[ 41.976752][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.986435][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.012240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.029881][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.042649][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.056589][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.893617][ T8436] can: request_module (can-proto-0) failed. [ 42.909502][ T8436] can: request_module (can-proto-0) failed. [ 42.921033][ T8436] can: request_module (can-proto-0) failed. [ 44.228774][ T37] audit: type=1804 audit(1633884579.952:2): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="scp" name="/root/syz-executor" dev="sda1" ino=13854 res=1 errno=0 [ 45.023524][ T8447] syz-executor.0 (8447) used greatest stack depth: 23208 bytes left [ 45.073982][ T172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.676332][ T172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.794251][ T172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.925809][ T172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.679000][ T172] device hsr_slave_0 left promiscuous mode [ 49.685752][ T172] device hsr_slave_1 left promiscuous mode [ 49.692059][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.700045][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.709626][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.718358][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.727730][ T172] device bridge_slave_1 left promiscuous mode [ 49.735204][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.748378][ T172] device bridge_slave_0 left promiscuous mode [ 49.755058][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.770594][ T172] device veth1_macvtap left promiscuous mode [ 49.777926][ T172] device veth0_macvtap left promiscuous mode [ 49.785775][ T172] device veth1_vlan left promiscuous mode [ 49.791672][ T172] device veth0_vlan left promiscuous mode [ 52.806265][ T172] team0 (unregistering): Port device team_slave_1 removed [ 52.821325][ T172] team0 (unregistering): Port device team_slave_0 removed [ 52.833444][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.849183][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.894074][ T172] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.100' (ECDSA) to the list of known hosts. 2021/10/10 16:49:49 parsed 1 programs 2021/10/10 16:49:50 executed programs: 0 [ 56.303689][ T8844] chnl_net:caif_netlink_parms(): no params data found [ 56.387454][ T8843] chnl_net:caif_netlink_parms(): no params data found [ 56.440205][ T8839] chnl_net:caif_netlink_parms(): no params data found [ 56.467238][ T8841] chnl_net:caif_netlink_parms(): no params data found [ 56.529490][ T8837] chnl_net:caif_netlink_parms(): no params data found [ 56.542920][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 56.638077][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.650536][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.659923][ T8843] device bridge_slave_0 entered promiscuous mode [ 56.672451][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.681059][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.689567][ T8843] device bridge_slave_1 entered promiscuous mode [ 56.717060][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.725873][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.738371][ T8844] device bridge_slave_0 entered promiscuous mode [ 56.748751][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.758096][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.767291][ T8844] device bridge_slave_1 entered promiscuous mode [ 56.832970][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.849764][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.858543][ T8837] device bridge_slave_0 entered promiscuous mode [ 56.867906][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.883256][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.902236][ T8839] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.909495][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.918611][ T8839] device bridge_slave_0 entered promiscuous mode [ 56.926677][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.937219][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.947228][ T8837] device bridge_slave_1 entered promiscuous mode [ 56.968958][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.979384][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.987857][ T8841] device bridge_slave_0 entered promiscuous mode [ 56.997309][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.008194][ T8839] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.015944][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.023602][ T8839] device bridge_slave_1 entered promiscuous mode [ 57.041810][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.049229][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.058518][ T8842] device bridge_slave_0 entered promiscuous mode [ 57.067289][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.075732][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.083537][ T8841] device bridge_slave_1 entered promiscuous mode [ 57.092322][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.113975][ T8843] team0: Port device team_slave_0 added [ 57.120110][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.130910][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.139898][ T8842] device bridge_slave_1 entered promiscuous mode [ 57.173638][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.187155][ T8843] team0: Port device team_slave_1 added [ 57.199917][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.216331][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.231542][ T8839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.242684][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.257353][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.268088][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.280139][ T8844] team0: Port device team_slave_0 added [ 57.288519][ T8839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.322713][ T8844] team0: Port device team_slave_1 added [ 57.338847][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.347619][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.375925][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.408098][ T8837] team0: Port device team_slave_0 added [ 57.415603][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.422791][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.451345][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.465571][ T8842] team0: Port device team_slave_0 added [ 57.473238][ T8839] team0: Port device team_slave_0 added [ 57.482137][ T8841] team0: Port device team_slave_0 added [ 57.494256][ T8837] team0: Port device team_slave_1 added [ 57.505597][ T8842] team0: Port device team_slave_1 added [ 57.512347][ T8839] team0: Port device team_slave_1 added [ 57.520760][ T8841] team0: Port device team_slave_1 added [ 57.532982][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.541310][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.568836][ T8844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.607786][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.615141][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.646074][ T8844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.675573][ T8843] device hsr_slave_0 entered promiscuous mode [ 57.682903][ T8843] device hsr_slave_1 entered promiscuous mode [ 57.718235][ T8844] device hsr_slave_0 entered promiscuous mode [ 57.725822][ T8844] device hsr_slave_1 entered promiscuous mode [ 57.732450][ T8844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.741382][ T8844] Cannot create hsr debugfs directory [ 57.748173][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.755674][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.783419][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 57.784244][ T4878] Bluetooth: hci0: command 0x0409 tx timeout [ 57.790711][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 57.801656][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.803261][ T4878] Bluetooth: hci4: command 0x0409 tx timeout [ 57.812355][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 57.819776][ T4878] Bluetooth: hci1: command 0x0409 tx timeout [ 57.825601][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.838917][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.865404][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.887886][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.895137][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.924122][ T8839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.938297][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.946344][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.973548][ T8841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.986903][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.994802][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.021455][ T8841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.033622][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.041628][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.068929][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.080690][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.088196][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.114895][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.132990][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.140496][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.167130][ T8839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.232641][ T8842] device hsr_slave_0 entered promiscuous mode [ 58.239835][ T8842] device hsr_slave_1 entered promiscuous mode [ 58.247849][ T8842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.255722][ T8842] Cannot create hsr debugfs directory [ 58.280760][ T8837] device hsr_slave_0 entered promiscuous mode [ 58.288262][ T8837] device hsr_slave_1 entered promiscuous mode [ 58.297486][ T8837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.305873][ T8837] Cannot create hsr debugfs directory [ 58.323727][ T8841] device hsr_slave_0 entered promiscuous mode [ 58.331102][ T8841] device hsr_slave_1 entered promiscuous mode [ 58.338399][ T8841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.347778][ T8841] Cannot create hsr debugfs directory [ 58.359421][ T8839] device hsr_slave_0 entered promiscuous mode [ 58.367062][ T8839] device hsr_slave_1 entered promiscuous mode [ 58.373552][ T8839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.381955][ T8839] Cannot create hsr debugfs directory [ 58.725413][ T8844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.751561][ T8844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.762026][ T8844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.780605][ T8841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.797186][ T8844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.811576][ T8841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.820999][ T8841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.837425][ T8841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.906106][ T8843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.925691][ T8843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.949660][ T8843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.963796][ T8842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.000502][ T8843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.010196][ T8842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.042454][ T8842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.062563][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.075809][ T8842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.088997][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.110355][ T8839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.121798][ T8841] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.156805][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.165882][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.173478][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.182136][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.191182][ T8839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.200988][ T8839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.211190][ T8839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.227160][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.241430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.252754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.263939][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.271240][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.283117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.291788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.300896][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.308038][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.317315][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.325331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.365923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.375965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.385920][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.392974][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.401374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.410708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.419548][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.426694][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.435253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.443821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.452635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.461410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.470797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.487052][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.494974][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.503687][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.513237][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.523694][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.552748][ T8841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.567502][ T8841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.587159][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.596252][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.606656][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.616153][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.625296][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.633764][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.643508][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.652518][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.661523][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.670213][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.679060][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.692319][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.735926][ T8844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.747619][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.758339][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.768206][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.776875][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.785278][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.803223][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.811040][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.822023][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.837011][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.844670][T10127] Bluetooth: hci1: command 0x041b tx timeout [ 59.860892][ T8843] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.864235][T10127] Bluetooth: hci4: command 0x041b tx timeout [ 59.893819][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.901597][T10127] Bluetooth: hci0: command 0x041b tx timeout [ 59.913385][T10127] Bluetooth: hci5: command 0x041b tx timeout [ 59.924418][T10127] Bluetooth: hci2: command 0x041b tx timeout [ 59.926390][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.931436][ T8] Bluetooth: hci3: command 0x041b tx timeout [ 59.949194][ T8839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.974890][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.981892][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.001536][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.011137][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.023530][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.031708][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.043684][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.057144][ T8839] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.078250][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.086616][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.095203][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.103589][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.113028][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.120415][ T4832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.129082][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.138516][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.147511][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.154653][ T4832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.162768][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.172701][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.181765][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.191202][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.200207][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.207483][ T4832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.217137][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.251521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.267445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.276390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.286985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.297174][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.304304][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.312930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.322534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.332282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.341940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.351036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.359965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.368897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.411418][ T8843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.422801][ T8843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.439455][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.447820][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.456751][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.465304][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.472965][T10127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.480971][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.490015][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.498698][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.505913][T10127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.513761][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.522456][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.531716][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.540546][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.549276][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.556576][T10127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.564814][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.573401][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.582557][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.589708][T10127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.597713][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.606376][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.614995][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.623706][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.632496][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.641315][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.667680][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.677216][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.685768][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.693790][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.702885][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.712289][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.721122][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.730102][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.738980][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.747821][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.756468][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.765297][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.773380][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.782209][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.791205][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.799293][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.810333][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.873033][ T8839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.891345][ T8839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.903496][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.912558][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.921831][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.931106][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.939943][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.948588][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.957072][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.965797][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.974574][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.983294][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.992016][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.000625][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.009260][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.018325][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.027095][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.035521][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.047342][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.073449][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.101363][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.108965][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.118050][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.144261][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.152171][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.161096][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.172839][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.181131][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.196359][ T8844] device veth0_vlan entered promiscuous mode [ 61.206991][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.215559][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.223584][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.232578][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.241684][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.249876][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.259421][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.267898][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.286891][ T8841] device veth0_vlan entered promiscuous mode [ 61.297738][ T8839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.310465][ T8844] device veth1_vlan entered promiscuous mode [ 61.334993][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.342975][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.351188][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.364623][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.373191][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.387067][ T8841] device veth1_vlan entered promiscuous mode [ 61.395112][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.456554][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.465629][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.473717][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.482651][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.491897][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.501180][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.510167][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.522964][ T8843] device veth0_vlan entered promiscuous mode [ 61.540508][ T8844] device veth0_macvtap entered promiscuous mode [ 61.551276][ T8844] device veth1_macvtap entered promiscuous mode [ 61.562286][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.571834][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.581734][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.591194][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.599932][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.617688][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.627406][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.641063][ T8843] device veth1_vlan entered promiscuous mode [ 61.653068][ T8841] device veth0_macvtap entered promiscuous mode [ 61.665827][ T8839] device veth0_vlan entered promiscuous mode [ 61.679414][ T8842] device veth0_vlan entered promiscuous mode [ 61.705274][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.712914][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.721342][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.729904][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.738327][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.746595][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.755442][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.764473][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.773050][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.781863][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.791989][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.801089][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.809028][T10140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.819332][ T8841] device veth1_macvtap entered promiscuous mode [ 61.831472][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.864771][ T8839] device veth1_vlan entered promiscuous mode [ 61.873022][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.882548][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.893069][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.902754][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.911727][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.920527][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.935326][ T8843] device veth0_macvtap entered promiscuous mode [ 61.944493][ T8842] device veth1_vlan entered promiscuous mode [ 61.945204][T10126] Bluetooth: hci0: command 0x040f tx timeout [ 61.959274][ T8843] device veth1_macvtap entered promiscuous mode [ 61.967746][T10126] Bluetooth: hci4: command 0x040f tx timeout [ 61.977997][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.978060][T10126] Bluetooth: hci1: command 0x040f tx timeout [ 61.994943][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.003046][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.011682][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.021427][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.030441][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.040162][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.052817][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 62.067016][ T4954] Bluetooth: hci3: command 0x040f tx timeout [ 62.073509][ T4954] Bluetooth: hci2: command 0x040f tx timeout [ 62.080322][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.091009][ T4954] Bluetooth: hci5: command 0x040f tx timeout [ 62.103768][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.115136][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 62.125953][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.137551][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.152018][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 62.163804][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.178202][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 62.189869][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.201895][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.214950][ T8844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.225723][ T8844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.235002][ T8844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.245453][ T8844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.256323][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.268816][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.276514][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.286914][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.296143][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.305748][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.315647][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.325211][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.336251][ T8837] device veth0_vlan entered promiscuous mode [ 62.357082][ T8841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.367411][ T8841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.380547][ T8841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.391301][ T8841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.406982][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 62.418126][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.428540][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 62.439505][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.454556][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.462359][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.472423][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.481507][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.490669][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.500262][ T8839] device veth0_macvtap entered promiscuous mode [ 62.510393][ T8837] device veth1_vlan entered promiscuous mode [ 62.524665][ T8842] device veth0_macvtap entered promiscuous mode [ 62.544719][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.552588][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.561643][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.570495][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.583373][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.595102][ T8843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.604839][ T8843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.613836][ T8843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.623202][ T8843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.635527][ T8842] device veth1_macvtap entered promiscuous mode [ 62.647772][ T8839] device veth1_macvtap entered promiscuous mode [ 62.700320][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 62.712220][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.722986][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 62.735264][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.745771][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 62.757401][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.769000][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.802495][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 62.825804][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.836882][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 62.850941][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.861898][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 62.873574][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.885461][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.894316][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.902236][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.919946][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.928932][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.940954][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.951048][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.963242][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.980687][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 62.996454][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.007047][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.018582][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.028959][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.039942][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.050923][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.062024][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.073344][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.089649][ T8842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.106332][ T8842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.116013][ T8842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.125302][ T8842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.150733][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.165265][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.174847][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.185073][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.196011][ T8837] device veth0_macvtap entered promiscuous mode [ 63.210818][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.221963][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.233339][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.248246][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.258466][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.269493][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.280672][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.291422][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.302673][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.311964][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.326276][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.330258][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.334881][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.350002][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.359043][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.372797][ T8837] device veth1_macvtap entered promiscuous mode [ 63.382248][ T8839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.392178][ T8839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.401116][ T8839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.410681][ T8839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.422817][ T300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.431366][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.471732][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.509128][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.520877][ T300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.534507][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.546763][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.561644][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.573090][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.585053][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.596584][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.608467][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.619781][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.631668][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.654381][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.662581][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.669424][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.682074][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.690673][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.699335][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.711484][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.721877][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.730128][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.741216][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.753129][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.764294][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.775720][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.788075][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.799824][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.810574][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.821557][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.832146][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.843663][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.856310][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.865536][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.878761][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.896040][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.907304][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.917624][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.978012][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.002996][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.004611][ T8668] Bluetooth: hci1: command 0x0419 tx timeout [ 64.012151][T10201] Bluetooth: hci4: command 0x0419 tx timeout [ 64.034958][ T8668] Bluetooth: hci0: command 0x0419 tx timeout [ 64.085414][ T4954] Bluetooth: hci3: command 0x0419 tx timeout [ 64.085811][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.109624][T10223] FAULT_INJECTION: forcing a failure. [ 64.109624][T10223] name failslab, interval 1, probability 0, space 0, times 1 [ 64.113253][T10216] FAULT_INJECTION: forcing a failure. [ 64.113253][T10216] name failslab, interval 1, probability 0, space 0, times 1 [ 64.152361][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.167458][ T8668] Bluetooth: hci5: command 0x0419 tx timeout [ 64.168877][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.197080][ T8668] Bluetooth: hci2: command 0x0419 tx timeout [ 64.209768][T10223] CPU: 1 PID: 10223 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 64.218187][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.228417][T10223] Call Trace: [ 64.231963][T10223] dump_stack_lvl+0x57/0x7d [ 64.237025][T10223] should_fail.cold+0x5/0xa [ 64.241541][T10223] should_failslab+0x5/0x10 [ 64.246020][T10223] kmem_cache_alloc_node+0x65/0x3e0 [ 64.251721][T10223] ? __alloc_skb+0x153/0x280 [ 64.256574][T10223] __alloc_skb+0x153/0x280 [ 64.260975][T10223] alloc_skb_with_frags+0x73/0x540 [ 64.266169][T10223] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.274254][T10223] ? __lock_acquire+0x15ad/0x5410 [ 64.279446][T10223] sock_alloc_send_pskb+0x636/0x7c0 [ 64.284636][T10223] ? sock_wmalloc+0xe0/0xe0 [ 64.289304][T10223] ? lock_downgrade+0x6e0/0x6e0 [ 64.294139][T10223] ? do_raw_spin_lock+0x120/0x2b0 [ 64.299494][T10223] ? rwlock_bug.part.0+0x90/0x90 [ 64.304614][T10223] unix_dgram_sendmsg+0x332/0x1660 [ 64.309714][T10223] ? aa_sk_perm+0x1ba/0x820 [ 64.314304][T10223] ? unix_stream_sendpage+0xa50/0xa50 [ 64.319832][T10223] ? unix_stream_sendpage+0xa50/0xa50 [ 64.325181][T10223] sock_sendmsg+0xab/0xe0 [ 64.329499][T10223] ____sys_sendmsg+0x392/0x7a0 [ 64.334242][T10223] ? kernel_sendmsg+0x30/0x30 [ 64.339203][T10223] ? do_recvmmsg+0x550/0x550 [ 64.343775][T10223] ? __lock_acquire+0x15ad/0x5410 [ 64.349224][T10223] ___sys_sendmsg+0xd3/0x150 [ 64.354171][T10223] ? sendmsg_copy_msghdr+0x110/0x110 [ 64.359446][T10223] ? find_held_lock+0x2d/0x110 [ 64.364295][T10223] ? __might_fault+0xb5/0x160 [ 64.369770][T10223] ? lock_downgrade+0x6e0/0x6e0 [ 64.374616][T10223] __sys_sendmmsg+0x141/0x310 [ 64.379674][T10223] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 64.384675][T10223] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.390863][T10223] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.397018][T10223] ? find_held_lock+0x2d/0x110 [ 64.401768][T10223] ? __context_tracking_exit+0x80/0x90 [ 64.407205][T10223] ? lock_downgrade+0x6e0/0x6e0 [ 64.412044][T10223] ? __context_tracking_enter+0x93/0xa0 [ 64.417922][T10223] __x64_sys_sendmmsg+0x94/0x100 [ 64.423215][T10223] ? syscall_enter_from_user_mode+0x21/0x70 [ 64.429205][T10223] do_syscall_64+0x35/0xb0 [ 64.434145][T10223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.440463][T10223] RIP: 0033:0x7fc697b168d9 [ 64.444979][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 64.465026][T10223] RSP: 002b:00007fc69726c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.473592][T10223] RAX: ffffffffffffffda RBX: 00007fc697c1b020 RCX: 00007fc697b168d9 [ 64.481630][T10223] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000005 [ 64.489840][T10223] RBP: 00007fc69726c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 64.499453][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.507766][T10223] R13: 00007fff2c72549f R14: 00007fc69726c300 R15: 0000000000022000 [ 64.609987][T10216] CPU: 1 PID: 10216 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0 [ 64.618684][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.628740][T10216] Call Trace: [ 64.632039][T10216] dump_stack_lvl+0x57/0x7d [ 64.636713][T10216] should_fail.cold+0x5/0xa [ 64.641205][T10216] should_failslab+0x5/0x10 [ 64.645688][T10216] kmem_cache_alloc_node+0x65/0x3e0 [ 64.651211][T10216] ? __alloc_skb+0x153/0x280 [ 64.655808][T10216] __alloc_skb+0x153/0x280 [ 64.660379][T10216] alloc_skb_with_frags+0x73/0x540 [ 64.665580][T10216] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.671917][T10216] ? __lock_acquire+0x15ad/0x5410 [ 64.677009][T10216] sock_alloc_send_pskb+0x636/0x7c0 [ 64.682288][T10216] ? sock_wmalloc+0xe0/0xe0 [ 64.686853][T10216] ? lock_downgrade+0x6e0/0x6e0 [ 64.691852][T10216] ? do_raw_spin_lock+0x120/0x2b0 [ 64.697054][T10216] ? rwlock_bug.part.0+0x90/0x90 [ 64.701984][T10216] unix_dgram_sendmsg+0x332/0x1660 [ 64.707111][T10216] ? aa_sk_perm+0x1ba/0x820 [ 64.711596][T10216] ? unix_stream_sendpage+0xa50/0xa50 [ 64.718733][T10216] ? unix_stream_sendpage+0xa50/0xa50 [ 64.724094][T10216] sock_sendmsg+0xab/0xe0 [ 64.728416][T10216] ____sys_sendmsg+0x392/0x7a0 [ 64.733243][T10216] ? kernel_sendmsg+0x30/0x30 [ 64.737892][T10216] ? do_recvmmsg+0x550/0x550 [ 64.742751][T10216] ? __lock_acquire+0x15ad/0x5410 [ 64.748215][T10216] ___sys_sendmsg+0xd3/0x150 [ 64.752951][T10216] ? sendmsg_copy_msghdr+0x110/0x110 [ 64.758223][T10216] ? find_held_lock+0x2d/0x110 [ 64.763053][T10216] ? __might_fault+0xb5/0x160 [ 64.767706][T10216] ? lock_downgrade+0x6e0/0x6e0 [ 64.772539][T10216] __sys_sendmmsg+0x141/0x310 [ 64.777192][T10216] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 64.782452][T10216] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.788407][T10216] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.794965][T10216] ? find_held_lock+0x2d/0x110 [ 64.799717][T10216] ? __context_tracking_exit+0x80/0x90 [ 64.805539][T10216] ? lock_downgrade+0x6e0/0x6e0 [ 64.810361][T10216] ? __context_tracking_enter+0x93/0xa0 [ 64.815895][T10216] __x64_sys_sendmmsg+0x94/0x100 [ 64.820810][T10216] ? syscall_enter_from_user_mode+0x21/0x70 [ 64.826679][T10216] do_syscall_64+0x35/0xb0 [ 64.831196][T10216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.837096][T10216] RIP: 0033:0x7f22966cf8d9 [ 64.841496][T10216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 64.862057][T10216] RSP: 002b:00007f2295e25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.870713][T10216] RAX: ffffffffffffffda RBX: 00007f22967d4020 RCX: 00007f22966cf8d9 [ 64.878783][T10216] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000005 [ 64.887089][T10216] RBP: 00007f2295e251d0 R08: 0000000000000000 R09: 0000000000000000 [ 64.895222][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.903178][T10216] R13: 00007ffc59ff4dbf R14: 00007f2295e25300 R15: 0000000000022000 [ 64.939891][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.024182][ T208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.027802][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.033730][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.064655][ T208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2021/10/10 16:50:00 executed programs: 6 [ 65.155927][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.166298][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.182209][T10273] FAULT_INJECTION: forcing a failure. [ 65.182209][T10273] name failslab, interval 1, probability 0, space 0, times 0 [ 65.212406][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.225727][ T300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.240892][T10273] CPU: 1 PID: 10273 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 65.248218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.249328][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.249340][T10273] Call Trace: [ 65.249347][T10273] dump_stack_lvl+0x57/0x7d [ 65.249362][T10273] should_fail.cold+0x5/0xa [ 65.263234][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.266685][T10273] ? sk_psock_skb_ingress_self+0x49/0x330 [ 65.266700][T10273] should_failslab+0x5/0x10 [ 65.266709][T10273] kmem_cache_alloc_trace+0x55/0x3c0 [ 65.266723][T10273] sk_psock_skb_ingress_self+0x49/0x330 [ 65.266733][T10273] sk_psock_verdict_apply+0x2e3/0x3b0 [ 65.266744][T10273] sk_psock_verdict_recv+0x23b/0x680 [ 65.266755][T10273] unix_read_sock+0xc4/0x1e0 [ 65.266762][T10273] ? sk_psock_strp_read+0x5a0/0x5a0 [ 65.266772][T10273] ? unix_ioctl+0x140/0x140 [ 65.266778][T10273] ? find_held_lock+0x2d/0x110 [ 65.266795][T10273] sk_psock_verdict_data_ready+0xf8/0x150 [ 65.266802][T10273] ? sk_psock_strp_read_done+0x10/0x10 [ 65.266812][T10273] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 65.266820][T10273] ? do_raw_spin_unlock+0x171/0x230 [ 65.266830][T10273] unix_dgram_sendmsg+0xca7/0x1660 [ 65.266851][T10273] ? unix_stream_sendpage+0xa50/0xa50 [ 65.271387][ T300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.274732][T10273] ? unix_stream_sendpage+0xa50/0xa50 [ 65.274746][T10273] sock_sendmsg+0xab/0xe0 [ 65.274758][T10273] ____sys_sendmsg+0x392/0x7a0 [ 65.274769][T10273] ? kernel_sendmsg+0x30/0x30 [ 65.274777][T10273] ? do_recvmmsg+0x550/0x550 [ 65.274787][T10273] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.274802][T10273] ___sys_sendmsg+0xd3/0x150 [ 65.274811][T10273] ? sendmsg_copy_msghdr+0x110/0x110 [ 65.274816][T10273] ? find_held_lock+0x2d/0x110 [ 65.274835][T10273] ? __fget_files+0x193/0x2b0 [ 65.286883][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.292558][T10273] ? lock_downgrade+0x6e0/0x6e0 [ 65.292572][T10273] ? lock_chain_count+0x20/0x20 [ 65.292588][T10273] ? __fget_files+0x1ab/0x2b0 [ 65.292604][T10273] ? __fget_light+0xbe/0x220 [ 65.292617][T10273] __sys_sendmmsg+0x141/0x310 [ 65.297352][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.302377][T10273] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 65.302390][T10273] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.302399][T10273] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.302414][T10273] ? find_held_lock+0x2d/0x110 [ 65.302427][T10273] ? __context_tracking_exit+0x80/0x90 [ 65.302437][T10273] ? lock_downgrade+0x6e0/0x6e0 [ 65.302442][T10273] ? __context_tracking_enter+0x93/0xa0 [ 65.302464][T10273] __x64_sys_sendmmsg+0x94/0x100 [ 65.302471][T10273] ? syscall_enter_from_user_mode+0x21/0x70 [ 65.302478][T10273] do_syscall_64+0x35/0xb0 [ 65.302488][T10273] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.302497][T10273] RIP: 0033:0x7f7f310b88d9 [ 65.302507][T10273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 65.302514][T10273] RSP: 002b:00007f7f3082f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.302525][T10273] RAX: ffffffffffffffda RBX: 00007f7f311bcf60 RCX: 00007f7f310b88d9 [ 65.302531][T10273] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000006 [ 65.302536][T10273] RBP: 00007f7f3082f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 65.302541][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.302545][T10273] R13: 00007ffd82a2692f R14: 00007f7f3082f300 R15: 0000000000022000 [ 65.498489][T10278] FAULT_INJECTION: forcing a failure. [ 65.498489][T10278] name failslab, interval 1, probability 0, space 0, times 0 [ 65.501703][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.517997][T10278] CPU: 1 PID: 10278 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 65.527093][T10279] FAULT_INJECTION: forcing a failure. [ 65.527093][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 65.527241][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.660927][T10278] Call Trace: [ 65.664201][T10278] dump_stack_lvl+0x57/0x7d [ 65.668787][T10278] should_fail.cold+0x5/0xa [ 65.673290][T10278] ? sk_psock_skb_ingress_self+0x49/0x330 [ 65.679165][T10278] should_failslab+0x5/0x10 [ 65.683912][T10278] kmem_cache_alloc_trace+0x55/0x3c0 [ 65.689458][T10278] sk_psock_skb_ingress_self+0x49/0x330 [ 65.695290][T10278] sk_psock_verdict_apply+0x2e3/0x3b0 [ 65.700849][T10278] sk_psock_verdict_recv+0x23b/0x680 [ 65.706125][T10278] unix_read_sock+0xc4/0x1e0 [ 65.711884][T10278] ? sk_psock_strp_read+0x5a0/0x5a0 [ 65.717780][T10278] ? unix_ioctl+0x140/0x140 [ 65.723024][T10278] ? find_held_lock+0x2d/0x110 [ 65.728138][T10278] sk_psock_verdict_data_ready+0xf8/0x150 [ 65.733930][T10278] ? sk_psock_strp_read_done+0x10/0x10 [ 65.739566][T10278] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 65.746043][T10278] ? do_raw_spin_unlock+0x171/0x230 [ 65.751483][T10278] unix_dgram_sendmsg+0xca7/0x1660 [ 65.756778][T10278] ? unix_stream_sendpage+0xa50/0xa50 [ 65.762135][T10278] ? unix_stream_sendpage+0xa50/0xa50 [ 65.767489][T10278] sock_sendmsg+0xab/0xe0 [ 65.771987][T10278] ____sys_sendmsg+0x392/0x7a0 [ 65.776826][T10278] ? kernel_sendmsg+0x30/0x30 [ 65.781485][T10278] ? do_recvmmsg+0x550/0x550 [ 65.786067][T10278] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.792215][T10278] ___sys_sendmsg+0xd3/0x150 [ 65.796777][T10278] ? sendmsg_copy_msghdr+0x110/0x110 [ 65.802064][T10278] ? find_held_lock+0x2d/0x110 [ 65.806897][T10278] ? __fget_files+0x193/0x2b0 [ 65.811553][T10278] ? lock_downgrade+0x6e0/0x6e0 [ 65.816383][T10278] ? lock_chain_count+0x20/0x20 [ 65.821302][T10278] ? __fget_files+0x1ab/0x2b0 [ 65.826159][T10278] ? __fget_light+0xbe/0x220 [ 65.830910][T10278] __sys_sendmmsg+0x141/0x310 [ 65.835827][T10278] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 65.840822][T10278] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.846774][T10278] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.852778][T10278] ? find_held_lock+0x2d/0x110 [ 65.857526][T10278] ? __context_tracking_exit+0x80/0x90 [ 65.862961][T10278] ? lock_downgrade+0x6e0/0x6e0 [ 65.867791][T10278] ? __context_tracking_enter+0x93/0xa0 [ 65.873434][T10278] __x64_sys_sendmmsg+0x94/0x100 [ 65.878433][T10278] ? syscall_enter_from_user_mode+0x21/0x70 [ 65.884306][T10278] do_syscall_64+0x35/0xb0 [ 65.888707][T10278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.894659][T10278] RIP: 0033:0x7fc697b168d9 [ 65.899244][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 65.918822][T10278] RSP: 002b:00007fc69728d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.927439][T10278] RAX: ffffffffffffffda RBX: 00007fc697c1af60 RCX: 00007fc697b168d9 [ 65.935472][T10278] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000006 [ 65.943455][T10278] RBP: 00007fc69728d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 65.951633][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.959935][T10278] R13: 00007fff2c72549f R14: 00007fc69728d300 R15: 0000000000022000 [ 65.976777][T10279] CPU: 0 PID: 10279 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0 [ 65.985232][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.995420][T10279] Call Trace: [ 65.998881][T10279] dump_stack_lvl+0x57/0x7d [ 66.003502][T10279] should_fail.cold+0x5/0xa [ 66.008097][T10279] ? sk_psock_skb_ingress_self+0x49/0x330 [ 66.013899][T10279] should_failslab+0x5/0x10 [ 66.018403][T10279] kmem_cache_alloc_trace+0x55/0x3c0 [ 66.023691][T10279] sk_psock_skb_ingress_self+0x49/0x330 [ 66.029337][T10279] sk_psock_verdict_apply+0x2e3/0x3b0 [ 66.035000][T10279] sk_psock_verdict_recv+0x23b/0x680 [ 66.040292][T10279] unix_read_sock+0xc4/0x1e0 [ 66.044881][T10279] ? sk_psock_strp_read+0x5a0/0x5a0 [ 66.050253][T10279] ? unix_ioctl+0x140/0x140 [ 66.054807][T10279] ? find_held_lock+0x2d/0x110 [ 66.059754][T10279] sk_psock_verdict_data_ready+0xf8/0x150 [ 66.065559][T10279] ? sk_psock_strp_read_done+0x10/0x10 [ 66.071207][T10279] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 66.077279][T10279] ? do_raw_spin_unlock+0x171/0x230 [ 66.082607][T10279] unix_dgram_sendmsg+0xca7/0x1660 [ 66.087738][T10279] ? unix_stream_sendpage+0xa50/0xa50 [ 66.093220][T10279] ? unix_stream_sendpage+0xa50/0xa50 [ 66.098609][T10279] sock_sendmsg+0xab/0xe0 [ 66.103367][T10279] ____sys_sendmsg+0x392/0x7a0 [ 66.108191][T10279] ? kernel_sendmsg+0x30/0x30 [ 66.113073][T10279] ? do_recvmmsg+0x550/0x550 [ 66.117844][T10279] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.123822][T10279] ___sys_sendmsg+0xd3/0x150 [ 66.128573][T10279] ? sendmsg_copy_msghdr+0x110/0x110 [ 66.134011][T10279] ? find_held_lock+0x2d/0x110 [ 66.138845][T10279] ? __fget_files+0x193/0x2b0 [ 66.143689][T10279] ? lock_downgrade+0x6e0/0x6e0 [ 66.148739][T10279] ? lock_chain_count+0x20/0x20 [ 66.153729][T10279] ? __fget_files+0x1ab/0x2b0 [ 66.158405][T10279] ? __fget_light+0xbe/0x220 [ 66.163027][T10279] __sys_sendmmsg+0x141/0x310 [ 66.167893][T10279] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 66.172991][T10279] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.178972][T10279] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.184934][T10279] ? find_held_lock+0x2d/0x110 [ 66.189679][T10279] ? __context_tracking_exit+0x80/0x90 [ 66.195289][T10279] ? lock_downgrade+0x6e0/0x6e0 [ 66.200137][T10279] ? __context_tracking_enter+0x93/0xa0 [ 66.207146][T10279] __x64_sys_sendmmsg+0x94/0x100 [ 66.212061][T10279] ? syscall_enter_from_user_mode+0x21/0x70 [ 66.217963][T10279] do_syscall_64+0x35/0xb0 [ 66.222362][T10279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.228230][T10279] RIP: 0033:0x7f22966cf8d9 [ 66.232624][T10279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.252576][T10279] RSP: 002b:00007f2295e46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.260993][T10279] RAX: ffffffffffffffda RBX: 00007f22967d3f60 RCX: 00007f22966cf8d9 [ 66.269211][T10279] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000006 [ 66.277340][T10279] RBP: 00007f2295e461d0 R08: 0000000000000000 R09: 0000000000000000 [ 66.285431][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.293394][T10279] R13: 00007ffc59ff4dbf R14: 00007f2295e46300 R15: 0000000000022000 [ 66.306872][T10267] ================================================================== [ 66.315421][T10267] BUG: KASAN: use-after-free in consume_skb+0x23/0xf0 [ 66.322788][T10267] Read of size 4 at addr ffff8880265a9354 by task syz-executor.3/10267 [ 66.331157][T10267] [ 66.333490][T10267] CPU: 0 PID: 10267 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 66.342521][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.352875][T10267] Call Trace: [ 66.356162][T10267] dump_stack_lvl+0x57/0x7d [ 66.360839][T10267] print_address_description.constprop.0.cold+0x6c/0x309 [ 66.368125][T10267] ? consume_skb+0x23/0xf0 [ 66.372719][T10267] ? consume_skb+0x23/0xf0 [ 66.377135][T10267] kasan_report.cold+0x83/0xdf [ 66.381989][T10267] ? consume_skb+0x23/0xf0 [ 66.386512][T10267] kasan_check_range+0x13d/0x180 [ 66.391466][T10267] consume_skb+0x23/0xf0 [ 66.395695][T10267] __sk_msg_free+0x1db/0x350 [ 66.400265][T10267] ? lockdep_hardirqs_on+0x79/0x100 [ 66.405457][T10267] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 66.411241][T10267] sk_psock_stop+0x398/0x5c0 [ 66.415815][T10267] ? espintcp_init_sk+0xa00/0xa00 [ 66.420825][T10267] sock_map_close+0x27a/0x510 [ 66.425919][T10267] ? sock_map_lookup+0x310/0x310 [ 66.430917][T10267] ? down_write+0xe0/0x150 [ 66.435405][T10267] ? down_write_killable_nested+0x180/0x180 [ 66.441399][T10267] unix_release+0x6c/0xd0 [ 66.446012][T10267] __sock_release+0xbb/0x270 [ 66.450669][T10267] sock_close+0xf/0x20 [ 66.454826][T10267] __fput+0x209/0x870 [ 66.458870][T10267] ? _raw_spin_unlock_irq+0x1f/0x40 [ 66.464139][T10267] task_work_run+0xc0/0x160 [ 66.468624][T10267] exit_to_user_mode_prepare+0x27e/0x290 [ 66.474233][T10267] syscall_exit_to_user_mode+0x19/0x60 [ 66.479869][T10267] do_syscall_64+0x42/0xb0 [ 66.484566][T10267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.490605][T10267] RIP: 0033:0x7f7f3106b51b [ 66.495049][T10267] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 66.514890][T10267] RSP: 002b:00007ffd82a26990 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 66.523367][T10267] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f7f3106b51b [ 66.531664][T10267] RDX: 0000001b2bf200f8 RSI: 0000000000000000 RDI: 0000000000000005 [ 66.539873][T10267] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2bf200fc [ 66.548169][T10267] R10: 00007ffd82b0f090 R11: 0000000000000293 R12: 00007f7f311bdb60 [ 66.556132][T10267] R13: 00007f7f311bdb60 R14: 00007f7f311bcf60 R15: 000000000000fe68 [ 66.564093][T10267] [ 66.566408][T10267] Allocated by task 10273: [ 66.571338][T10267] kasan_save_stack+0x1b/0x40 [ 66.576080][T10267] __kasan_slab_alloc+0x84/0xa0 [ 66.581423][T10267] kmem_cache_alloc+0x29b/0x4a0 [ 66.586331][T10267] skb_clone+0x125/0x300 [ 66.590564][T10267] sk_psock_verdict_recv+0x6d/0x680 [ 66.595820][T10267] unix_read_sock+0xc4/0x1e0 [ 66.600474][T10267] sk_psock_verdict_data_ready+0xf8/0x150 [ 66.606164][T10267] unix_dgram_sendmsg+0xca7/0x1660 [ 66.611270][T10267] sock_sendmsg+0xab/0xe0 [ 66.615827][T10267] ____sys_sendmsg+0x392/0x7a0 [ 66.620567][T10267] ___sys_sendmsg+0xd3/0x150 [ 66.625482][T10267] __sys_sendmmsg+0x141/0x310 [ 66.630131][T10267] __x64_sys_sendmmsg+0x94/0x100 [ 66.635215][T10267] do_syscall_64+0x35/0xb0 [ 66.639609][T10267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.645476][T10267] [ 66.647781][T10267] Freed by task 3188: [ 66.651908][T10267] kasan_save_stack+0x1b/0x40 [ 66.656647][T10267] kasan_set_track+0x1c/0x30 [ 66.661236][T10267] kasan_set_free_info+0x20/0x30 [ 66.666145][T10267] __kasan_slab_free+0xfb/0x130 [ 66.671230][T10267] slab_free_freelist_hook+0xdf/0x240 [ 66.676811][T10267] kmem_cache_free+0x8e/0x5a0 [ 66.681550][T10267] sk_psock_backlog+0x7d4/0xa40 [ 66.686814][T10267] process_one_work+0x84c/0x13e0 [ 66.691833][T10267] worker_thread+0x598/0x1040 [ 66.696698][T10267] kthread+0x38b/0x460 [ 66.701197][T10267] ret_from_fork+0x1f/0x30 [ 66.705611][T10267] [ 66.708025][T10267] The buggy address belongs to the object at ffff8880265a9280 [ 66.708025][T10267] which belongs to the cache skbuff_head_cache of size 224 [ 66.723132][T10267] The buggy address is located 212 bytes inside of [ 66.723132][T10267] 224-byte region [ffff8880265a9280, ffff8880265a9360) [ 66.736902][T10267] The buggy address belongs to the page: [ 66.742768][T10267] page:ffffea0000996a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x265a9 [ 66.753152][T10267] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 66.760834][T10267] raw: 00fff00000000200 ffffea0000cdfec0 0000000b0000000b ffff888014de0000 [ 66.772701][T10267] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 66.781348][T10267] page dumped because: kasan: bad access detected [ 66.788085][T10267] page_owner tracks the page as allocated [ 66.793903][T10267] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 8839, ts 56051401833, free_ts 15667185239 [ 66.810191][T10267] get_page_from_freelist+0xa6f/0x2f50 [ 66.815717][T10267] __alloc_pages+0x1b2/0x500 [ 66.820282][T10267] allocate_slab+0x32b/0x4c0 [ 66.824846][T10267] ___slab_alloc+0x4ba/0x820 [ 66.829425][T10267] __slab_alloc.constprop.0+0xa7/0xf0 [ 66.834857][T10267] kmem_cache_alloc_node+0x12c/0x3e0 [ 66.840377][T10267] __alloc_skb+0x153/0x280 [ 66.844871][T10267] alloc_uevent_skb+0x76/0x200 [ 66.849713][T10267] kobject_uevent_env+0xe9f/0x1290 [ 66.854822][T10267] net_rx_queue_update_kobjects+0xb1/0x3e0 [ 66.860699][T10267] netdev_register_kobject+0x241/0x3c0 [ 66.866132][T10267] register_netdevice+0xa91/0x1240 [ 66.871228][T10267] register_netdev+0x17/0x30 [ 66.875791][T10267] ip6_tnl_init_net+0x3f2/0x690 [ 66.880619][T10267] ops_init+0x91/0x3c0 [ 66.884693][T10267] setup_net+0x3c6/0x920 [ 66.889461][T10267] page last free stack trace: [ 66.894206][T10267] free_pcp_prepare+0x2c5/0x780 [ 66.899035][T10267] free_unref_page+0x19/0x690 [ 66.903861][T10267] __mmdrop+0xb9/0x350 [ 66.908014][T10267] free_bprm+0x5b/0x290 [ 66.912232][T10267] kernel_execve+0x2cc/0x3e0 [ 66.916882][T10267] call_usermodehelper_exec_async+0x2c1/0x500 [ 66.923099][T10267] ret_from_fork+0x1f/0x30 [ 66.927508][T10267] [ 66.929825][T10267] Memory state around the buggy address: [ 66.935530][T10267] ffff8880265a9200: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 66.943745][T10267] ffff8880265a9280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.952219][T10267] >ffff8880265a9300: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 66.960603][T10267] ^ [ 66.967259][T10267] ffff8880265a9380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 66.975402][T10267] ffff8880265a9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.983437][T10267] ================================================================== [ 66.991473][T10267] Disabling lock debugging due to kernel taint [ 66.997662][T10267] Kernel panic - not syncing: panic_on_warn set ... [ 67.004419][T10267] CPU: 0 PID: 10267 Comm: syz-executor.3 Tainted: G B 5.13.0-syzkaller #0 [ 67.014562][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.024694][T10267] Call Trace: [ 67.028128][T10267] dump_stack_lvl+0x57/0x7d [ 67.032695][T10267] panic+0x256/0x4eb [ 67.036669][T10267] ? __warn_printk+0xee/0xee [ 67.041263][T10267] ? consume_skb+0x23/0xf0 [ 67.045655][T10267] ? consume_skb+0x23/0xf0 [ 67.050302][T10267] end_report.cold+0x5a/0x5a [ 67.054864][T10267] kasan_report.cold+0x71/0xdf [ 67.059598][T10267] ? consume_skb+0x23/0xf0 [ 67.064086][T10267] kasan_check_range+0x13d/0x180 [ 67.069082][T10267] consume_skb+0x23/0xf0 [ 67.073296][T10267] __sk_msg_free+0x1db/0x350 [ 67.077944][T10267] ? lockdep_hardirqs_on+0x79/0x100 [ 67.083114][T10267] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 67.088905][T10267] sk_psock_stop+0x398/0x5c0 [ 67.093664][T10267] ? espintcp_init_sk+0xa00/0xa00 [ 67.098662][T10267] sock_map_close+0x27a/0x510 [ 67.103921][T10267] ? sock_map_lookup+0x310/0x310 [ 67.109116][T10267] ? down_write+0xe0/0x150 [ 67.113711][T10267] ? down_write_killable_nested+0x180/0x180 [ 67.120257][T10267] unix_release+0x6c/0xd0 [ 67.125792][T10267] __sock_release+0xbb/0x270 [ 67.130460][T10267] sock_close+0xf/0x20 [ 67.134587][T10267] __fput+0x209/0x870 [ 67.138544][T10267] ? _raw_spin_unlock_irq+0x1f/0x40 [ 67.143896][T10267] task_work_run+0xc0/0x160 [ 67.148491][T10267] exit_to_user_mode_prepare+0x27e/0x290 [ 67.154193][T10267] syscall_exit_to_user_mode+0x19/0x60 [ 67.159635][T10267] do_syscall_64+0x42/0xb0 [ 67.164024][T10267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.170018][T10267] RIP: 0033:0x7f7f3106b51b [ 67.174410][T10267] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 67.194737][T10267] RSP: 002b:00007ffd82a26990 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 67.203134][T10267] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f7f3106b51b [ 67.211096][T10267] RDX: 0000001b2bf200f8 RSI: 0000000000000000 RDI: 0000000000000005 [ 67.219920][T10267] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2bf200fc [ 67.227866][T10267] R10: 00007ffd82b0f090 R11: 0000000000000293 R12: 00007f7f311bdb60 [ 67.235914][T10267] R13: 00007f7f311bdb60 R14: 00007f7f311bcf60 R15: 000000000000fe68 [ 67.244265][T10267] Kernel Offset: disabled [ 67.248577][T10267] Rebooting in 86400 seconds..