[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Warning: Permanently added '10.128.0.66' (ECDSA) to the list of known hosts. [ 81.892334][ T37] audit: type=1400 audit(1627979154.736:8): avc: denied { execmem } for pid=8436 comm="syz-executor057" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 83.947307][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 84.109144][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 84.240929][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 84.261856][ T8451] chnl_net:caif_netlink_parms(): no params data found [ 84.375899][ T8447] chnl_net:caif_netlink_parms(): no params data found [ 84.388970][ T8449] chnl_net:caif_netlink_parms(): no params data found [ 84.421822][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.430352][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.438996][ T8448] device bridge_slave_0 entered promiscuous mode [ 84.452166][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.459761][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.468588][ T8448] device bridge_slave_1 entered promiscuous mode [ 84.551554][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.606492][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.624180][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.631457][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.641152][ T8450] device bridge_slave_0 entered promiscuous mode [ 84.660739][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.668008][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.676183][ T8451] device bridge_slave_0 entered promiscuous mode [ 84.689890][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.698660][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.707035][ T8451] device bridge_slave_1 entered promiscuous mode [ 84.724521][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.731783][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.741606][ T8450] device bridge_slave_1 entered promiscuous mode [ 84.749721][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.757151][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.766572][ T8452] device bridge_slave_0 entered promiscuous mode [ 84.780893][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.788181][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.796455][ T8452] device bridge_slave_1 entered promiscuous mode [ 84.834710][ T8448] team0: Port device team_slave_0 added [ 84.877358][ T8448] team0: Port device team_slave_1 added [ 84.892942][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.902361][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.909700][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.919619][ T8449] device bridge_slave_0 entered promiscuous mode [ 84.937617][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.945009][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.955215][ T8449] device bridge_slave_1 entered promiscuous mode [ 84.965786][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.986268][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.999807][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.011254][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.040024][ T8447] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.049079][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.058915][ T8447] device bridge_slave_0 entered promiscuous mode [ 85.096090][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.104883][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.133276][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.148560][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.169758][ T8447] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.177237][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.189344][ T8447] device bridge_slave_1 entered promiscuous mode [ 85.208726][ T8450] team0: Port device team_slave_0 added [ 85.211142][ T20] Bluetooth: hci5: command 0x0409 tx timeout [ 85.215321][ T3171] Bluetooth: hci4: command 0x0409 tx timeout [ 85.229466][ T20] Bluetooth: hci1: command 0x0409 tx timeout [ 85.236401][ T8449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.238567][ T20] Bluetooth: hci0: command 0x0409 tx timeout [ 85.252371][ T20] Bluetooth: hci2: command 0x0409 tx timeout [ 85.252909][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.263279][ T20] Bluetooth: hci3: command 0x0409 tx timeout [ 85.270506][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.298613][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.313423][ T8451] team0: Port device team_slave_0 added [ 85.328592][ T8452] team0: Port device team_slave_0 added [ 85.341695][ T8450] team0: Port device team_slave_1 added [ 85.352083][ T8449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.381520][ T8451] team0: Port device team_slave_1 added [ 85.395092][ T8452] team0: Port device team_slave_1 added [ 85.417309][ T8449] team0: Port device team_slave_0 added [ 85.431142][ T8447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.464158][ T8449] team0: Port device team_slave_1 added [ 85.478695][ T8447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.494826][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.501789][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.529389][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.556045][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.566376][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.595939][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.607719][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.615067][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.641574][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.660173][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.668762][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.695127][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.707431][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.714723][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.742478][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.766181][ T8448] device hsr_slave_0 entered promiscuous mode [ 85.773590][ T8448] device hsr_slave_1 entered promiscuous mode [ 85.780963][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.788134][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.814424][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.859854][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.867394][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.895636][ T8449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.917274][ T8447] team0: Port device team_slave_0 added [ 85.943960][ T8450] device hsr_slave_0 entered promiscuous mode [ 85.951112][ T8450] device hsr_slave_1 entered promiscuous mode [ 85.960206][ T8450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.969843][ T8450] Cannot create hsr debugfs directory [ 85.977024][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.984634][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.011325][ T8449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.028727][ T8447] team0: Port device team_slave_1 added [ 86.046052][ T8452] device hsr_slave_0 entered promiscuous mode [ 86.053574][ T8452] device hsr_slave_1 entered promiscuous mode [ 86.060353][ T8452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.068355][ T8452] Cannot create hsr debugfs directory [ 86.112559][ T8451] device hsr_slave_0 entered promiscuous mode [ 86.119338][ T8451] device hsr_slave_1 entered promiscuous mode [ 86.126092][ T8451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.134779][ T8451] Cannot create hsr debugfs directory [ 86.214621][ T8449] device hsr_slave_0 entered promiscuous mode [ 86.225016][ T8449] device hsr_slave_1 entered promiscuous mode [ 86.231621][ T8449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.239666][ T8449] Cannot create hsr debugfs directory [ 86.246140][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.253572][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.280549][ T8447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.296770][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.304345][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.331216][ T8447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.461887][ T8447] device hsr_slave_0 entered promiscuous mode [ 86.469657][ T8447] device hsr_slave_1 entered promiscuous mode [ 86.479748][ T8447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.488338][ T8447] Cannot create hsr debugfs directory [ 86.828572][ T8448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.854907][ T8448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.888997][ T8448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.899986][ T8448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.965881][ T8450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.008043][ T8450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.042560][ T8450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.051902][ T8450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.123912][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.155248][ T8451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.182463][ T8451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.201102][ T8451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.214010][ T8451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.259345][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.282998][ T26] Bluetooth: hci3: command 0x041b tx timeout [ 87.283887][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.300014][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 87.307011][ T26] Bluetooth: hci5: command 0x041b tx timeout [ 87.310788][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.323429][ T8461] Bluetooth: hci2: command 0x041b tx timeout [ 87.329774][ T8461] Bluetooth: hci0: command 0x041b tx timeout [ 87.345985][ T8461] Bluetooth: hci1: command 0x041b tx timeout [ 87.348740][ T8452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.365060][ T8452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.408250][ T8452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.418674][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.430270][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.440722][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.449059][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.475007][ T8452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.489587][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.498272][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.507668][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.516398][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.523824][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.531860][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.561698][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.596772][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.614204][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.624392][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.661356][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.680105][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.690502][ T8449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.725793][ T8447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.740975][ T8447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.751270][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.764393][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.773949][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.782922][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.792215][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.800968][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.810957][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.820400][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.829300][ T8449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.852100][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.864334][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.873501][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.881417][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.889818][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.898906][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.908183][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.915356][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.937171][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.948984][ T8447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.963234][ T8449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.978258][ T8449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.993304][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.001453][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.022345][ T8447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.074109][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.085393][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.095733][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.105133][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.114953][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.159171][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.173241][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.181701][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.191519][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.200584][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.210546][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.218809][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.228194][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.243217][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.295881][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.334542][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.343488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.358043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.367378][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.390842][ T8451] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.409749][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.432421][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.441721][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.451779][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.458967][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.468084][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.477349][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.486980][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.528965][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.552932][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.561724][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.569784][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.692980][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.703608][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.712821][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.721227][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.731877][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.740889][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.750289][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.759816][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.769553][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.778270][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.786942][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.795957][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.808879][ T8450] device veth0_vlan entered promiscuous mode [ 88.822161][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.835294][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.852281][ T8448] device veth0_vlan entered promiscuous mode [ 88.866758][ T8449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.900768][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.915930][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.924913][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.939032][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.949626][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.959155][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.982143][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.990767][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.000523][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.009673][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.025323][ T8450] device veth1_vlan entered promiscuous mode [ 89.044413][ T8449] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.057211][ T8448] device veth1_vlan entered promiscuous mode [ 89.082586][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.093595][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.102697][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.110795][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.119802][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.129511][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.187109][ T8447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.198216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.209109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.219424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.228936][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.236269][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.244608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.252532][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.260087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.269596][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.278847][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.286139][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.300888][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.312404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.346539][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.372928][ T9700] Bluetooth: hci1: command 0x040f tx timeout [ 89.376000][ T8450] device veth0_macvtap entered promiscuous mode [ 89.388825][ T9700] Bluetooth: hci0: command 0x040f tx timeout [ 89.393046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.404625][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.404981][ T9700] Bluetooth: hci2: command 0x040f tx timeout [ 89.415235][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.431134][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.438845][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.440298][ T9700] Bluetooth: hci4: command 0x040f tx timeout [ 89.452771][ T9700] Bluetooth: hci3: command 0x040f tx timeout [ 89.456555][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.462746][ T9723] Bluetooth: hci5: command 0x040f tx timeout [ 89.471790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.482555][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.491227][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.500439][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.525890][ T8450] device veth1_macvtap entered promiscuous mode [ 89.563855][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.570866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.579977][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.588795][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.597630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.606633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.615422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.624272][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.634183][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.643606][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.650809][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.659640][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.669331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.678740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.688472][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.697768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.712076][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.734645][ T8449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.750088][ T8449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.786817][ T8448] device veth0_macvtap entered promiscuous mode [ 89.799056][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.808796][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.817986][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.828068][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.838875][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.847724][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.857201][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.866720][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.877012][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.886260][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.895966][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.905907][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.913205][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.922046][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.930242][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.939051][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.983672][ T8448] device veth1_macvtap entered promiscuous mode [ 90.014824][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.023587][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.031777][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.041602][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.052785][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.061660][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.071305][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.080552][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.126300][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.135438][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.146198][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.153712][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.164933][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.173532][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.187332][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.194871][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.227547][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.247474][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.256881][ T8449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.265884][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.275654][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.284639][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.293730][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.303011][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.331065][ T8451] device veth0_vlan entered promiscuous mode [ 90.342362][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 90.354863][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.367159][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.395687][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.412703][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.420805][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.432495][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.441489][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.451381][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.460811][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.479371][ T8450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.491011][ T8450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.500275][ T8450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.509243][ T8450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.526060][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 90.544401][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.556769][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.572588][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.580694][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.592599][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.601273][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.611954][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.620915][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.629226][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.650301][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.667294][ T8451] device veth1_vlan entered promiscuous mode [ 90.710181][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.719053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.728626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.738220][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.752484][ T8448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.761338][ T8448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.774977][ T8448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.785049][ T8448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.797727][ T8447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.917855][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.933603][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready executing program executing program [ 90.998438][ T8451] device veth0_macvtap entered promiscuous mode [ 91.012854][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.020487][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.030413][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.040183][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.063500][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.087648][ T8451] device veth1_macvtap entered promiscuous mode [ 91.111280][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.128752][ T8449] device veth0_vlan entered promiscuous mode [ 91.134447][ T9775] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.137087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.157304][ T9775] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 91.166508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.177283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.230854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.240609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.254880][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.266692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.288559][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 91.300120][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.311360][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 91.324680][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.337947][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.347305][ T8449] device veth1_vlan entered promiscuous mode [ 91.357267][ T9780] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.381544][ T9780] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 91.388359][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.403575][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.413622][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.429038][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 91.444083][ T9700] Bluetooth: hci2: command 0x0419 tx timeout [ 91.450381][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.473463][ T9775] syz-executor057 (9775) used greatest stack depth: 22904 bytes left executing program executing program [ 91.485134][ T9700] Bluetooth: hci0: command 0x0419 tx timeout [ 91.505471][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 91.509390][ T9700] Bluetooth: hci1: command 0x0419 tx timeout [ 91.524785][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.543654][ T9700] Bluetooth: hci5: command 0x0419 tx timeout [ 91.550253][ T9700] Bluetooth: hci3: command 0x0419 tx timeout [ 91.553082][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.558152][ T9700] Bluetooth: hci4: command 0x0419 tx timeout [ 91.589911][ T9789] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.591442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.617781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.628793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.629132][ T9789] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 91.644366][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.657223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.667472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.702938][ T8451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.734051][ T8451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.744799][ T8451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.759946][ T8451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.780540][ T8452] device veth0_vlan entered promiscuous mode [ 91.796021][ T9794] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.799385][ T8447] device veth0_vlan entered promiscuous mode [ 91.809358][ T9794] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 91.842947][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.850980][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready executing program [ 91.884421][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.894398][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.907023][ T9793] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.955391][ T9793] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 91.968820][ T8452] device veth1_vlan entered promiscuous mode [ 91.992587][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready executing program [ 92.025463][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.042860][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.051279][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.062724][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.085144][ T8447] device veth1_vlan entered promiscuous mode [ 92.102256][ T9799] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.113668][ T9799] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.147612][ T8449] device veth0_macvtap entered promiscuous mode [ 92.197701][ T8449] device veth1_macvtap entered promiscuous mode [ 92.253210][ T9807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.258899][ T8447] device veth0_macvtap entered promiscuous mode executing program [ 92.294576][ T9807] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.322587][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.334465][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.351902][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.360668][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready executing program executing program [ 92.399961][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.420122][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.431346][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.451115][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.462357][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.476069][ T8452] device veth0_macvtap entered promiscuous mode [ 92.486185][ T9811] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.500654][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 92.506033][ T9811] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.512012][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.540890][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 92.560416][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.571838][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 92.585460][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.599116][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.610745][ T9817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.611170][ T8447] device veth1_macvtap entered promiscuous mode [ 92.630595][ T9817] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.642613][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.651342][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.666534][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.677769][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.688802][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.710665][ T9822] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.718296][ T8452] device veth1_macvtap entered promiscuous mode [ 92.727093][ T9822] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db executing program [ 92.767443][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 92.805454][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.832035][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 92.843369][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.855628][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 92.866778][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.879715][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.889853][ T9828] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.903708][ T9828] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.922150][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.951125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.970881][ T8449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 executing program executing program [ 92.992888][ T8449] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.010640][ T8449] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.020181][ T8449] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.056860][ T9839] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 93.065665][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.086354][ T9839] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 93.102014][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.116578][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.136706][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program [ 93.172164][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.184313][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.195435][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.213586][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.227217][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.243785][ T9844] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 93.255070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.266095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.274947][ T9844] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 93.291301][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.328196][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.347724][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.359259][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.370514][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.384868][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.396167][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.408402][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.424727][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.436402][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.449149][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.461079][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.474784][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.486400][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.498490][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.509595][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.521052][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.536604][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.548247][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.560955][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program [ 93.570838][ T9855] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 93.584985][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.596835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.613440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready executing program [ 93.631767][ T9855] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 93.652168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.664759][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 executing program [ 93.702348][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.724711][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.738863][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.753434][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.771727][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.785180][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.796540][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.806689][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.818353][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.830770][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.840393][ T9858] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 93.843580][ T8447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.867102][ T9858] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 93.877984][ T8447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.888365][ T8447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.897618][ T8447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.906562][ T9858] ================================================================== [ 93.906636][ T9858] BUG: KASAN: use-after-free in __list_add_valid+0x81/0xa0 [ 93.922554][ T9858] Read of size 8 at addr ffff888016fecec8 by task syz-executor057/9858 [ 93.930888][ T9858] [ 93.933230][ T9858] CPU: 1 PID: 9858 Comm: syz-executor057 Not tainted 5.14.0-rc4-syzkaller #0 [ 93.942176][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.952489][ T9858] Call Trace: [ 93.955861][ T9858] dump_stack_lvl+0xcd/0x134 [ 93.960465][ T9858] print_address_description.constprop.0.cold+0x6c/0x2d6 [ 93.968000][ T9858] ? __list_add_valid+0x81/0xa0 [ 93.972923][ T9858] ? __list_add_valid+0x81/0xa0 [ 93.977777][ T9858] kasan_report.cold+0x83/0xdf [ 93.982542][ T9858] ? __list_add_valid+0x81/0xa0 [ 93.987380][ T9858] __list_add_valid+0x81/0xa0 [ 93.992158][ T9858] firmware_fallback_sysfs+0x455/0xe10 [ 93.997613][ T9858] _request_firmware+0xa80/0xe80 [ 94.002714][ T9858] request_firmware+0x32/0x50 [ 94.007373][ T9858] reg_reload_regdb+0x7a/0x240 [ 94.012215][ T9858] ? is_world_regdom+0xe0/0xe0 [ 94.017487][ T9858] ? nl80211_set_qos_map+0x800/0x800 [ 94.022772][ T9858] ? nl80211_pre_doit+0xa6/0x620 [ 94.027797][ T9858] genl_family_rcv_msg_doit+0x228/0x320 [ 94.033333][ T9858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 94.040705][ T9858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 94.047135][ T9858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 94.053553][ T9858] ? ns_capable+0xd9/0x100 [ 94.058068][ T9858] genl_rcv_msg+0x328/0x580 [ 94.062656][ T9858] ? genl_get_cmd+0x480/0x480 [ 94.067850][ T9858] ? nl80211_stop_sched_scan+0x3a0/0x3a0 [ 94.073482][ T9858] ? lock_release+0x720/0x720 [ 94.078240][ T9858] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 94.083604][ T9858] netlink_rcv_skb+0x153/0x420 [ 94.088388][ T9858] ? genl_get_cmd+0x480/0x480 [ 94.093189][ T9858] ? netlink_ack+0xa60/0xa60 [ 94.098140][ T9858] genl_rcv+0x24/0x40 [ 94.102222][ T9858] netlink_unicast+0x533/0x7d0 [ 94.106984][ T9858] ? netlink_attachskb+0x890/0x890 [ 94.112094][ T9858] netlink_sendmsg+0x86d/0xdb0 [ 94.116858][ T9858] ? netlink_unicast+0x7d0/0x7d0 [ 94.121880][ T9858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 94.128244][ T9858] ? netlink_unicast+0x7d0/0x7d0 [ 94.133565][ T9858] sock_sendmsg+0xcf/0x120 [ 94.138119][ T9858] ____sys_sendmsg+0x6e8/0x810 [ 94.143692][ T9858] ? kernel_sendmsg+0x50/0x50 [ 94.148491][ T9858] ? do_recvmmsg+0x6d0/0x6d0 [ 94.153643][ T9858] ? lock_chain_count+0x20/0x20 [ 94.158728][ T9858] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 94.164894][ T9858] ___sys_sendmsg+0xf3/0x170 [ 94.169669][ T9858] ? sendmsg_copy_msghdr+0x160/0x160 [ 94.174955][ T9858] ? __fget_files+0x21b/0x3e0 [ 94.179637][ T9858] ? lock_downgrade+0x6e0/0x6e0 [ 94.184480][ T9858] ? __fget_files+0x23d/0x3e0 [ 94.189175][ T9858] ? __fget_light+0xea/0x280 [ 94.194107][ T9858] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 94.200344][ T9858] __sys_sendmsg+0xe5/0x1b0 [ 94.204858][ T9858] ? __sys_sendmsg_sock+0x30/0x30 [ 94.209879][ T9858] ? syscall_enter_from_user_mode+0x21/0x70 [ 94.215947][ T9858] do_syscall_64+0x35/0xb0 [ 94.220466][ T9858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.226446][ T9858] RIP: 0033:0x44b639 [ 94.230329][ T9858] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 16 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 94.250494][ T9858] RSP: 002b:00007f96ace70278 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.259000][ T9858] RAX: ffffffffffffffda RBX: 00000000004d72a0 RCX: 000000000044b639 [ 94.267239][ T9858] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 94.280430][ T9858] RBP: 00000000004a0830 R08: 0000000000000099 R09: 65732f636f72702f [ 94.288835][ T9858] R10: 000000000000000c R11: 0000000000000246 R12: 00007f96ace70280 [ 94.296891][ T9858] R13: 006a64615f6d6f6f R14: 0031313230386c6e R15: 00000000004d72a8 [ 94.304865][ T9858] [ 94.307176][ T9858] Allocated by task 9855: [ 94.311501][ T9858] kasan_save_stack+0x1b/0x40 [ 94.316300][ T9858] __kasan_kmalloc+0x98/0xc0 [ 94.320882][ T9858] kmem_cache_alloc_trace+0x1e4/0x480 [ 94.326371][ T9858] _request_firmware+0x2de/0xe80 [ 94.331309][ T9858] request_firmware+0x32/0x50 [ 94.336029][ T9858] reg_reload_regdb+0x7a/0x240 [ 94.341154][ T9858] genl_family_rcv_msg_doit+0x228/0x320 [ 94.347165][ T9858] genl_rcv_msg+0x328/0x580 [ 94.351964][ T9858] netlink_rcv_skb+0x153/0x420 [ 94.356733][ T9858] genl_rcv+0x24/0x40 [ 94.360728][ T9858] netlink_unicast+0x533/0x7d0 [ 94.365581][ T9858] netlink_sendmsg+0x86d/0xdb0 [ 94.370354][ T9858] sock_sendmsg+0xcf/0x120 [ 94.374851][ T9858] ____sys_sendmsg+0x6e8/0x810 [ 94.379637][ T9858] ___sys_sendmsg+0xf3/0x170 [ 94.384221][ T9858] __sys_sendmsg+0xe5/0x1b0 [ 94.389100][ T9858] do_syscall_64+0x35/0xb0 [ 94.393525][ T9858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.399815][ T9858] [ 94.402148][ T9858] Freed by task 9855: [ 94.406203][ T9858] kasan_save_stack+0x1b/0x40 [ 94.410875][ T9858] kasan_set_track+0x1c/0x30 [ 94.415563][ T9858] kasan_set_free_info+0x20/0x30 [ 94.420880][ T9858] __kasan_slab_free+0xcd/0x100 [ 94.425902][ T9858] kfree+0x106/0x2c0 [ 94.430458][ T9858] free_fw_priv+0x2b1/0x4d0 [ 94.434959][ T9858] release_firmware.part.0+0xc7/0xf0 [ 94.440414][ T9858] _request_firmware+0x709/0xe80 [ 94.445441][ T9858] request_firmware+0x32/0x50 [ 94.450115][ T9858] reg_reload_regdb+0x7a/0x240 [ 94.455061][ T9858] genl_family_rcv_msg_doit+0x228/0x320 [ 94.460636][ T9858] genl_rcv_msg+0x328/0x580 [ 94.465140][ T9858] netlink_rcv_skb+0x153/0x420 [ 94.469916][ T9858] genl_rcv+0x24/0x40 [ 94.473949][ T9858] netlink_unicast+0x533/0x7d0 [ 94.478815][ T9858] netlink_sendmsg+0x86d/0xdb0 [ 94.483587][ T9858] sock_sendmsg+0xcf/0x120 [ 94.488180][ T9858] ____sys_sendmsg+0x6e8/0x810 [ 94.493112][ T9858] ___sys_sendmsg+0xf3/0x170 [ 94.497885][ T9858] __sys_sendmsg+0xe5/0x1b0 [ 94.502480][ T9858] do_syscall_64+0x35/0xb0 [ 94.506898][ T9858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.512889][ T9858] [ 94.515323][ T9858] The buggy address belongs to the object at ffff888016fece00 [ 94.515323][ T9858] which belongs to the cache kmalloc-256 of size 256 [ 94.529475][ T9858] The buggy address is located 200 bytes inside of [ 94.529475][ T9858] 256-byte region [ffff888016fece00, ffff888016fecf00) [ 94.542862][ T9858] The buggy address belongs to the page: [ 94.548566][ T9858] page:ffffea00005bfb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16fec [ 94.558712][ T9858] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 94.566268][ T9858] raw: 00fff00000000200 ffffea0000e4aac8 ffffea0000829e88 ffff888010840500 [ 94.574938][ T9858] raw: 0000000000000000 ffff888016fec000 0000000100000008 0000000000000000 [ 94.583515][ T9858] page dumped because: kasan: bad access detected [ 94.589935][ T9858] page_owner tracks the page as allocated [ 94.595632][ T9858] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x242220(__GFP_HIGH|__GFP_ATOMIC|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 9855, ts 93570121102, free_ts 93494956684 [ 94.614057][ T9858] get_page_from_freelist+0xa72/0x2f80 [ 94.619526][ T9858] __alloc_pages+0x1b2/0x500 [ 94.624118][ T9858] cache_grow_begin+0x75/0x460 [ 94.628965][ T9858] cache_alloc_refill+0x27f/0x380 [ 94.634047][ T9858] kmem_cache_alloc_trace+0x38c/0x480 [ 94.639513][ T9858] _request_firmware+0x2de/0xe80 [ 94.644710][ T9858] request_firmware+0x32/0x50 [ 94.649474][ T9858] reg_reload_regdb+0x7a/0x240 [ 94.654248][ T9858] genl_family_rcv_msg_doit+0x228/0x320 [ 94.659789][ T9858] genl_rcv_msg+0x328/0x580 [ 94.664553][ T9858] netlink_rcv_skb+0x153/0x420 [ 94.669394][ T9858] genl_rcv+0x24/0x40 [ 94.673384][ T9858] netlink_unicast+0x533/0x7d0 [ 94.678268][ T9858] netlink_sendmsg+0x86d/0xdb0 [ 94.683030][ T9858] sock_sendmsg+0xcf/0x120 [ 94.687439][ T9858] ____sys_sendmsg+0x6e8/0x810 [ 94.692209][ T9858] page last free stack trace: [ 94.696884][ T9858] free_pcp_prepare+0x2c5/0x780 [ 94.702251][ T9858] free_unref_page+0x19/0x690 [ 94.706940][ T9858] __vunmap+0x783/0xb70 [ 94.711322][ T9858] free_work+0x58/0x70 [ 94.715566][ T9858] process_one_work+0x98d/0x1630 [ 94.720837][ T9858] worker_thread+0x658/0x11f0 [ 94.725687][ T9858] kthread+0x3e5/0x4d0 [ 94.729771][ T9858] ret_from_fork+0x1f/0x30 [ 94.734357][ T9858] [ 94.736687][ T9858] Memory state around the buggy address: [ 94.742307][ T9858] ffff888016fecd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.750458][ T9858] ffff888016fece00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.758922][ T9858] >ffff888016fece80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.767037][ T9858] ^ [ 94.773450][ T9858] ffff888016fecf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.781764][ T9858] ffff888016fecf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.790098][ T9858] ================================================================== [ 94.798145][ T9858] Disabling lock debugging due to kernel taint [ 94.830320][ T9858] Kernel panic - not syncing: panic_on_warn set ... [ 94.837231][ T9858] CPU: 1 PID: 9858 Comm: syz-executor057 Tainted: G B 5.14.0-rc4-syzkaller #0 [ 94.847411][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.857980][ T9858] Call Trace: [ 94.861267][ T9858] dump_stack_lvl+0xcd/0x134 [ 94.865873][ T9858] panic+0x306/0x73d [ 94.869882][ T9858] ? __warn_printk+0xf3/0xf3 [ 94.874485][ T9858] ? preempt_schedule_common+0x59/0xc0 [ 94.880673][ T9858] ? __list_add_valid+0x81/0xa0 [ 94.885920][ T9858] ? preempt_schedule_thunk+0x16/0x18 [ 94.891960][ T9858] ? trace_hardirqs_on+0x38/0x1c0 [ 94.897160][ T9858] ? trace_hardirqs_on+0x51/0x1c0 [ 94.902284][ T9858] ? __list_add_valid+0x81/0xa0 [ 94.907394][ T9858] ? __list_add_valid+0x81/0xa0 [ 94.912343][ T9858] end_report.cold+0x5a/0x5a [ 94.916963][ T9858] kasan_report.cold+0x71/0xdf [ 94.922094][ T9858] ? __list_add_valid+0x81/0xa0 [ 94.926940][ T9858] __list_add_valid+0x81/0xa0 [ 94.931609][ T9858] firmware_fallback_sysfs+0x455/0xe10 [ 94.937147][ T9858] _request_firmware+0xa80/0xe80 [ 94.942870][ T9858] request_firmware+0x32/0x50 [ 94.947551][ T9858] reg_reload_regdb+0x7a/0x240 [ 94.952680][ T9858] ? is_world_regdom+0xe0/0xe0 [ 94.957492][ T9858] ? nl80211_set_qos_map+0x800/0x800 [ 94.963400][ T9858] ? nl80211_pre_doit+0xa6/0x620 [ 94.968348][ T9858] genl_family_rcv_msg_doit+0x228/0x320 [ 94.974149][ T9858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 94.981782][ T9858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 94.988241][ T9858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 94.994760][ T9858] ? ns_capable+0xd9/0x100 [ 94.999282][ T9858] genl_rcv_msg+0x328/0x580 [ 95.003986][ T9858] ? genl_get_cmd+0x480/0x480 [ 95.008669][ T9858] ? nl80211_stop_sched_scan+0x3a0/0x3a0 [ 95.014758][ T9858] ? lock_release+0x720/0x720 [ 95.019800][ T9858] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 95.025475][ T9858] netlink_rcv_skb+0x153/0x420 [ 95.030778][ T9858] ? genl_get_cmd+0x480/0x480 [ 95.035537][ T9858] ? netlink_ack+0xa60/0xa60 [ 95.040214][ T9858] genl_rcv+0x24/0x40 [ 95.044208][ T9858] netlink_unicast+0x533/0x7d0 [ 95.048975][ T9858] ? netlink_attachskb+0x890/0x890 [ 95.054132][ T9858] netlink_sendmsg+0x86d/0xdb0 [ 95.058988][ T9858] ? netlink_unicast+0x7d0/0x7d0 [ 95.064198][ T9858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 95.070978][ T9858] ? netlink_unicast+0x7d0/0x7d0 [ 95.076235][ T9858] sock_sendmsg+0xcf/0x120 [ 95.080643][ T9858] ____sys_sendmsg+0x6e8/0x810 [ 95.085396][ T9858] ? kernel_sendmsg+0x50/0x50 [ 95.090231][ T9858] ? do_recvmmsg+0x6d0/0x6d0 [ 95.094894][ T9858] ? lock_chain_count+0x20/0x20 [ 95.099747][ T9858] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 95.105800][ T9858] ___sys_sendmsg+0xf3/0x170 [ 95.110386][ T9858] ? sendmsg_copy_msghdr+0x160/0x160 [ 95.115694][ T9858] ? __fget_files+0x21b/0x3e0 [ 95.120716][ T9858] ? lock_downgrade+0x6e0/0x6e0 [ 95.125549][ T9858] ? __fget_files+0x23d/0x3e0 [ 95.130611][ T9858] ? __fget_light+0xea/0x280 [ 95.135651][ T9858] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 95.142932][ T9858] __sys_sendmsg+0xe5/0x1b0 [ 95.147519][ T9858] ? __sys_sendmsg_sock+0x30/0x30 [ 95.152672][ T9858] ? syscall_enter_from_user_mode+0x21/0x70 [ 95.158686][ T9858] do_syscall_64+0x35/0xb0 [ 95.163146][ T9858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 95.169039][ T9858] RIP: 0033:0x44b639 [ 95.173024][ T9858] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 16 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 95.193061][ T9858] RSP: 002b:00007f96ace70278 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.201742][ T9858] RAX: ffffffffffffffda RBX: 00000000004d72a0 RCX: 000000000044b639 [ 95.210048][ T9858] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 95.218017][ T9858] RBP: 00000000004a0830 R08: 0000000000000099 R09: 65732f636f72702f [ 95.225976][ T9858] R10: 000000000000000c R11: 0000000000000246 R12: 00007f96ace70280 [ 95.233958][ T9858] R13: 006a64615f6d6f6f R14: 0031313230386c6e R15: 00000000004d72a8 [ 95.243830][ T9858] Kernel Offset: disabled [ 95.248310][ T9858] Rebooting in 86400 seconds..