[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. 2021/06/16 16:15:25 parsed 1 programs 2021/06/16 16:15:26 executed programs: 0 syzkaller login: [ 63.069666][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 63.082317][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 63.122135][ T8451] chnl_net:caif_netlink_parms(): no params data found [ 63.288625][ T8456] chnl_net:caif_netlink_parms(): no params data found [ 63.301128][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 63.350945][ T8458] chnl_net:caif_netlink_parms(): no params data found [ 63.413342][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.421237][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.428875][ T8459] device bridge_slave_0 entered promiscuous mode [ 63.452917][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.462682][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.470672][ T8451] device bridge_slave_0 entered promiscuous mode [ 63.502281][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.509521][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.519005][ T8457] device bridge_slave_0 entered promiscuous mode [ 63.526805][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.538703][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.546895][ T8459] device bridge_slave_1 entered promiscuous mode [ 63.561123][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.568176][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.576965][ T8451] device bridge_slave_1 entered promiscuous mode [ 63.595153][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.603161][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.612848][ T8457] device bridge_slave_1 entered promiscuous mode [ 63.672853][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.688989][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.700682][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.711943][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.726123][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.738245][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.745511][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.753905][ T8456] device bridge_slave_0 entered promiscuous mode [ 63.768658][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.789411][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.796847][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.806075][ T8456] device bridge_slave_1 entered promiscuous mode [ 63.857937][ T8451] team0: Port device team_slave_0 added [ 63.864286][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.876491][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.884648][ T8452] device bridge_slave_0 entered promiscuous mode [ 63.905527][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.912905][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.921595][ T8452] device bridge_slave_1 entered promiscuous mode [ 63.930768][ T8459] team0: Port device team_slave_0 added [ 63.942963][ T8451] team0: Port device team_slave_1 added [ 63.962617][ T8457] team0: Port device team_slave_0 added [ 63.968462][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.976328][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.984747][ T8458] device bridge_slave_0 entered promiscuous mode [ 63.999039][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.006229][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.014501][ T8458] device bridge_slave_1 entered promiscuous mode [ 64.021982][ T8459] team0: Port device team_slave_1 added [ 64.028514][ T8456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.044029][ T8457] team0: Port device team_slave_1 added [ 64.065468][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.083791][ T8456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.093472][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.100572][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.127498][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.148828][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.171296][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.178244][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.204245][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.217055][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.224691][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.251958][ T8457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.265435][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.275155][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.282221][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.290906][ T27] Bluetooth: hci0: command 0x0409 tx timeout [ 64.308238][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.340763][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.347724][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.379481][ T8457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.393838][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.403637][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.411293][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.439050][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.449877][ T27] Bluetooth: hci4: command 0x0409 tx timeout [ 64.450908][ T4123] Bluetooth: hci1: command 0x0409 tx timeout [ 64.458954][ T8452] team0: Port device team_slave_0 added [ 64.469816][ T8456] team0: Port device team_slave_0 added [ 64.489915][ T27] Bluetooth: hci5: command 0x0409 tx timeout [ 64.511710][ T8452] team0: Port device team_slave_1 added [ 64.518654][ T8456] team0: Port device team_slave_1 added [ 64.526376][ T27] Bluetooth: hci2: command 0x0409 tx timeout [ 64.534477][ T27] Bluetooth: hci3: command 0x0409 tx timeout [ 64.548481][ T8457] device hsr_slave_0 entered promiscuous mode [ 64.556081][ T8457] device hsr_slave_1 entered promiscuous mode [ 64.607651][ T8451] device hsr_slave_0 entered promiscuous mode [ 64.615527][ T8451] device hsr_slave_1 entered promiscuous mode [ 64.626301][ T8451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.634467][ T8451] Cannot create hsr debugfs directory [ 64.646202][ T8458] team0: Port device team_slave_0 added [ 64.655037][ T8459] device hsr_slave_0 entered promiscuous mode [ 64.661954][ T8459] device hsr_slave_1 entered promiscuous mode [ 64.668378][ T8459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.676383][ T8459] Cannot create hsr debugfs directory [ 64.682344][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.689270][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.718916][ T8456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.731683][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.738621][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.764807][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.777689][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.784878][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.810848][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.827183][ T8458] team0: Port device team_slave_1 added [ 64.837638][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.844739][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.871351][ T8456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.933501][ T8452] device hsr_slave_0 entered promiscuous mode [ 64.942324][ T8452] device hsr_slave_1 entered promiscuous mode [ 64.948879][ T8452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.957874][ T8452] Cannot create hsr debugfs directory [ 64.966676][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.973790][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.001786][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.061502][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.068606][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.096720][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.124378][ T8456] device hsr_slave_0 entered promiscuous mode [ 65.131146][ T8456] device hsr_slave_1 entered promiscuous mode [ 65.137489][ T8456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.145681][ T8456] Cannot create hsr debugfs directory [ 65.196857][ T8458] device hsr_slave_0 entered promiscuous mode [ 65.207063][ T8458] device hsr_slave_1 entered promiscuous mode [ 65.214080][ T8458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.222910][ T8458] Cannot create hsr debugfs directory [ 65.525592][ T8457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.560564][ T8457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.590817][ T8452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.601309][ T8457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.629667][ T8452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.639126][ T8457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.660897][ T8451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.668947][ T8452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.695356][ T8452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.705938][ T8451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.719469][ T8451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.733416][ T8451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.757732][ T8459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.833104][ T8459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.845275][ T8459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.855584][ T8459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.971279][ T8456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.022427][ T8456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.046599][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.061407][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.068647][ T8458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.079908][ T8456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.099381][ T8456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.133056][ T8451] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.141495][ T8458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.157540][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.167191][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.175985][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.184998][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.201144][ T8457] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.220201][ T8458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.235610][ T8458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.251433][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.261668][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.270679][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.277936][ T9739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.286639][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.295864][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.304281][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.311386][ T9739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.318935][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.327891][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.338152][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.349970][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.378264][ T9336] Bluetooth: hci0: command 0x041b tx timeout [ 66.402361][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.411317][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.422090][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.429139][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.437628][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.447222][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.457042][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.464273][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.472956][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.482263][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.491531][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.505358][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.513837][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.526901][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.535831][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.539790][ T9714] Bluetooth: hci5: command 0x041b tx timeout [ 66.543859][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.556999][ T9714] Bluetooth: hci1: command 0x041b tx timeout [ 66.569381][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.571545][ T20] Bluetooth: hci4: command 0x041b tx timeout [ 66.592817][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.610388][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.618058][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.628252][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.637506][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.646627][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.655538][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.670536][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.691737][ T9724] Bluetooth: hci3: command 0x041b tx timeout [ 66.697804][ T9724] Bluetooth: hci2: command 0x041b tx timeout [ 66.727980][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.737841][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.747547][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.754670][ T9714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.762768][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.771856][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.781354][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.789931][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.798161][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.807061][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.815495][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.824398][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.833140][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.840250][ T9714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.847909][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.856766][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.864655][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.872254][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.891906][ T8457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.909045][ T8457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.933482][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.941289][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.949241][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.957968][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.967020][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.975394][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.983488][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.991627][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.000964][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.009231][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.018233][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.027139][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.035520][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.051100][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.063017][ T8452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.081019][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.111251][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.124510][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.133496][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.141962][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.151450][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.158823][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.166986][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.176359][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.185176][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.192333][ T9714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.205029][ T9759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.220438][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.227831][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.245709][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.272940][ T8456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.285605][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.298270][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.307608][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.314719][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.322770][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.333090][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.376200][ T8451] device veth0_vlan entered promiscuous mode [ 67.384366][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.394600][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.404939][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.413871][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.422557][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.431759][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.446432][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.459753][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.475321][ T8451] device veth1_vlan entered promiscuous mode [ 67.488600][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.496847][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.505180][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.514175][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.523487][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.532254][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.541422][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.550523][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.558935][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.568259][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.584188][ T8456] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.610688][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.618565][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.627004][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.635194][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.644815][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.653608][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.660742][ T9336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.668431][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.676823][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.685026][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.693551][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.709597][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.717882][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.726994][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.736015][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.743264][ T9336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.751115][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.813773][ T8459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.835536][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.845747][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.857480][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.864595][ T9714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.873501][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.882423][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.891723][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.898826][ T9714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.907254][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.916635][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.925535][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.935156][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.944557][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.986648][ T8451] device veth0_macvtap entered promiscuous mode [ 68.001565][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.010494][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.019139][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.028976][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.038110][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.046866][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.055478][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.064171][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.072574][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.081231][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.089577][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.097690][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.106694][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.115292][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.123654][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.132438][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.141250][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.150068][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.157662][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.165701][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.173563][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.181905][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.189705][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.197331][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.207983][ T8452] device veth0_vlan entered promiscuous mode [ 68.224471][ T8457] device veth0_vlan entered promiscuous mode [ 68.251637][ T8451] device veth1_macvtap entered promiscuous mode [ 68.259988][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.267378][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.276202][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.285716][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.296320][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.304964][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.313696][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.322224][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.338891][ T8452] device veth1_vlan entered promiscuous mode [ 68.351462][ T8457] device veth1_vlan entered promiscuous mode [ 68.361627][ T8458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.386870][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.401576][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.417876][ T8456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.456322][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.459820][ T4123] Bluetooth: hci0: command 0x040f tx timeout [ 68.465991][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.480199][ T9763] modprobe (9763) used greatest stack depth: 21864 bytes left [ 68.490430][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.497954][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.506779][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.515777][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.534363][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.550608][ T8451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.564239][ T8451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.573975][ T8451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.583235][ T8451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.597371][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.607439][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.617708][ T9700] Bluetooth: hci1: command 0x040f tx timeout [ 68.625250][ T8457] device veth0_macvtap entered promiscuous mode [ 68.627826][ T9700] Bluetooth: hci5: command 0x040f tx timeout [ 68.637382][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.687197][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.698457][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.708570][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.718030][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.727043][ T9336] Bluetooth: hci4: command 0x040f tx timeout [ 68.736227][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.745789][ T8452] device veth0_macvtap entered promiscuous mode [ 68.769820][ T9758] Bluetooth: hci3: command 0x040f tx timeout [ 68.778028][ T8457] device veth1_macvtap entered promiscuous mode [ 68.779430][ T9739] Bluetooth: hci2: command 0x040f tx timeout [ 68.819220][ T8452] device veth1_macvtap entered promiscuous mode [ 68.888129][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.897712][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.916200][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.942711][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.958904][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.968801][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.979117][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.021377][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.033012][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.048444][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.069751][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.071026][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.077698][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.108404][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.118429][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.129807][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.141627][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.150052][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.158445][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.167950][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.177359][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.186497][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.195090][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.204210][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.227405][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.244853][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.260876][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.273454][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.284323][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.294740][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.305721][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.316973][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.334436][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.342321][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.351286][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.361117][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.371033][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.380194][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.388739][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.397930][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.426205][ T8457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.435175][ T8457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.452652][ T8457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.462226][ T8457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.474712][ T8458] device veth0_vlan entered promiscuous mode [ 69.485687][ T8452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.497592][ T8452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.510450][ T8452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.519159][ T8452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.536924][ T8456] device veth0_vlan entered promiscuous mode [ 69.546066][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.555130][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.563930][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.573273][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.605742][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.614399][ T8456] device veth1_vlan entered promiscuous mode [ 69.621868][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.628426][ T8458] device veth1_vlan entered promiscuous mode [ 69.676555][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.690771][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.705567][ T8459] device veth0_vlan entered promiscuous mode [ 69.774166][ T9804] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 69.824624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.826568][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.838881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.852906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.880143][ T8459] device veth1_vlan entered promiscuous mode [ 69.881334][ T9804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 69.887100][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.906162][ T9804] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 69.934702][ T8456] device veth0_macvtap entered promiscuous mode [ 69.961409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.961541][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.975953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.987592][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.996309][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.001379][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.005747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.021120][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.046075][ T8456] device veth1_macvtap entered promiscuous mode [ 70.088038][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.091703][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.113970][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.120582][ T9835] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 70.137388][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.156370][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.160696][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.173623][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.183069][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.223316][ T8458] device veth0_macvtap entered promiscuous mode [ 70.254500][ T9835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.264068][ T8458] device veth1_macvtap entered promiscuous mode 2021/06/16 16:15:35 executed programs: 6 [ 70.272650][ T9835] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 70.295734][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.330256][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.338356][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.342310][ T9846] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 70.372954][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 70.375153][ T9846] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.392900][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.406319][ T9846] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 70.418146][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 70.449629][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.459069][ T9851] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 70.470635][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 70.481380][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.502402][ T8456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.530888][ T9851] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.539879][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 70.540610][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.558688][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.575762][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.584989][ T9851] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 70.600040][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.610302][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.618928][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.628866][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.634599][ T9853] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 70.642502][ T8459] device veth0_macvtap entered promiscuous mode [ 70.674669][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 70.689838][ T9739] Bluetooth: hci5: command 0x0419 tx timeout [ 70.700293][ T9739] Bluetooth: hci1: command 0x0419 tx timeout [ 70.704938][ T9857] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 70.708992][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.735693][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 70.766574][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.769882][ T9764] Bluetooth: hci4: command 0x0419 tx timeout [ 70.780090][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 70.803139][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.818583][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 70.840456][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.851877][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.852024][ T9764] Bluetooth: hci2: command 0x0419 tx timeout [ 70.858350][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.869921][ T9764] Bluetooth: hci3: command 0x0419 tx timeout [ 70.896185][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.906449][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.922663][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.942339][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.957103][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.969412][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.979600][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.993592][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.005004][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.016139][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.027905][ T8456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.037188][ T9853] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.040063][ T8459] device veth1_macvtap entered promiscuous mode [ 71.047947][ T9853] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 71.072271][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.084868][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.108237][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.118831][ T9866] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 71.132090][ T9868] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 71.142880][ T8456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.166032][ T9869] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 71.189213][ T8456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.198027][ T8456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.213674][ T8456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.237334][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.262341][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.294231][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.311893][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.322441][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.333886][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.344161][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.355005][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.366969][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.379389][ T9866] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.388770][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 71.396881][ T9866] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 71.426947][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.448619][ T9876] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 71.471904][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 71.487122][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.505342][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 71.520186][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.533768][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 71.546793][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.559254][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 71.571600][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.584463][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.593081][ T9868] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.607557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.617467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.618053][ T9868] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 71.634561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.655482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.684597][ T9876] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.685563][ T8458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.712256][ T9876] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 71.752031][ T8458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.765812][ T8458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.780663][ T8458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.852404][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.878949][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.899796][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.917282][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.944289][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.967633][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.994789][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 72.013747][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.025316][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 72.036792][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.052445][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.065976][ T9886] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.077524][ T9886] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 72.100014][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.121335][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.149720][ T9886] ================================================================== [ 72.157954][ T9886] BUG: KASAN: use-after-free in __list_add_valid+0x81/0xa0 [ 72.165331][ T9886] Read of size 8 at addr ffff888027dcb6c8 by task syz-executor.3/9886 [ 72.173550][ T9886] [ 72.175869][ T9886] CPU: 0 PID: 9886 Comm: syz-executor.3 Not tainted 5.13.0-rc3-syzkaller #0 [ 72.184545][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.194605][ T9886] Call Trace: [ 72.197892][ T9886] dump_stack+0x141/0x1d7 [ 72.202256][ T9886] ? __list_add_valid+0x81/0xa0 [ 72.207124][ T9886] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 72.214214][ T9886] ? __list_add_valid+0x81/0xa0 [ 72.219108][ T9886] ? __list_add_valid+0x81/0xa0 [ 72.223975][ T9886] kasan_report.cold+0x7c/0xd8 [ 72.228751][ T9886] ? __list_add_valid+0x81/0xa0 [ 72.233617][ T9886] __list_add_valid+0x81/0xa0 [ 72.238304][ T9886] firmware_fallback_sysfs+0x455/0xe20 [ 72.243786][ T9886] _request_firmware+0xa80/0xe80 [ 72.248745][ T9886] request_firmware+0x32/0x50 [ 72.253440][ T9886] reg_reload_regdb+0x7a/0x240 [ 72.258215][ T9886] ? is_world_regdom+0xe0/0xe0 [ 72.262993][ T9886] ? nl80211_set_qos_map+0x800/0x800 [ 72.268291][ T9886] ? nl80211_pre_doit+0xa6/0x620 [ 72.273265][ T9886] genl_family_rcv_msg_doit+0x228/0x320 [ 72.278828][ T9886] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 72.286233][ T9886] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.292486][ T9886] ? ns_capable+0xde/0x100 [ 72.296928][ T9886] genl_rcv_msg+0x328/0x580 [ 72.301449][ T9886] ? genl_get_cmd+0x480/0x480 [ 72.306137][ T9886] ? nl80211_stop_sched_scan+0x3a0/0x3a0 [ 72.311794][ T9886] ? lock_release+0x720/0x720 [ 72.316473][ T9886] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 72.321754][ T9886] netlink_rcv_skb+0x153/0x420 [ 72.326521][ T9886] ? genl_get_cmd+0x480/0x480 [ 72.331189][ T9886] ? netlink_ack+0xaa0/0xaa0 [ 72.335818][ T9886] genl_rcv+0x24/0x40 [ 72.339793][ T9886] netlink_unicast+0x533/0x7d0 [ 72.344559][ T9886] ? netlink_attachskb+0x870/0x870 [ 72.349656][ T9886] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.355902][ T9886] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.362134][ T9886] ? __phys_addr_symbol+0x2c/0x70 [ 72.367164][ T9886] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 72.372895][ T9886] ? __check_object_size+0x171/0x3f0 [ 72.378186][ T9886] netlink_sendmsg+0x856/0xd90 [ 72.382970][ T9886] ? netlink_unicast+0x7d0/0x7d0 [ 72.387914][ T9886] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.394141][ T9886] ? netlink_unicast+0x7d0/0x7d0 [ 72.399067][ T9886] sock_sendmsg+0xcf/0x120 [ 72.403479][ T9886] ____sys_sendmsg+0x6e8/0x810 [ 72.408226][ T9886] ? kernel_sendmsg+0x50/0x50 [ 72.412978][ T9886] ? do_recvmmsg+0x6d0/0x6d0 [ 72.417579][ T9886] ? lock_chain_count+0x20/0x20 [ 72.422424][ T9886] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.428409][ T9886] ___sys_sendmsg+0xf3/0x170 [ 72.433001][ T9886] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.438383][ T9886] ? __fget_files+0x266/0x3d0 [ 72.443051][ T9886] ? lock_downgrade+0x6e0/0x6e0 [ 72.447910][ T9886] ? __fget_files+0x288/0x3d0 [ 72.452586][ T9886] ? __fget_light+0xea/0x280 [ 72.457188][ T9886] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.463448][ T9886] __sys_sendmsg+0xe5/0x1b0 [ 72.467970][ T9886] ? __sys_sendmsg_sock+0x30/0x30 [ 72.473116][ T9886] ? syscall_enter_from_user_mode+0x27/0x70 [ 72.479017][ T9886] do_syscall_64+0x3a/0xb0 [ 72.483447][ T9886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.489350][ T9886] RIP: 0033:0x4665d9 [ 72.493241][ T9886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.512835][ T9886] RSP: 002b:00007f26c8169188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.521239][ T9886] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 72.529210][ T9886] RDX: 0000000000000000 RSI: 0000000020001280 RDI: 0000000000000003 [ 72.537185][ T9886] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 72.545173][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 72.553155][ T9886] R13: 00007ffcb82cb57f R14: 00007f26c8169300 R15: 0000000000022000 [ 72.561167][ T9886] [ 72.563496][ T9886] Allocated by task 9876: [ 72.567819][ T9886] kasan_save_stack+0x1b/0x40 [ 72.572497][ T9886] __kasan_kmalloc+0x9b/0xd0 [ 72.577096][ T9886] _request_firmware+0x2de/0xe80 [ 72.582051][ T9886] request_firmware+0x32/0x50 [ 72.586741][ T9886] reg_reload_regdb+0x7a/0x240 [ 72.591518][ T9886] genl_family_rcv_msg_doit+0x228/0x320 [ 72.597063][ T9886] genl_rcv_msg+0x328/0x580 [ 72.601555][ T9886] netlink_rcv_skb+0x153/0x420 [ 72.606317][ T9886] genl_rcv+0x24/0x40 [ 72.610288][ T9886] netlink_unicast+0x533/0x7d0 [ 72.615051][ T9886] netlink_sendmsg+0x856/0xd90 [ 72.619810][ T9886] sock_sendmsg+0xcf/0x120 [ 72.624235][ T9886] ____sys_sendmsg+0x6e8/0x810 [ 72.629005][ T9886] ___sys_sendmsg+0xf3/0x170 [ 72.633595][ T9886] __sys_sendmsg+0xe5/0x1b0 [ 72.638080][ T9886] do_syscall_64+0x3a/0xb0 [ 72.642496][ T9886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.648395][ T9886] [ 72.650711][ T9886] Freed by task 9876: [ 72.654686][ T9886] kasan_save_stack+0x1b/0x40 [ 72.659359][ T9886] kasan_set_track+0x1c/0x30 [ 72.663957][ T9886] kasan_set_free_info+0x20/0x30 [ 72.668891][ T9886] __kasan_slab_free+0xfb/0x130 [ 72.673739][ T9886] slab_free_freelist_hook+0xdf/0x240 [ 72.679116][ T9886] kfree+0xe5/0x7f0 [ 72.682929][ T9886] free_fw_priv+0x2b1/0x4d0 [ 72.687436][ T9886] release_firmware.part.0+0xc7/0xf0 [ 72.692723][ T9886] _request_firmware+0x709/0xe80 [ 72.697666][ T9886] request_firmware+0x32/0x50 [ 72.702331][ T9886] reg_reload_regdb+0x7a/0x240 [ 72.707100][ T9886] genl_family_rcv_msg_doit+0x228/0x320 [ 72.712650][ T9886] genl_rcv_msg+0x328/0x580 [ 72.717144][ T9886] netlink_rcv_skb+0x153/0x420 [ 72.721899][ T9886] genl_rcv+0x24/0x40 [ 72.725883][ T9886] netlink_unicast+0x533/0x7d0 [ 72.730637][ T9886] netlink_sendmsg+0x856/0xd90 [ 72.735406][ T9886] sock_sendmsg+0xcf/0x120 [ 72.739812][ T9886] ____sys_sendmsg+0x6e8/0x810 [ 72.744585][ T9886] ___sys_sendmsg+0xf3/0x170 [ 72.749189][ T9886] __sys_sendmsg+0xe5/0x1b0 [ 72.753702][ T9886] do_syscall_64+0x3a/0xb0 [ 72.758126][ T9886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.764033][ T9886] [ 72.766357][ T9886] The buggy address belongs to the object at ffff888027dcb600 [ 72.766357][ T9886] which belongs to the cache kmalloc-256 of size 256 [ 72.780407][ T9886] The buggy address is located 200 bytes inside of [ 72.780407][ T9886] 256-byte region [ffff888027dcb600, ffff888027dcb700) [ 72.793686][ T9886] The buggy address belongs to the page: [ 72.799303][ T9886] page:ffffea00009f7280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27dca [ 72.809456][ T9886] head:ffffea00009f7280 order:1 compound_mapcount:0 [ 72.816030][ T9886] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 72.824009][ T9886] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888011041b40 [ 72.832591][ T9886] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 72.841168][ T9886] page dumped because: kasan: bad access detected [ 72.847578][ T9886] page_owner tracks the page as allocated [ 72.853294][ T9886] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8456, ts 71228768215, free_ts 71104527623 [ 72.870320][ T9886] get_page_from_freelist+0x1033/0x2b60 [ 72.875892][ T9886] __alloc_pages+0x1b2/0x500 [ 72.880478][ T9886] alloc_pages+0x18c/0x2a0 [ 72.884902][ T9886] allocate_slab+0x2c5/0x4c0 [ 72.889501][ T9886] ___slab_alloc+0x4a1/0x810 [ 72.894100][ T9886] __slab_alloc.constprop.0+0xa7/0xf0 [ 72.899473][ T9886] kmem_cache_alloc_trace+0x2a3/0x2c0 [ 72.904855][ T9886] fib6_info_alloc+0xbe/0x1d0 [ 72.909531][ T9886] ip6_route_info_create+0x33e/0x1aa0 [ 72.914886][ T9886] ip6_route_add+0x24/0x150 [ 72.919376][ T9886] addrconf_prefix_route+0x34b/0x4d0 [ 72.924661][ T9886] addrconf_add_linklocal+0x24d/0x590 [ 72.930032][ T9886] addrconf_addr_gen+0x3a4/0x3e0 [ 72.934950][ T9886] addrconf_dev_config+0x26c/0x410 [ 72.940046][ T9886] addrconf_notify+0x362/0x23e0 [ 72.944919][ T9886] notifier_call_chain+0xb5/0x200 [ 72.949957][ T9886] page last free stack trace: [ 72.954607][ T9886] __free_pages_ok+0x476/0xce0 [ 72.959359][ T9886] qlist_free_all+0x5a/0xc0 [ 72.963863][ T9886] kasan_quarantine_reduce+0x180/0x200 [ 72.969323][ T9886] __kasan_slab_alloc+0x8e/0xa0 [ 72.974155][ T9886] kmem_cache_alloc_node_trace+0x255/0x300 [ 72.979951][ T9886] __get_vm_area_node+0xd3/0x380 [ 72.984892][ T9886] __vmalloc_node_range+0x135/0x970 [ 72.990084][ T9886] vzalloc+0x67/0x80 [ 72.993957][ T9886] do_ip6t_get_ctl+0x615/0xa10 [ 72.998704][ T9886] nf_getsockopt+0x72/0xd0 [ 73.003111][ T9886] ipv6_getsockopt+0x1be/0x270 [ 73.007873][ T9886] tcp_getsockopt+0x86/0xd0 [ 73.012363][ T9886] __sys_getsockopt+0x21f/0x5f0 [ 73.017218][ T9886] __x64_sys_getsockopt+0xba/0x150 [ 73.022337][ T9886] do_syscall_64+0x3a/0xb0 [ 73.026762][ T9886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.032677][ T9886] [ 73.034984][ T9886] Memory state around the buggy address: [ 73.040600][ T9886] ffff888027dcb580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.048660][ T9886] ffff888027dcb600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.056712][ T9886] >ffff888027dcb680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.064757][ T9886] ^ [ 73.071159][ T9886] ffff888027dcb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.079381][ T9886] ffff888027dcb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.087430][ T9886] ================================================================== [ 73.095483][ T9886] Disabling lock debugging due to kernel taint [ 73.111803][ T9886] Kernel panic - not syncing: panic_on_warn set ... [ 73.118494][ T9886] CPU: 1 PID: 9886 Comm: syz-executor.3 Tainted: G B 5.13.0-rc3-syzkaller #0 [ 73.128587][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.138717][ T9886] Call Trace: [ 73.141992][ T9886] dump_stack+0x141/0x1d7 [ 73.146313][ T9886] panic+0x306/0x73d [ 73.150225][ T9886] ? __warn_printk+0xf3/0xf3 [ 73.154805][ T9886] ? preempt_schedule_common+0x59/0xc0 [ 73.160265][ T9886] ? __list_add_valid+0x81/0xa0 [ 73.165104][ T9886] ? preempt_schedule_thunk+0x16/0x18 [ 73.170462][ T9886] ? trace_hardirqs_on+0x38/0x1c0 [ 73.175481][ T9886] ? trace_hardirqs_on+0x51/0x1c0 [ 73.180494][ T9886] ? __list_add_valid+0x81/0xa0 [ 73.185332][ T9886] ? __list_add_valid+0x81/0xa0 [ 73.190196][ T9886] end_report.cold+0x5a/0x5a [ 73.194787][ T9886] kasan_report.cold+0x6a/0xd8 [ 73.199544][ T9886] ? __list_add_valid+0x81/0xa0 [ 73.204379][ T9886] __list_add_valid+0x81/0xa0 [ 73.209040][ T9886] firmware_fallback_sysfs+0x455/0xe20 [ 73.214488][ T9886] _request_firmware+0xa80/0xe80 [ 73.219411][ T9886] request_firmware+0x32/0x50 [ 73.224086][ T9886] reg_reload_regdb+0x7a/0x240 [ 73.228833][ T9886] ? is_world_regdom+0xe0/0xe0 [ 73.233574][ T9886] ? nl80211_set_qos_map+0x800/0x800 [ 73.238847][ T9886] ? nl80211_pre_doit+0xa6/0x620 [ 73.243793][ T9886] genl_family_rcv_msg_doit+0x228/0x320 [ 73.249337][ T9886] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 73.256694][ T9886] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.262927][ T9886] ? ns_capable+0xde/0x100 [ 73.267337][ T9886] genl_rcv_msg+0x328/0x580 [ 73.271822][ T9886] ? genl_get_cmd+0x480/0x480 [ 73.276478][ T9886] ? nl80211_stop_sched_scan+0x3a0/0x3a0 [ 73.282106][ T9886] ? lock_release+0x720/0x720 [ 73.286813][ T9886] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 73.292084][ T9886] netlink_rcv_skb+0x153/0x420 [ 73.296828][ T9886] ? genl_get_cmd+0x480/0x480 [ 73.301490][ T9886] ? netlink_ack+0xaa0/0xaa0 [ 73.306063][ T9886] genl_rcv+0x24/0x40 [ 73.310028][ T9886] netlink_unicast+0x533/0x7d0 [ 73.314776][ T9886] ? netlink_attachskb+0x870/0x870 [ 73.319871][ T9886] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.326119][ T9886] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.332347][ T9886] ? __phys_addr_symbol+0x2c/0x70 [ 73.337357][ T9886] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 73.343059][ T9886] ? __check_object_size+0x171/0x3f0 [ 73.348332][ T9886] netlink_sendmsg+0x856/0xd90 [ 73.353097][ T9886] ? netlink_unicast+0x7d0/0x7d0 [ 73.358018][ T9886] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.364239][ T9886] ? netlink_unicast+0x7d0/0x7d0 [ 73.369152][ T9886] sock_sendmsg+0xcf/0x120 [ 73.373547][ T9886] ____sys_sendmsg+0x6e8/0x810 [ 73.378288][ T9886] ? kernel_sendmsg+0x50/0x50 [ 73.382955][ T9886] ? do_recvmmsg+0x6d0/0x6d0 [ 73.387536][ T9886] ? lock_chain_count+0x20/0x20 [ 73.392367][ T9886] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.398339][ T9886] ___sys_sendmsg+0xf3/0x170 [ 73.402919][ T9886] ? sendmsg_copy_msghdr+0x160/0x160 [ 73.408197][ T9886] ? __fget_files+0x266/0x3d0 [ 73.412857][ T9886] ? lock_downgrade+0x6e0/0x6e0 [ 73.417698][ T9886] ? __fget_files+0x288/0x3d0 [ 73.422357][ T9886] ? __fget_light+0xea/0x280 [ 73.426932][ T9886] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.433160][ T9886] __sys_sendmsg+0xe5/0x1b0 [ 73.437647][ T9886] ? __sys_sendmsg_sock+0x30/0x30 [ 73.442659][ T9886] ? syscall_enter_from_user_mode+0x27/0x70 [ 73.448546][ T9886] do_syscall_64+0x3a/0xb0 [ 73.452946][ T9886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.458822][ T9886] RIP: 0033:0x4665d9 [ 73.462700][ T9886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.482284][ T9886] RSP: 002b:00007f26c8169188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.490761][ T9886] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 73.498729][ T9886] RDX: 0000000000000000 RSI: 0000000020001280 RDI: 0000000000000003 [ 73.506695][ T9886] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 73.514645][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 73.522595][ T9886] R13: 00007ffcb82cb57f R14: 00007f26c8169300 R15: 0000000000022000 [ 73.531317][ T9886] Kernel Offset: disabled [ 73.535624][ T9886] Rebooting in 86400 seconds..