[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.109' (ECDSA) to the list of known hosts. 2020/10/18 07:28:19 fuzzer started 2020/10/18 07:28:19 dialing manager at 10.128.0.26:46147 2020/10/18 07:28:19 syscalls: 3448 2020/10/18 07:28:19 code coverage: enabled 2020/10/18 07:28:19 comparison tracing: enabled 2020/10/18 07:28:19 extra coverage: enabled 2020/10/18 07:28:19 setuid sandbox: enabled 2020/10/18 07:28:19 namespace sandbox: enabled 2020/10/18 07:28:19 Android sandbox: enabled 2020/10/18 07:28:19 fault injection: enabled 2020/10/18 07:28:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/18 07:28:19 net packet injection: enabled 2020/10/18 07:28:19 net device setup: enabled 2020/10/18 07:28:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/18 07:28:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/18 07:28:19 USB emulation: enabled 2020/10/18 07:28:19 hci packet injection: enabled 2020/10/18 07:28:19 wifi device emulation: enabled 07:30:47 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0xc2, 0x0, 0x0) syzkaller login: [ 220.485785][ T27] audit: type=1400 audit(1603006247.406:8): avc: denied { execmem } for pid=6887 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:30:47 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, 0x34}}, 0x0) 07:30:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xf}]}, 0x24}}, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) 07:30:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000280)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0g}\x9b9\xc1c7^0\xb9\x80\xc3\x8f\'\x9c\x06)\xfcOE\xcf\xbb\xe4\xe6\x93\x02E\n\xe8\x00\x00\x00\x00\x00\x00\x00') 07:30:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x51, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc4c85513, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x51, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x40405514, &(0x7f0000000000)) [ 221.769929][ T6888] IPVS: ftp: loaded support on port[0] = 21 07:30:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x10000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000180081ea265637ecdb4cb92e1cfc0c2c000cd307e8bd6efb120012d2571b218c8e19c933de71da06000e", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 222.036544][ T6890] IPVS: ftp: loaded support on port[0] = 21 [ 222.350821][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 222.371165][ T6892] IPVS: ftp: loaded support on port[0] = 21 [ 222.656893][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 222.673025][ T6894] IPVS: ftp: loaded support on port[0] = 21 [ 222.861451][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.868576][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.878433][ T6888] device bridge_slave_0 entered promiscuous mode [ 222.933877][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.942252][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.953976][ T6888] device bridge_slave_1 entered promiscuous mode [ 223.015734][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 223.029962][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.061837][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.071296][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.078364][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.087434][ T6890] device bridge_slave_0 entered promiscuous mode [ 223.121661][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.128732][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.137588][ T6890] device bridge_slave_1 entered promiscuous mode [ 223.201517][ T6888] team0: Port device team_slave_0 added [ 223.216183][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.254984][ T6888] team0: Port device team_slave_1 added [ 223.273506][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.488451][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 223.500051][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.519214][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.545956][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.567032][ T7012] IPVS: ftp: loaded support on port[0] = 21 [ 223.575242][ T6890] team0: Port device team_slave_0 added [ 223.596633][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.605371][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.614717][ T6892] device bridge_slave_0 entered promiscuous mode [ 223.624281][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.633189][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.641686][ T6892] device bridge_slave_1 entered promiscuous mode [ 223.649217][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.657131][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.683253][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.696952][ T6890] team0: Port device team_slave_1 added [ 223.703138][ T2657] Bluetooth: hci0: command 0x0409 tx timeout [ 223.785155][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.792731][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.819992][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.845984][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.864366][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.872092][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.899341][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.939872][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.976767][ T6890] device hsr_slave_0 entered promiscuous mode [ 223.985927][ T6890] device hsr_slave_1 entered promiscuous mode [ 224.000194][ T6888] device hsr_slave_0 entered promiscuous mode [ 224.008322][ T6888] device hsr_slave_1 entered promiscuous mode [ 224.018945][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.027163][ T39] Bluetooth: hci1: command 0x0409 tx timeout [ 224.028151][ T6888] Cannot create hsr debugfs directory [ 224.074575][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.082088][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.089911][ T6894] device bridge_slave_0 entered promiscuous mode [ 224.139588][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.146808][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.155618][ T6894] device bridge_slave_1 entered promiscuous mode [ 224.166568][ T6892] team0: Port device team_slave_0 added [ 224.209309][ T6892] team0: Port device team_slave_1 added [ 224.260912][ T39] Bluetooth: hci2: command 0x0409 tx timeout [ 224.280157][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.287488][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.315050][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.338409][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.349367][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.357434][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.383474][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.409255][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.501190][ T39] Bluetooth: hci3: command 0x0409 tx timeout [ 224.524944][ T6892] device hsr_slave_0 entered promiscuous mode [ 224.533845][ T6892] device hsr_slave_1 entered promiscuous mode [ 224.540374][ T6892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.548380][ T6892] Cannot create hsr debugfs directory [ 224.606290][ T6894] team0: Port device team_slave_0 added [ 224.633212][ T6894] team0: Port device team_slave_1 added [ 224.698221][ T7012] chnl_net:caif_netlink_parms(): no params data found [ 224.756944][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.764690][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.794226][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.834430][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.844018][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.870619][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.966758][ T6890] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.990311][ T6894] device hsr_slave_0 entered promiscuous mode [ 224.999379][ T6894] device hsr_slave_1 entered promiscuous mode [ 225.007057][ T6894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.015199][ T6894] Cannot create hsr debugfs directory [ 225.042882][ T6890] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.089445][ T6890] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.106906][ T6890] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.168680][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.177724][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.187852][ T7012] device bridge_slave_0 entered promiscuous mode [ 225.229274][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.236567][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.246326][ T7012] device bridge_slave_1 entered promiscuous mode [ 225.301580][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.319313][ T6888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.367450][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.381347][ T2636] Bluetooth: hci5: command 0x0409 tx timeout [ 225.389252][ T6888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.408620][ T6888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.465339][ T6888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.500767][ T7012] team0: Port device team_slave_0 added [ 225.538666][ T6892] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.561672][ T7012] team0: Port device team_slave_1 added [ 225.593041][ T6892] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.641981][ T6892] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.669773][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.679383][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.708522][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.730200][ T6892] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.758002][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.765170][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.780931][ T2657] Bluetooth: hci0: command 0x041b tx timeout [ 225.794530][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.844788][ T7012] device hsr_slave_0 entered promiscuous mode [ 225.852666][ T7012] device hsr_slave_1 entered promiscuous mode [ 225.859272][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.876049][ T7012] Cannot create hsr debugfs directory [ 225.904084][ T6894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.916973][ T6894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.964053][ T6894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.007001][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.016477][ T6894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.099386][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.100686][ T39] Bluetooth: hci1: command 0x041b tx timeout [ 226.109566][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.125832][ T6890] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.163754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.172888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.181845][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.189102][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.198248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.208486][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.217152][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.224296][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.274684][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.283341][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.302379][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.314452][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.325314][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.340456][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 226.375717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.406286][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.417601][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.441664][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.506208][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.514197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.527856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.537506][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.550405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.558634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.567024][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.590910][ T2636] Bluetooth: hci3: command 0x041b tx timeout [ 226.597845][ T6890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.629520][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.645849][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.656230][ T2657] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.663372][ T2657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.691581][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.701963][ T7012] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.719952][ T7012] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.738532][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.779020][ T7012] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.788134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.802711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.815229][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.822371][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.839010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.846972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.859959][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.878583][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.895797][ T7012] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.914592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.927642][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.936417][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.951666][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.981476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.991665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.001779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.015534][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.023967][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.031390][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.074147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.087884][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.097260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.106650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.115699][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.122836][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.132370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.141422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.149980][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.162829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.174522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.193311][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.229086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.238558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.248486][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.262107][ T6888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.288657][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.311938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.325554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.334294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.347048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.355127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.367994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.378568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.393448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.404291][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.415681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.457185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.467369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.475821][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 227.478325][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.492754][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.499811][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.507926][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.517179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.525884][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.533128][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.556950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.565197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.574299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.587973][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.605612][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.606577][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.607471][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.608120][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.642404][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.663700][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.681402][ T6892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.718157][ T6890] device veth0_vlan entered promiscuous mode [ 227.725600][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.734223][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.747997][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.758095][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.774137][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.788882][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.842215][ T6890] device veth1_vlan entered promiscuous mode [ 227.849202][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 227.859077][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.867914][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.870106][ T7894] Bluetooth: hci0: command 0x040f tx timeout [ 227.876655][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.890885][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.899597][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.919608][ T6894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.932668][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.974292][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 227.987781][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.997202][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.010054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.025635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.054196][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.071974][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.083164][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.093339][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.104184][ T6888] device veth0_vlan entered promiscuous mode [ 228.130665][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.139317][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.148062][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.160829][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.177961][ T6888] device veth1_vlan entered promiscuous mode [ 228.180085][ T39] Bluetooth: hci1: command 0x040f tx timeout [ 228.193274][ T6890] device veth0_macvtap entered promiscuous mode [ 228.219456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.228520][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.237950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.246211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.261412][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.273531][ T6890] device veth1_macvtap entered promiscuous mode [ 228.295134][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.303893][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.314346][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.325729][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.356925][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.371387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.384280][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.394724][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.404972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.417043][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.420491][ T2479] Bluetooth: hci2: command 0x040f tx timeout [ 228.424285][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.443635][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.481130][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.498631][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.508977][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.516212][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.535981][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.579993][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.589285][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.602934][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.613268][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.624131][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.633893][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.643772][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.653797][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.662154][ T39] Bluetooth: hci3: command 0x040f tx timeout [ 228.672063][ T6888] device veth0_macvtap entered promiscuous mode [ 228.693524][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.704437][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.714050][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.723451][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.735317][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.745715][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.756682][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.766738][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.779006][ T6888] device veth1_macvtap entered promiscuous mode [ 228.804389][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.829160][ T7012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.842739][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.852134][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.861721][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.870847][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.893522][ T6890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.903633][ T6890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.912578][ T6890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.922640][ T6890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.977565][ T6892] device veth0_vlan entered promiscuous mode [ 229.016263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.027265][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.036394][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.046610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.056385][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 229.068389][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.082021][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.096926][ T6892] device veth1_vlan entered promiscuous mode [ 229.117400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.125386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.135157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.144053][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.154632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.163223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.173000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.182454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.190796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.200254][ T6894] device veth0_vlan entered promiscuous mode [ 229.216888][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.232113][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 229.243354][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.256169][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.294556][ T6894] device veth1_vlan entered promiscuous mode [ 229.311755][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.321644][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.331334][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.340600][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.358389][ T6888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.370032][ T6888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.378741][ T6888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.389214][ T6888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.498897][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.511534][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.522569][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.540608][ T5] Bluetooth: hci5: command 0x040f tx timeout [ 229.542364][ T6892] device veth0_macvtap entered promiscuous mode [ 229.667566][ T6892] device veth1_macvtap entered promiscuous mode [ 229.690272][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.709796][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.718015][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.735384][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.769953][ T368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.774767][ T6894] device veth0_macvtap entered promiscuous mode [ 229.778019][ T368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.843042][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.858530][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.887502][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.907490][ T6894] device veth1_macvtap entered promiscuous mode [ 229.940485][ T7984] Bluetooth: hci0: command 0x0419 tx timeout [ 229.962524][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.007453][ T274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.018562][ T274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.022669][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.041809][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.053754][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.064364][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.075964][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.122229][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.129696][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.137690][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.146855][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.164917][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.175030][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.184864][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.194219][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.204413][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.215290][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.228221][ T7012] device veth0_vlan entered promiscuous mode [ 230.246431][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.259891][ T2636] Bluetooth: hci1: command 0x0419 tx timeout [ 230.279150][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.288984][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.301143][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.312129][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.323252][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.335426][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.360211][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.378011][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.399405][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.418655][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.435441][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.464799][ T6892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.486188][ T6892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.499665][ T7894] Bluetooth: hci2: command 0x0419 tx timeout [ 230.509143][ T6892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.518114][ T6892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.558343][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.587244][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.597838][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.607706][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.643021][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 07:30:57 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x48880) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) [ 230.658421][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.670074][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.689357][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.714043][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.726058][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.740073][ T7957] Bluetooth: hci3: command 0x0419 tx timeout [ 230.750907][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.772374][ T7012] device veth1_vlan entered promiscuous mode [ 230.801996][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.816853][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.827108][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.844394][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.853614][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.866074][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.885756][ T6894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.896237][ T6894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 07:30:57 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x48880) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) [ 230.917196][ T6894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.931625][ T6894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.054108][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.076762][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.100168][ T7012] device veth0_macvtap entered promiscuous mode 07:30:58 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x48880) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) [ 231.173228][ T7012] device veth1_macvtap entered promiscuous mode 07:30:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b785bddcf97f3ff91a7d503d6659d20b8be13ae064c990a0026866c0c522be0bde8c", 0x22) [ 231.291366][ T368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.318232][ T368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:30:58 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x48880) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) [ 231.376766][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 231.429420][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.457209][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 231.496927][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.518448][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 07:30:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) getpid() [ 231.539770][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.563881][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 231.582206][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.618970][ T7957] Bluetooth: hci5: command 0x0419 tx timeout [ 231.625542][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.662732][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.673379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.685670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.695200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.705411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.732216][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 07:30:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[], 0x432) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) write$binfmt_script(r1, 0x0, 0x9) ftruncate(r1, 0xce) [ 231.800552][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.828705][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 231.828715][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.828732][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 231.828739][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.828755][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 231.828773][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.910642][ T27] audit: type=1800 audit(1603006258.827:9): pid=8098 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15746 res=0 errno=0 [ 232.022451][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.038212][ T264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.050864][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.051272][ T27] audit: type=1800 audit(1603006258.967:10): pid=8097 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15746 res=0 errno=0 [ 232.069805][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.093825][ T264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:30:59 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000500)={0x0, [0xb1c], [{}, {}, {0x400, 0x0, 0x1, 0x1}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x55c, 0x0, 0x0, 0x1}, {}, {0x8, 0x1ff}], 0x5}) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) fsmount(r0, 0x1, 0x8) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 232.123236][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.135442][ T7012] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.188636][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.206502][ T7012] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.240719][ T27] audit: type=1804 audit(1603006259.158:11): pid=8103 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/3/bus" dev="sda1" ino=15742 res=1 errno=0 [ 232.243939][ T7012] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.296980][ T27] audit: type=1804 audit(1603006259.198:12): pid=8103 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/3/bus" dev="sda1" ino=15742 res=1 errno=0 [ 232.327534][ T7012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.345311][ C1] hrtimer: interrupt took 30748 ns [ 232.364229][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.373550][ T27] audit: type=1804 audit(1603006259.208:13): pid=8103 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/3/bus" dev="sda1" ino=15742 res=1 errno=0 [ 232.406445][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.511278][ T27] audit: type=1804 audit(1603006259.208:14): pid=8103 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/3/bus" dev="sda1" ino=15742 res=1 errno=0 [ 232.536491][ T264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.568591][ T264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.649879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:30:59 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) [ 232.848157][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.883234][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.014914][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 07:31:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 233.086798][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.118242][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.127671][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.925081][ T8157] IPVS: ftp: loaded support on port[0] = 21 [ 237.141997][ T8157] chnl_net:caif_netlink_parms(): no params data found [ 237.211739][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.219842][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.229836][ T8157] device bridge_slave_0 entered promiscuous mode [ 237.240305][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.247506][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.255298][ T8157] device bridge_slave_1 entered promiscuous mode [ 237.285720][ T8157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.301812][ T8157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.332398][ T8157] team0: Port device team_slave_0 added [ 237.340109][ T8157] team0: Port device team_slave_1 added [ 237.364347][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.371392][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.401514][ T8157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.416761][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.424825][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.451398][ T8157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.496585][ T8157] device hsr_slave_0 entered promiscuous mode [ 237.503596][ T8157] device hsr_slave_1 entered promiscuous mode [ 237.512445][ T8157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.521135][ T8157] Cannot create hsr debugfs directory [ 237.655931][ T8157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.665764][ T8157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.686484][ T8157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.703289][ T8157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.744906][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.752372][ T8157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.760614][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.767864][ T8157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.831225][ T8157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.848976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.859354][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.867484][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.876239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 237.889739][ T8157] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.909052][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.918515][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.925597][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.951295][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.960747][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.967935][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.982086][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.998057][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.008177][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.029958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.039708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.053194][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.080342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.089675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.110165][ T8157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.180323][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.190099][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.216252][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.225000][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.236402][ T8157] device veth0_vlan entered promiscuous mode [ 238.245269][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.254113][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.271999][ T8157] device veth1_vlan entered promiscuous mode [ 238.303176][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.314294][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.323345][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.332161][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.346312][ T8157] device veth0_macvtap entered promiscuous mode [ 238.358369][ T8157] device veth1_macvtap entered promiscuous mode [ 238.378902][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.392814][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.402736][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.414286][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.424393][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.434966][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.445157][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.456469][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.466389][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.476963][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.489650][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.504101][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.514402][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.523849][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.533174][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.545075][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.557006][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.567626][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.579201][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.589200][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.599808][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.611356][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.623155][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.633948][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.644450][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.655683][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.665934][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.675805][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.689097][ T8157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.700297][ T8157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.709658][ T8157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.720227][ T8157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.833089][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.860197][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.897177][ T7984] Bluetooth: hci4: command 0x0409 tx timeout [ 238.903308][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.934924][ T368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.945980][ T368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.955674][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:31:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x249000) 07:31:05 executing program 1: r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, &(0x7f0000000180), 0x10) 07:31:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x10e, 0x9, &(0x7f0000000000), 0x20a154cc) 07:31:05 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000500)={0x0, [0xb1c], [{}, {}, {0x400, 0x0, 0x1, 0x1}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x55c, 0x0, 0x0, 0x1}, {}, {0x8, 0x1ff}], 0x5}) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) fsmount(r0, 0x1, 0x8) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 07:31:05 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) 07:31:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x10000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000180081ea265637ecdb4cb92e1cfc0c2c000cd307e8bd6efb120012d2571b218c8e19c933de71da06000e", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 239.072910][ T27] audit: type=1804 audit(1603006265.989:15): pid=8404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/4/bus" dev="sda1" ino=15769 res=1 errno=0 07:31:06 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = io_uring_setup(0x196, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x2e2) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000400)={0x9d0000, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 07:31:06 executing program 1: r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, &(0x7f0000000180), 0x10) 07:31:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x10e, 0x9, &(0x7f0000000000), 0x20a154cc) [ 239.213088][ T27] audit: type=1804 audit(1603006266.019:16): pid=8404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/4/bus" dev="sda1" ino=15769 res=1 errno=0 07:31:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x10000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000180081ea265637ecdb4cb92e1cfc0c2c000cd307e8bd6efb120012d2571b218c8e19c933de71da06000e", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 239.313844][ T27] audit: type=1804 audit(1603006266.029:17): pid=8404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/4/bus" dev="sda1" ino=15769 res=1 errno=0 [ 239.754998][ T27] audit: type=1804 audit(1603006266.029:18): pid=8404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/4/bus" dev="sda1" ino=15769 res=1 errno=0 07:31:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x10e, 0x9, &(0x7f0000000000), 0x20a154cc) 07:31:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x10000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000180081ea265637ecdb4cb92e1cfc0c2c000cd307e8bd6efb120012d2571b218c8e19c933de71da06000e", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 07:31:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x249000) 07:31:07 executing program 1: r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, &(0x7f0000000180), 0x10) 07:31:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x10e, 0x9, &(0x7f0000000000), 0x20a154cc) 07:31:07 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000500)={0x0, [0xb1c], [{}, {}, {0x400, 0x0, 0x1, 0x1}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x55c, 0x0, 0x0, 0x1}, {}, {0x8, 0x1ff}], 0x5}) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) fsmount(r0, 0x1, 0x8) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 07:31:07 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) sendmsg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0xfffffffffffffeaf) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 07:31:07 executing program 1: r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, &(0x7f0000000180), 0x10) [ 240.512386][ T27] audit: type=1804 audit(1603006267.430:19): pid=8446 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/5/bus" dev="sda1" ino=15762 res=1 errno=0 [ 240.789917][ T27] audit: type=1804 audit(1603006267.460:20): pid=8446 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/5/bus" dev="sda1" ino=15762 res=1 errno=0 [ 240.976400][ T7894] Bluetooth: hci4: command 0x041b tx timeout [ 241.047144][ T27] audit: type=1804 audit(1603006267.480:21): pid=8446 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/5/bus" dev="sda1" ino=15762 res=1 errno=0 [ 241.390123][ T27] audit: type=1804 audit(1603006267.490:22): pid=8446 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487179894/syzkaller.7S0KbI/5/bus" dev="sda1" ino=15762 res=1 errno=0 [ 241.731042][ T8447] device wlan1 entered promiscuous mode [ 241.770573][ T8416] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 241.782344][ T8416] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 241.790786][ T8416] CPU: 1 PID: 8416 Comm: syz-executor.3 Not tainted 5.9.0-syzkaller #0 [ 241.799020][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.811291][ T8416] RIP: 0010:__do_sys_io_uring_register+0x2fd2/0x3ee0 [ 241.818115][ T8416] Code: ec 03 49 c1 ee 03 49 01 ec 49 01 ee e8 c7 d4 9a ff 41 80 3c 24 00 0f 85 7d 0d 00 00 4d 8b af b8 01 00 00 4c 89 e8 48 c1 e8 03 <80> 3c 28 00 0f 85 58 0d 00 00 49 8b 55 00 89 d8 c1 f8 09 48 98 4c [ 241.837846][ T8416] RSP: 0018:ffffc90006627d68 EFLAGS: 00010246 [ 241.843957][ T8416] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000e898000 [ 241.852050][ T8416] RDX: 0000000000040000 RSI: ffffffff81da6739 RDI: 0000000000000005 [ 241.860042][ T8416] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 241.868978][ T8416] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed1004cbea37 [ 241.876971][ T8416] R13: 0000000000000000 R14: ffffed1004cbea38 R15: ffff8880265f5000 [ 241.884939][ T8416] FS: 00007f8bbfa37700(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 241.893883][ T8416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.902121][ T8416] CR2: 000000000118c000 CR3: 000000001fc62000 CR4: 00000000001506e0 [ 241.915754][ T8416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.923745][ T8416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.931722][ T8416] Call Trace: [ 241.935172][ T8416] ? check_preemption_disabled+0x50/0x130 [ 241.940916][ T8416] ? check_preemption_disabled+0x50/0x130 [ 241.946690][ T8416] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 241.952865][ T8416] ? io_async_buf_func+0x7f0/0x7f0 [ 241.958085][ T8416] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 241.964249][ T8416] do_syscall_64+0x2d/0x70 [ 241.968662][ T8416] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 241.974653][ T8416] RIP: 0033:0x45de59 [ 241.978995][ T8416] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.999146][ T8416] RSP: 002b:00007f8bbfa36c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 242.007566][ T8416] RAX: ffffffffffffffda RBX: 00000000000083c0 RCX: 000000000045de59 [ 242.015988][ T8416] RDX: 00000000200002c0 RSI: 0000000000000002 RDI: 0000000000000004 [ 242.023969][ T8416] RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000 [ 242.031932][ T8416] R10: 00000000000002e2 R11: 0000000000000246 R12: 000000000118bf2c [ 242.039913][ T8416] R13: 00007ffdf3b6ebcf R14: 00007f8bbfa379c0 R15: 000000000118bf2c [ 242.047881][ T8416] Modules linked in: [ 242.062320][ T8416] ---[ end trace d0e05883b1a5788e ]--- [ 242.068041][ T8416] RIP: 0010:__do_sys_io_uring_register+0x2fd2/0x3ee0 [ 242.074810][ T8416] Code: ec 03 49 c1 ee 03 49 01 ec 49 01 ee e8 c7 d4 9a ff 41 80 3c 24 00 0f 85 7d 0d 00 00 4d 8b af b8 01 00 00 4c 89 e8 48 c1 e8 03 <80> 3c 28 00 0f 85 58 0d 00 00 49 8b 55 00 89 d8 c1 f8 09 48 98 4c [ 242.095084][ T8416] RSP: 0018:ffffc90006627d68 EFLAGS: 00010246 [ 242.105108][ T8416] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000e898000 [ 242.114813][ T8416] RDX: 0000000000040000 RSI: ffffffff81da6739 RDI: 0000000000000005 [ 242.125415][ T8416] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 242.134208][ T8416] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed1004cbea37 [ 242.144614][ T8416] R13: 0000000000000000 R14: ffffed1004cbea38 R15: ffff8880265f5000 [ 242.153052][ T8454] device wlan1 left promiscuous mode [ 242.154079][ T8416] FS: 00007f8bbfa37700(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 [ 242.171998][ T8416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.179624][ T8416] CR2: 00007feffc4dc000 CR3: 000000001fc62000 CR4: 00000000001506f0 [ 242.188457][ T8416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.198866][ T8416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.216502][ T8416] Kernel panic - not syncing: Fatal exception [ 242.223879][ T8416] Kernel Offset: disabled [ 242.228200][ T8416] Rebooting in 86400 seconds..