_parms(): no params data found [ 240.879909][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.887399][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.897006][ T6851] device bridge_slave_0 entered promiscuous mode [ 240.906844][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.915059][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.923304][ T6851] device bridge_slave_1 entered promiscuous mode [ 240.954309][ T6851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.966290][ T6851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.016210][ T6851] team0: Port device team_slave_0 added [ 241.034833][ T6989] IPVS: ftp: loaded support on port[0] = 21 [ 241.041936][ T6851] team0: Port device team_slave_1 added [ 241.091673][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.098661][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.128459][ T6851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 11:21:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 241.148620][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.156580][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.185888][ T6851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.354610][ T6851] device hsr_slave_0 entered promiscuous mode [ 241.391665][ T6851] device hsr_slave_1 entered promiscuous mode 11:21:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/248, 0xf8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000001840)=[{&(0x7f00000000c0)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) [ 241.456021][ T7037] IPVS: ftp: loaded support on port[0] = 21 [ 241.726869][ T6989] chnl_net:caif_netlink_parms(): no params data found [ 241.735657][ T7087] IPVS: ftp: loaded support on port[0] = 21 [ 242.025619][ T7037] chnl_net:caif_netlink_parms(): no params data found 11:21:49 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) writev(r0, &(0x7f0000001740)=[{&(0x7f00000000c0)="12", 0x1}], 0x1) recvfrom$inet6(r0, &(0x7f0000000000)=""/194, 0xc2, 0x0, 0x0, 0x0) [ 242.092801][ T6851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.183337][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.199968][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.208088][ T6989] device bridge_slave_0 entered promiscuous mode [ 242.244737][ T6851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.295793][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.314987][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.326762][ T6989] device bridge_slave_1 entered promiscuous mode [ 242.348126][ T6851] netdevsim netdevsim0 netdevsim2: renamed from eth2 11:21:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/248, 0xf8}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000001840)=[{&(0x7f00000000c0)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) [ 242.433705][ T6851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.517406][ T7087] chnl_net:caif_netlink_parms(): no params data found [ 242.555696][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.575091][ T7398] IPVS: ftp: loaded support on port[0] = 21 [ 242.601284][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.606331][ T7408] IPVS: ftp: loaded support on port[0] = 21 [ 242.608459][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.625171][ T7037] device bridge_slave_0 entered promiscuous mode [ 242.647265][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.674975][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.683028][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.694536][ T7037] device bridge_slave_1 entered promiscuous mode [ 242.734313][ T6989] team0: Port device team_slave_0 added [ 242.767828][ T6989] team0: Port device team_slave_1 added [ 242.799157][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.806247][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.833731][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.854251][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.881372][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.888347][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.915979][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.936524][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.968293][ T7037] team0: Port device team_slave_0 added [ 242.997885][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.005194][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.013282][ T7087] device bridge_slave_0 entered promiscuous mode [ 243.028219][ T7037] team0: Port device team_slave_1 added [ 243.053067][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.062950][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.072764][ T7087] device bridge_slave_1 entered promiscuous mode [ 243.094980][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.102888][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.129425][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.148134][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.155201][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.182853][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.272980][ T6989] device hsr_slave_0 entered promiscuous mode [ 243.310217][ T6989] device hsr_slave_1 entered promiscuous mode [ 243.360083][ T6989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.367865][ T6989] Cannot create hsr debugfs directory [ 243.380640][ T7087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.494612][ T7087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.541509][ T7398] chnl_net:caif_netlink_parms(): no params data found [ 243.583762][ T7037] device hsr_slave_0 entered promiscuous mode [ 243.640303][ T7037] device hsr_slave_1 entered promiscuous mode [ 243.689957][ T7037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.697547][ T7037] Cannot create hsr debugfs directory [ 243.738094][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 243.803321][ T7087] team0: Port device team_slave_0 added [ 243.856482][ T7087] team0: Port device team_slave_1 added [ 243.937740][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.964259][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.971887][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.999154][ T7087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.052325][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.059304][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.086218][ T7087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.126917][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.134362][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.143801][ T7398] device bridge_slave_0 entered promiscuous mode [ 244.167590][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.175286][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.183758][ T7408] device bridge_slave_0 entered promiscuous mode [ 244.195913][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.203585][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.212255][ T7408] device bridge_slave_1 entered promiscuous mode [ 244.234100][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.241344][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.249010][ T7398] device bridge_slave_1 entered promiscuous mode [ 244.281473][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.293975][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.305601][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.336389][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.421965][ T7087] device hsr_slave_0 entered promiscuous mode [ 244.451204][ T7087] device hsr_slave_1 entered promiscuous mode [ 244.509979][ T7087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.517557][ T7087] Cannot create hsr debugfs directory [ 244.534448][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.584198][ T7398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.606498][ T7408] team0: Port device team_slave_0 added [ 244.640529][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.651084][ T7408] team0: Port device team_slave_1 added [ 244.662622][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.673377][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.682092][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.689260][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.697600][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.707408][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.715962][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.723088][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.779180][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.787634][ T6989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.857626][ T6989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.913819][ T6989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.976912][ T6989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.024746][ T7398] team0: Port device team_slave_0 added [ 245.039676][ T7398] team0: Port device team_slave_1 added [ 245.058540][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.087099][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.095490][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.121794][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.139641][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.166817][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.174787][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.203138][ T7398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.216578][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.224251][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.250259][ T7398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.267492][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.275158][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.301203][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.345073][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.353953][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.364480][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.410142][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.423166][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.514144][ T7398] device hsr_slave_0 entered promiscuous mode [ 245.571202][ T7398] device hsr_slave_1 entered promiscuous mode [ 245.610022][ T7398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.617610][ T7398] Cannot create hsr debugfs directory [ 245.685387][ T7408] device hsr_slave_0 entered promiscuous mode [ 245.740350][ T7408] device hsr_slave_1 entered promiscuous mode [ 245.780041][ T7408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.787647][ T7408] Cannot create hsr debugfs directory [ 245.802305][ T7037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.858252][ T6851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.870037][ T6851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.882583][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.891945][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.901088][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.909349][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.963486][ T7037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.995697][ T7037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.052849][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.097174][ T7037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.183695][ T7087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.256985][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.298069][ T7087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.357166][ T7087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.419513][ T7087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.529227][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.538502][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.553199][ T6989] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.585609][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.606756][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.617295][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.665879][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.676522][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.685747][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.692868][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.700971][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.709506][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.718113][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.725244][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.733020][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.742603][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.787748][ T7398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.825989][ T7398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.873085][ T7398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.955912][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.985319][ T7398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.042171][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.051832][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.070782][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.107501][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.116423][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.126518][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.136021][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.171254][ T7408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.232047][ T7408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.272024][ T7408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.323923][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.332384][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.355207][ T6989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.367933][ T6989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.383709][ T7408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.434208][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.443121][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.471186][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.504985][ T6851] device veth0_vlan entered promiscuous mode [ 247.533576][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.541832][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.557933][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.568170][ T6851] device veth1_vlan entered promiscuous mode [ 247.600242][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.608656][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.617542][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.626911][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.635219][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.643683][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.651811][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.679483][ T6989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.707256][ T7087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.715324][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.724578][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.733390][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.742160][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.749217][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.756955][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.766448][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.775021][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.782162][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.790883][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.817930][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.861005][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.875779][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.885836][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.896160][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.905214][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.914900][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.923373][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.939092][ T6851] device veth0_macvtap entered promiscuous mode [ 247.976288][ T7087] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.983688][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.993389][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.005070][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.013897][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.023397][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.032956][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.048603][ T6851] device veth1_macvtap entered promiscuous mode [ 248.073737][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.097891][ T7037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.108387][ T7037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.130201][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.138199][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.147450][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.158738][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.169456][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.180244][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.188773][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.197977][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.205098][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.214812][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.223279][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.239968][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.248293][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.281274][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.289513][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.299167][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.307258][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.315720][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.324390][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.334099][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.356962][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.372604][ T7398] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.379549][ T6989] device veth0_vlan entered promiscuous mode [ 248.390784][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.400900][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.411744][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.420439][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.427488][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.435713][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.444595][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.484587][ T6851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.496651][ T6851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.514801][ T6851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.524597][ T6851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.545979][ T7408] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.554019][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.564842][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.573934][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.581057][ T6528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.589701][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.597705][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.605464][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.614852][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.623052][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.631815][ T6989] device veth1_vlan entered promiscuous mode [ 248.638797][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.648223][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.737642][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.745025][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.759099][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.769065][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.778255][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.785412][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.793928][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.803218][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.812224][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.819442][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.854821][ T7087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.865469][ T7087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.972057][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.981424][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.990499][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.998936][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.008793][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.017644][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.026373][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.035596][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.044951][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.053480][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.062149][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.070972][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.079269][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.086388][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.095449][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.105158][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.201664][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.215169][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.224133][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.236949][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.245968][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.255807][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.264662][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.275181][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.284998][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.293870][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.304406][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.335125][ T7398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.352042][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.370035][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.378914][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.388250][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.397504][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.406671][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.414561][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.422864][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.431620][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.463686][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.472503][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.481913][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.490813][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.499130][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.507863][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.516578][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.528215][ T7087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.553400][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.597091][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.606680][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.623895][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.634121][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.651919][ T7037] device veth0_vlan entered promiscuous mode [ 249.670282][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.678864][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.709490][ T6989] device veth0_macvtap entered promiscuous mode [ 249.722298][ T6989] device veth1_macvtap entered promiscuous mode [ 249.732634][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.744232][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.753105][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.765529][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.779341][ T7037] device veth1_vlan entered promiscuous mode [ 249.811976][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.824479][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.832249][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.839615][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.851402][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.867331][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.884657][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.900197][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.919418][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.941540][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.948744][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.958158][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.976121][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.986890][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.996655][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.007307][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.025850][ T7087] device veth0_vlan entered promiscuous mode [ 250.045625][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.057749][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.077348][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.101333][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.109590][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.119601][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.148442][ T7087] device veth1_vlan entered promiscuous mode [ 250.173941][ T6989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.184170][ T6989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.193567][ T6989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.202363][ T6989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.235817][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.244739][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.254895][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.264145][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.345673][ T7037] device veth0_macvtap entered promiscuous mode [ 250.418139][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.432957][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.441972][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.450781][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.469778][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 11:21:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f00000001c0)) [ 250.547368][ T7398] device veth0_vlan entered promiscuous mode [ 250.568372][ T7037] device veth1_macvtap entered promiscuous mode 11:21:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) [ 250.649852][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.680792][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.697961][ T7408] device veth0_vlan entered promiscuous mode [ 250.742334][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.758472][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.768385][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.784831][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.796641][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.819443][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 11:21:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1d, &(0x7f0000001340)={0x0, 0x0}, 0x10) [ 250.847829][ T7398] device veth1_vlan entered promiscuous mode [ 250.867111][ T7408] device veth1_vlan entered promiscuous mode [ 250.895616][ T7087] device veth0_macvtap entered promiscuous mode [ 250.917884][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.929380][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:21:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 250.946304][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.957301][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.997187][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.005611][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.017363][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.027282][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.036780][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 11:21:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 251.048274][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.058966][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.084956][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 11:21:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 251.138062][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.154786][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.208380][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.232000][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:21:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 251.262847][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.283061][ T7087] device veth1_macvtap entered promiscuous mode [ 251.320211][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.328435][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.343087][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.354842][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.368218][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.393485][ T7037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.412968][ T7037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.440200][ T7037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.463998][ T7037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.518909][ T7398] device veth0_macvtap entered promiscuous mode [ 251.528394][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.538633][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.548687][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.560792][ T7087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 251.583107][ T7087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.593476][ T7087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 251.605327][ T7087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.615518][ T7087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 251.627742][ T7087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.639220][ T7087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.651454][ T7087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.663194][ T7087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.673128][ T7087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.691774][ T7087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.712698][ T7087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.723930][ T7087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.755975][ T7087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.815383][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.825666][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.836104][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.846837][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.856371][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.866634][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.880132][ T7398] device veth1_macvtap entered promiscuous mode [ 251.888198][ T7408] device veth0_macvtap entered promiscuous mode [ 251.971141][ T7087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.980208][ T7087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.988970][ T7087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.000959][ T7087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.014022][ T7408] device veth1_macvtap entered promiscuous mode [ 252.037608][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.050445][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.062446][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.073333][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.084444][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.095367][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.106034][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.116941][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.134443][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.202425][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.210488][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.218457][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.226960][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.235861][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.248018][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.265727][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.275764][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.288247][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.298182][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.309057][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.318956][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.331311][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.343094][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.400355][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 252.441440][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.451090][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.464363][ T7398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.473706][ T7398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.489682][ T7398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.502173][ T7398] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.620204][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.631009][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.644023][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.655093][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.665439][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.676511][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.686981][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.697965][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.708803][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:21:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x4, "a4dce3", 0xe5, 0xfd}) [ 252.724656][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.737563][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.795531][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.805706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 252.816015][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.841285][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.862698][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.879813][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.893679][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.904144][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.915165][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.925461][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.936451][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.946940][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.957527][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.971097][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.083845][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.093118][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.105362][ T7408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.115959][ T7408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.125686][ T7408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.134812][ T7408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 11:22:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) [ 253.760498][ T6528] Bluetooth: hci1: command 0x0409 tx timeout [ 254.480383][ T2585] Bluetooth: hci0: command 0x041b tx timeout 11:22:01 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x541b, &(0x7f0000000100)) 11:22:01 executing program 0: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:02 executing program 5: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_to_team\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89a2, &(0x7f0000000000)) 11:22:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f0000001340)={0x0, 0x0}, 0x10) 11:22:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000740)={'ip6erspan0\x00', 0x1}) 11:22:02 executing program 4: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_to_team\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8924, &(0x7f0000000000)) 11:22:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f0000000100)) 11:22:02 executing program 0: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}}) 11:22:02 executing program 0: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)=@ethtool_sset_info={0xa}}) [ 255.521351][ T8139] Bluetooth: hci2: command 0x0409 tx timeout 11:22:02 executing program 2: syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0xc8, 0x0, 0x0, @none}}}}, 0x16) 11:22:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:02 executing program 3: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) [ 255.717121][ T8119] debugfs: Directory '200' with parent 'hci2' already present! [ 255.725677][ T8119] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 255.736474][ T8119] CPU: 0 PID: 8119 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 255.746117][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.756366][ T8119] Workqueue: hci2 hci_rx_work [ 255.761101][ T8119] Call Trace: [ 255.764509][ T8119] dump_stack+0x18f/0x20d [ 255.768935][ T8119] sysfs_warn_dup.cold+0x1c/0x2d [ 255.773885][ T8119] sysfs_create_dir_ns+0x233/0x290 [ 255.779005][ T8119] ? sysfs_create_mount_point+0xb0/0xb0 [ 255.784645][ T8119] ? rwlock_bug.part.0+0x90/0x90 [ 255.789606][ T8119] ? do_raw_spin_unlock+0x171/0x230 [ 255.795164][ T8119] kobject_add_internal+0x2c3/0x940 [ 255.800377][ T8119] kobject_add+0x150/0x1c0 [ 255.804799][ T8119] ? kset_create_and_add+0x190/0x190 [ 255.810148][ T8119] ? lockdep_init_map_waits+0x26a/0x8a0 [ 255.815707][ T8119] ? __raw_spin_lock_init+0x34/0x100 [ 255.821086][ T8119] ? device_add+0x33b/0x1c40 [ 255.825702][ T8119] device_add+0x35a/0x1c40 [ 255.830153][ T8119] ? devlink_add_symlinks+0x450/0x450 [ 255.835617][ T8119] ? hci_debugfs_create_conn+0x179/0x1f0 [ 255.841265][ T8119] ? hci_debugfs_create_le+0x850/0x850 [ 255.847563][ T8119] hci_conn_add_sysfs+0x84/0xe0 [ 255.852428][ T8119] le_conn_complete_evt+0xc09/0x1740 [ 255.857730][ T8119] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 255.864333][ T8119] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 255.870332][ T8119] hci_le_meta_evt+0xe55/0x3fd0 [ 255.875191][ T8119] ? find_held_lock+0x2d/0x110 [ 255.879964][ T8119] ? mark_lock+0xbc/0x1710 [ 255.884395][ T8119] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 255.891248][ T8119] ? mark_lock+0xbc/0x1710 [ 255.895676][ T8119] ? __lock_acquire+0x16cb/0x5640 [ 255.900736][ T8119] ? __lock_acquire+0x16cb/0x5640 [ 255.905773][ T8119] hci_event_packet+0x2e25/0x87a8 [ 255.910812][ T8119] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 255.916799][ T8119] ? __lock_acquire+0x16cb/0x5640 [ 255.921837][ T8119] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 255.927391][ T8119] ? lock_acquire+0x1f1/0xad0 [ 255.932166][ T8119] ? skb_dequeue+0x1c/0x180 [ 255.936679][ T8119] ? find_held_lock+0x2d/0x110 [ 255.941449][ T8119] ? mark_lock+0xbc/0x1710 [ 255.945876][ T8119] ? mark_held_locks+0x9f/0xe0 [ 255.950733][ T8119] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 255.956549][ T8119] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 255.962594][ T8119] ? trace_hardirqs_on+0x5f/0x220 [ 255.967673][ T8119] ? lockdep_hardirqs_on+0x76/0xf0 [ 255.972797][ T8119] hci_rx_work+0x22e/0xb50 [ 255.977309][ T8119] process_one_work+0x94c/0x1670 [ 255.982266][ T8119] ? lock_release+0x8e0/0x8e0 [ 255.986957][ T8119] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 255.992342][ T8119] ? rwlock_bug.part.0+0x90/0x90 [ 255.997295][ T8119] ? lockdep_hardirqs_off+0x7e/0xb0 [ 256.002531][ T8119] worker_thread+0x64c/0x1120 [ 256.009147][ T8119] ? process_one_work+0x1670/0x1670 [ 256.014354][ T8119] kthread+0x3b5/0x4a0 11:22:03 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{}, {0x0, "3472ebb10e928eba"}}}}, 0xf) 11:22:03 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f0000000100)=@ethtool_test={0x4a}}) 11:22:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:03 executing program 2: syz_emit_vhci(&(0x7f0000000c80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 11:22:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) [ 256.018428][ T8119] ? __kthread_bind_mask+0xc0/0xc0 [ 256.023540][ T8119] ? __kthread_bind_mask+0xc0/0xc0 [ 256.028758][ T8119] ret_from_fork+0x1f/0x30 [ 256.059762][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 256.085811][ T8119] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 256.099591][ T8119] Bluetooth: hci2: failed to register connection device 11:22:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) [ 256.107321][ T8119] debugfs: Directory '200' with parent 'hci2' already present! [ 256.115385][ T8119] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 256.125208][ T8119] CPU: 1 PID: 8119 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 256.134844][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.144908][ T8119] Workqueue: hci2 hci_rx_work [ 256.149589][ T8119] Call Trace: [ 256.152918][ T8119] dump_stack+0x18f/0x20d 11:22:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x80}, {0x6}]}, 0x10) [ 256.157260][ T8119] sysfs_warn_dup.cold+0x1c/0x2d [ 256.162207][ T8119] sysfs_create_dir_ns+0x233/0x290 [ 256.167352][ T8119] ? sysfs_create_mount_point+0xb0/0xb0 [ 256.172909][ T8119] ? rwlock_bug.part.0+0x90/0x90 [ 256.177859][ T8119] ? do_raw_spin_unlock+0x171/0x230 [ 256.183069][ T8119] kobject_add_internal+0x2c3/0x940 [ 256.188280][ T8119] kobject_add+0x150/0x1c0 [ 256.194268][ T8119] ? kset_create_and_add+0x190/0x190 [ 256.199569][ T8119] ? lockdep_init_map_waits+0x26a/0x8a0 [ 256.205131][ T8119] ? __raw_spin_lock_init+0x34/0x100 [ 256.210424][ T8119] ? device_add+0x33b/0x1c40 [ 256.215025][ T8119] device_add+0x35a/0x1c40 [ 256.219456][ T8119] ? devlink_add_symlinks+0x450/0x450 [ 256.224837][ T8119] ? hci_debugfs_create_conn+0x179/0x1f0 [ 256.230474][ T8119] ? hci_debugfs_create_le+0x850/0x850 [ 256.235945][ T8119] hci_conn_add_sysfs+0x84/0xe0 [ 256.240808][ T8119] le_conn_complete_evt+0xc09/0x1740 [ 256.246114][ T8119] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 256.252778][ T8119] ? debug_check_no_obj_freed+0x20c/0x41c 11:22:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x400448c9, 0x0) 11:22:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000001440)={'macvlan0\x00'}) [ 256.258539][ T8119] hci_le_meta_evt+0xe55/0x3fd0 [ 256.263399][ T8119] ? mark_lock+0xbc/0x1710 [ 256.267832][ T8119] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 256.274688][ T8119] ? mark_lock+0xbc/0x1710 [ 256.279112][ T8119] ? lock_is_held_type+0xbb/0xf0 [ 256.284065][ T8119] ? __lock_acquire+0x16cb/0x5640 [ 256.289104][ T8119] hci_event_packet+0x2e25/0x87a8 [ 256.294229][ T8119] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 256.300219][ T8119] ? __lock_acquire+0x16cb/0x5640 [ 256.305254][ T8119] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 256.310812][ T8119] ? lock_acquire+0x1f1/0xad0 [ 256.315494][ T8119] ? skb_dequeue+0x1c/0x180 [ 256.320012][ T8119] ? find_held_lock+0x2d/0x110 [ 256.324914][ T8119] ? mark_lock+0xbc/0x1710 [ 256.329346][ T8119] ? mark_held_locks+0x9f/0xe0 [ 256.334131][ T8119] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 256.339948][ T8119] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 256.345940][ T8119] ? trace_hardirqs_on+0x5f/0x220 [ 256.350973][ T8119] ? lockdep_hardirqs_on+0x76/0xf0 [ 256.356097][ T8119] hci_rx_work+0x22e/0xb50 11:22:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000080)) [ 256.360535][ T8119] process_one_work+0x94c/0x1670 [ 256.365496][ T8119] ? lock_release+0x8e0/0x8e0 [ 256.370183][ T8119] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 256.375740][ T8119] ? rwlock_bug.part.0+0x90/0x90 [ 256.380692][ T8119] ? lockdep_hardirqs_off+0x7e/0xb0 [ 256.385907][ T8119] worker_thread+0x64c/0x1120 [ 256.390619][ T8119] ? process_one_work+0x1670/0x1670 [ 256.395946][ T8119] kthread+0x3b5/0x4a0 [ 256.400111][ T8119] ? __kthread_bind_mask+0xc0/0xc0 [ 256.405269][ T8119] ? __kthread_bind_mask+0xc0/0xc0 [ 256.410395][ T8119] ret_from_fork+0x1f/0x30 [ 256.423838][ T17] Bluetooth: hci1: command 0x041b tx timeout [ 256.429919][ T8119] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 256.443194][ T8119] Bluetooth: hci2: failed to register connection device [ 256.453181][ T8139] Bluetooth: hci4: command 0x0409 tx timeout 11:22:03 executing program 1: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 11:22:03 executing program 2: getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000000)=0x34) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) 11:22:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000100)) 11:22:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x3) connect(r0, &(0x7f0000000240)=@sco, 0x80) 11:22:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000000)={0x3a, 0x0, "e437d3"}) [ 256.560185][ T12] Bluetooth: hci0: command 0x040f tx timeout 11:22:03 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir}) 11:22:03 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x500, &(0x7f0000001300)=[{}, {}, {}, {}]}, 0x10) 11:22:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x12, 0xa, 0x0, &(0x7f0000000040)) 11:22:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000140)="3d332c05", 0x4) 11:22:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x8, 0x4) 11:22:04 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:04 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f0000000100)=@ethtool_test={0x4d}}) 11:22:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) 11:22:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) 11:22:04 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) 11:22:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000140)="3d332c05", 0x4) 11:22:04 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 11:22:04 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x1, 0x101}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x4, &(0x7f0000001300)=[{0x8001, 0x8, 0x3f, 0x11}, {0x6, 0x7, 0x4, 0x4}, {0x0, 0x2, 0x8, 0x9}, {0x101, 0x1, 0x81, 0x4}]}, 0x10) 11:22:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='team_slave_0\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f0000000000)={0xffffffffffffff69, 0x0}, 0x10) 11:22:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000140)="3d332c05", 0x4) 11:22:04 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180), 0x4) 11:22:04 executing program 5: syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}}}, 0x7) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}}}, 0x5) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="e4c216e5b112c68fcd35db4064ebc75876"], 0xe) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xc0, @any, "b18e32e380ba39c42805ffd0b06da32e32dbe706a37f488c23ed583fdcb906d4145709fecd55c40518d0c1b83aaf0f017d6a726a0a53363f044e34459ea05907f07ec66e98eb7e8f9044020d12558fc92dd39c774e1b6c8aae742e25b8358d8468e43b87ef57eeac88419bd782967a6aac888284c4a242f67f34eb599ae0c810bd726fb9c36d8d7307c8926d43584353d87a03c6e6e9f288acc40e99bb01c6ab26964b2ad67a4d51d38d3856aaf05ed6c18da854b21ebca6133aee95ef58e54c6b2907b344dcb391993ff4a69a7a56f5dc1db28f644863c5585907d86077474cb908231a64e9f84484adaf068b293c368e550ce1ed760056"}}}, 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 11:22:04 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) [ 257.247722][ T8119] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 257.259481][ T8119] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 257.267894][ T8119] CPU: 1 PID: 8119 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 257.277519][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.287586][ T8119] Workqueue: hci5 hci_rx_work 11:22:04 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) [ 257.292302][ T8119] RIP: 0010:hci_phy_link_complete_evt.isra.0+0x23e/0x790 [ 257.299348][ T8119] Code: 48 c1 ea 03 80 3c 02 00 0f 85 3e 05 00 00 48 8b 9d 30 09 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 da 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 257.319000][ T8119] RSP: 0018:ffffc90016bcfa38 EFLAGS: 00010202 [ 257.325080][ T8119] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8722a583 [ 257.333056][ T8119] RDX: 0000000000000002 RSI: ffffffff8722a590 RDI: 0000000000000010 [ 257.341058][ T8119] RBP: ffff888050b40000 R08: 0000000000000001 R09: ffff88804ca88d88 [ 257.349063][ T8119] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 257.357031][ T8119] R13: ffff8880a666d138 R14: ffff888091c4540b R15: 00000000000000c8 [ 257.365004][ T8119] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 257.373931][ T8119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.380510][ T8119] CR2: 0000000000768000 CR3: 0000000096e36000 CR4: 00000000001506e0 [ 257.388509][ T8119] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.396480][ T8119] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.404445][ T8119] Call Trace: [ 257.407744][ T8119] hci_event_packet+0x4696/0x87a8 [ 257.412769][ T8119] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 257.418743][ T8119] ? __lock_acquire+0x16cb/0x5640 [ 257.423763][ T8119] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 257.429300][ T8119] ? lock_acquire+0x1f1/0xad0 [ 257.433993][ T8119] ? skb_dequeue+0x1c/0x180 [ 257.438513][ T8119] ? find_held_lock+0x2d/0x110 [ 257.443273][ T8119] ? mark_lock+0xbc/0x1710 [ 257.447772][ T8119] ? mark_held_locks+0x9f/0xe0 [ 257.452541][ T8119] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 257.458350][ T8119] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 257.464322][ T8119] ? trace_hardirqs_on+0x5f/0x220 [ 257.469341][ T8119] ? lockdep_hardirqs_on+0x76/0xf0 [ 257.474446][ T8119] hci_rx_work+0x22e/0xb50 [ 257.478861][ T8119] process_one_work+0x94c/0x1670 [ 257.483801][ T8119] ? lock_release+0x8e0/0x8e0 [ 257.488488][ T8119] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 257.493852][ T8119] ? rwlock_bug.part.0+0x90/0x90 [ 257.498786][ T8119] ? lockdep_hardirqs_off+0x7e/0xb0 [ 257.503980][ T8119] worker_thread+0x64c/0x1120 [ 257.508655][ T8119] ? process_one_work+0x1670/0x1670 [ 257.513843][ T8119] kthread+0x3b5/0x4a0 [ 257.517900][ T8119] ? __kthread_bind_mask+0xc0/0xc0 [ 257.523014][ T8119] ? __kthread_bind_mask+0xc0/0xc0 [ 257.528293][ T8119] ret_from_fork+0x1f/0x30 [ 257.532696][ T8119] Modules linked in: 11:22:04 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6gre0\x00'}) 11:22:04 executing program 4: syz_emit_vhci(&(0x7f0000000c80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) [ 257.545906][ T8119] ---[ end trace a0be475cb5a55c66 ]--- [ 257.551427][ T8119] RIP: 0010:hci_phy_link_complete_evt.isra.0+0x23e/0x790 [ 257.558453][ T8119] Code: 48 c1 ea 03 80 3c 02 00 0f 85 3e 05 00 00 48 8b 9d 30 09 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 da 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 257.578294][ T8119] RSP: 0018:ffffc90016bcfa38 EFLAGS: 00010202 [ 257.584891][ T8119] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8722a583 11:22:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000140)="3d332c05", 0x4) 11:22:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, 0x0) [ 257.593263][ T8119] RDX: 0000000000000002 RSI: ffffffff8722a590 RDI: 0000000000000010 [ 257.601313][ T8119] RBP: ffff888050b40000 R08: 0000000000000001 R09: ffff88804ca88d88 [ 257.609391][ T8119] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 257.617428][ T8119] R13: ffff8880a666d138 R14: ffff888091c4540b R15: 00000000000000c8 [ 257.625461][ T8119] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 257.634474][ T8119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.641160][ T8119] CR2: 00000000026a9a98 CR3: 0000000057690000 CR4: 00000000001506e0 [ 257.649161][ T8119] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.659513][ T8119] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.667550][ T8119] Kernel panic - not syncing: Fatal exception [ 257.674758][ T8119] Kernel Offset: disabled [ 257.679077][ T8119] Rebooting in 86400 seconds..