[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. 2020/12/25 16:02:42 fuzzer started 2020/12/25 16:02:42 dialing manager at 10.128.0.26:44863 2020/12/25 16:02:43 syscalls: 3465 2020/12/25 16:02:43 code coverage: enabled 2020/12/25 16:02:43 comparison tracing: enabled 2020/12/25 16:02:43 extra coverage: enabled 2020/12/25 16:02:43 setuid sandbox: enabled 2020/12/25 16:02:43 namespace sandbox: enabled 2020/12/25 16:02:43 Android sandbox: enabled 2020/12/25 16:02:43 fault injection: enabled 2020/12/25 16:02:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/25 16:02:43 net packet injection: enabled 2020/12/25 16:02:43 net device setup: enabled 2020/12/25 16:02:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/25 16:02:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/25 16:02:43 USB emulation: enabled 2020/12/25 16:02:43 hci packet injection: enabled 2020/12/25 16:02:43 wifi device emulation: enabled 16:06:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x40006) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, r2+60000000}, {0x0, 0x1c9c380}}, 0x0) r3 = gettid() ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) tkill(r3, 0x1000000000016) syzkaller login: [ 298.515664][ T35] audit: type=1400 audit(1608912374.299:8): avc: denied { execmem } for pid=8505 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:06:14 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 16:06:14 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BLKPG(r0, 0x5450, 0x0) 16:06:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 16:06:15 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept$packet(r1, 0x0, 0x0) dup3(r0, r2, 0x0) recvfrom$packet(r2, &(0x7f00000000c0)=""/4096, 0x1000, 0x10000, 0x0, 0x1b) [ 299.773169][ T8506] IPVS: ftp: loaded support on port[0] = 21 16:06:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000b00)) [ 300.132883][ T8508] IPVS: ftp: loaded support on port[0] = 21 [ 300.201200][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 300.464831][ T8510] IPVS: ftp: loaded support on port[0] = 21 [ 300.585738][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.592848][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.620688][ T8512] IPVS: ftp: loaded support on port[0] = 21 [ 300.629413][ T8506] device bridge_slave_0 entered promiscuous mode [ 300.672827][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.681454][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.690084][ T8506] device bridge_slave_1 entered promiscuous mode [ 300.735308][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.751124][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.865122][ T8506] team0: Port device team_slave_0 added [ 300.921108][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 300.965734][ T8506] team0: Port device team_slave_1 added [ 301.064468][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.071727][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.100114][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.121567][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 301.146174][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.153282][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.179862][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.277206][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.285532][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.293234][ T8508] device bridge_slave_0 entered promiscuous mode [ 301.351136][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.358420][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.367721][ T8508] device bridge_slave_1 entered promiscuous mode [ 301.390342][ T8506] device hsr_slave_0 entered promiscuous mode [ 301.397639][ T8506] device hsr_slave_1 entered promiscuous mode [ 301.553253][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.580458][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 301.653195][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.704940][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 301.727414][ T8667] IPVS: ftp: loaded support on port[0] = 21 [ 301.746953][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 301.883165][ T8508] team0: Port device team_slave_0 added [ 301.920039][ T8508] team0: Port device team_slave_1 added [ 301.991787][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 301.995632][ T3852] Bluetooth: hci1: command 0x0409 tx timeout [ 302.027479][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.034610][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.043106][ T8512] device bridge_slave_0 entered promiscuous mode [ 302.092135][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.099853][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.109330][ T8512] device bridge_slave_1 entered promiscuous mode [ 302.131062][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.141610][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.168857][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.181874][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.189060][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.215028][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.284166][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.291905][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.301887][ T8510] device bridge_slave_0 entered promiscuous mode [ 302.313049][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.315620][ T34] Bluetooth: hci2: command 0x0409 tx timeout [ 302.320692][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.336457][ T8510] device bridge_slave_1 entered promiscuous mode [ 302.345037][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.359207][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.413750][ T8508] device hsr_slave_0 entered promiscuous mode [ 302.421152][ T8508] device hsr_slave_1 entered promiscuous mode [ 302.428735][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.436843][ T8508] Cannot create hsr debugfs directory [ 302.475979][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.514887][ T8512] team0: Port device team_slave_0 added [ 302.523285][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.545631][ T3852] Bluetooth: hci3: command 0x0409 tx timeout [ 302.571346][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.578960][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.590224][ T8514] device bridge_slave_0 entered promiscuous mode [ 302.600117][ T8512] team0: Port device team_slave_1 added [ 302.621858][ T8506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.639633][ T8506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.661031][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.669281][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.678080][ T8514] device bridge_slave_1 entered promiscuous mode [ 302.710193][ T8506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.722797][ T8506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.751199][ T8510] team0: Port device team_slave_0 added [ 302.762370][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.770475][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.785436][ T3192] Bluetooth: hci4: command 0x0409 tx timeout [ 302.797060][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.819150][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.826230][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.852891][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.871553][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.886404][ T8510] team0: Port device team_slave_1 added [ 302.893709][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.992484][ T8512] device hsr_slave_0 entered promiscuous mode [ 303.001645][ T8512] device hsr_slave_1 entered promiscuous mode [ 303.009019][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.017011][ T8512] Cannot create hsr debugfs directory [ 303.032664][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.039736][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.067321][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.122716][ T8514] team0: Port device team_slave_0 added [ 303.133588][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.142959][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.171353][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.206543][ T8514] team0: Port device team_slave_1 added [ 303.238028][ T8667] chnl_net:caif_netlink_parms(): no params data found [ 303.304116][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.312626][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.339743][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.356808][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.364189][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.392381][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.491760][ T8510] device hsr_slave_0 entered promiscuous mode [ 303.500038][ T8510] device hsr_slave_1 entered promiscuous mode [ 303.508420][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.517015][ T8510] Cannot create hsr debugfs directory [ 303.547496][ T8514] device hsr_slave_0 entered promiscuous mode [ 303.558980][ T8514] device hsr_slave_1 entered promiscuous mode [ 303.566818][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.574379][ T8514] Cannot create hsr debugfs directory [ 303.672684][ T3852] Bluetooth: hci5: command 0x0409 tx timeout [ 303.795862][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.802959][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.811736][ T8667] device bridge_slave_0 entered promiscuous mode [ 303.828998][ T8508] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 303.837921][ T3192] Bluetooth: hci0: command 0x041b tx timeout [ 303.862924][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.871795][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.881570][ T8667] device bridge_slave_1 entered promiscuous mode [ 303.902724][ T8508] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 303.967205][ T8508] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 303.984783][ T8508] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.997359][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.046688][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.070121][ T3192] Bluetooth: hci1: command 0x041b tx timeout [ 304.098126][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.118025][ T8512] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.171023][ T8667] team0: Port device team_slave_0 added [ 304.181059][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.192333][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.210492][ T8512] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.221800][ T8512] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.246066][ T8667] team0: Port device team_slave_1 added [ 304.267025][ T8512] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.281381][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.335709][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.342677][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.371991][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.384671][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.393240][ T3192] Bluetooth: hci2: command 0x041b tx timeout [ 304.406629][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.420712][ T3852] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.428084][ T3852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.440385][ T8510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.472331][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.479799][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.506098][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.520205][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.528547][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.537829][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.546831][ T3852] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.553911][ T3852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.580878][ T8510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.620012][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.626412][ T3192] Bluetooth: hci3: command 0x041b tx timeout [ 304.650360][ T8510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.680283][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.704573][ T8510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 304.719351][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.745672][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.754379][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.770432][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.782295][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.800533][ T8514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.811335][ T8514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.845518][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.853500][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.863779][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.865407][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 304.875559][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.886395][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.900701][ T8667] device hsr_slave_0 entered promiscuous mode [ 304.907901][ T8667] device hsr_slave_1 entered promiscuous mode [ 304.914395][ T8667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.922416][ T8667] Cannot create hsr debugfs directory [ 304.932252][ T8514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.957696][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.976031][ T8514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.002472][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.011329][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.026512][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.070712][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.088936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.098945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.108382][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.115534][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.123456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.133187][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.141795][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.149035][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.193178][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.201943][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.210556][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.222412][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.282967][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.292737][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.302384][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.313800][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.330504][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.341313][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.401205][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.417416][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.428179][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.438490][ T3852] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.445622][ T3852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.453333][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.462402][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.471016][ T3852] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.478243][ T3852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.486669][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.495571][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.503935][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.513147][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.527937][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.559299][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.567735][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.576784][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.608588][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.629623][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.641083][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.683405][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.697793][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.745616][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.754470][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.765373][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.774069][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.783485][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.792140][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.812433][ T8506] device veth0_vlan entered promiscuous mode [ 305.817832][ T3192] Bluetooth: hci5: command 0x041b tx timeout [ 305.849734][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.863933][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.873148][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.881425][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.889773][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.899872][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.908350][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.917296][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.926193][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.934510][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.955992][ T3001] Bluetooth: hci0: command 0x040f tx timeout [ 305.966775][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.981997][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.993557][ T8506] device veth1_vlan entered promiscuous mode [ 306.040254][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.048241][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.058250][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.069800][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.111070][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.127220][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.136866][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.144282][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.145304][ T3192] Bluetooth: hci1: command 0x040f tx timeout [ 306.156913][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.167353][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.183023][ T8667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.219747][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.229578][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.241739][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.251353][ T9682] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.258514][ T9682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.267261][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.275341][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.283032][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.292744][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.301926][ T9682] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.309063][ T9682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.323848][ T8667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.342547][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.358813][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.378518][ T8667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.410949][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.419895][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.430479][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.440265][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.449754][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.456915][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.466975][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.482689][ T8506] device veth0_macvtap entered promiscuous mode [ 306.491719][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.500692][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.509563][ T8667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.515941][ T3001] Bluetooth: hci2: command 0x040f tx timeout [ 306.553876][ T8508] device veth0_vlan entered promiscuous mode [ 306.569794][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.581792][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.591795][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.601185][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.610300][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.619991][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.631556][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.640500][ T3852] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.647679][ T3852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.705358][ T3192] Bluetooth: hci3: command 0x040f tx timeout [ 306.707446][ T8506] device veth1_macvtap entered promiscuous mode [ 306.756216][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.764762][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.774638][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.783672][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.792678][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.802689][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.811881][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.821204][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.855565][ T8508] device veth1_vlan entered promiscuous mode [ 306.881434][ T8510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.892683][ T8510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.905217][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.913249][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.922167][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.931091][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.941100][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.945325][ T3001] Bluetooth: hci4: command 0x040f tx timeout [ 306.951740][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.964307][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.991108][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.016060][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.024897][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.037837][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.047357][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.056376][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.069399][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.092607][ T8512] device veth0_vlan entered promiscuous mode [ 307.125740][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.136342][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.144218][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.154880][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.164605][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.173631][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.183374][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.192716][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.201968][ T8506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.213497][ T8506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.222899][ T8506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.232233][ T8506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.252462][ T8512] device veth1_vlan entered promiscuous mode [ 307.298742][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.314477][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.323255][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.337874][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.379997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.387963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.396191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.404467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.443887][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.453409][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.469383][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.501094][ T8514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.519130][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.529482][ T8508] device veth0_macvtap entered promiscuous mode [ 307.544084][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.552399][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.561930][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.571978][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.581756][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.596064][ T8512] device veth0_macvtap entered promiscuous mode [ 307.634559][ T8508] device veth1_macvtap entered promiscuous mode [ 307.667685][ T8512] device veth1_macvtap entered promiscuous mode [ 307.687876][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.727749][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.746953][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.766257][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.774429][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.792458][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.817366][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 307.825452][ T3192] Bluetooth: hci5: command 0x040f tx timeout [ 307.838657][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.859653][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.882198][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.935623][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.953469][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.962826][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.980311][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.985450][ T3192] Bluetooth: hci0: command 0x0419 tx timeout [ 307.993462][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.011214][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.027618][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 308.042182][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.058179][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.077989][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.081962][ T8667] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.106204][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.113630][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.143769][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.157747][ T8508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.170987][ T8508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.181619][ T8508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.190752][ T8508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.227748][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 308.235364][ T3001] Bluetooth: hci1: command 0x0419 tx timeout [ 308.254353][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.284263][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 308.296402][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.309154][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.323737][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 308.335335][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.345563][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 308.356093][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.368396][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.377522][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.385899][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.406389][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.415882][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.424481][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.443146][ T8510] device veth0_vlan entered promiscuous mode [ 308.506240][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.517207][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.527368][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.536603][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.546365][ T3192] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.553434][ T3192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.562110][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.571131][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.580333][ T3192] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.587455][ T3192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.595943][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 308.625373][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.633401][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.637408][ T8512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.659464][ T8512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.668983][ T8512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.678080][ T8512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.698600][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.712717][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.732832][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.741615][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.749876][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.771725][ T8510] device veth1_vlan entered promiscuous mode [ 308.785430][ T3192] Bluetooth: hci3: command 0x0419 tx timeout [ 308.863749][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.883134][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.910047][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.920535][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.001413][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.016928][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.025719][ T3001] Bluetooth: hci4: command 0x0419 tx timeout [ 309.053332][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.150282][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.173919][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.195884][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.204054][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.252406][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.273141][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.282234][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.291469][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.302168][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.310553][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.325071][ T8514] device veth0_vlan entered promiscuous mode [ 309.370308][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.380347][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.412623][ T8514] device veth1_vlan entered promiscuous mode [ 309.435816][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.443885][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.494208][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.515976][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.524728][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.552401][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.561368][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.570983][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.600262][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.622778][ T8510] device veth0_macvtap entered promiscuous mode [ 309.642246][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.649089][ T8510] device veth1_macvtap entered promiscuous mode [ 309.657185][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.663499][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.677556][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.706868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.718551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.727662][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.785816][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.795599][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.831690][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 309.856032][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.872970][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 309.892266][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.902354][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 309.904885][ T3001] Bluetooth: hci5: command 0x0419 tx timeout [ 309.922582][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.980509][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.028792][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.037667][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.066652][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.095956][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.127462][ T8514] device veth0_macvtap entered promiscuous mode [ 310.163805][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 16:06:26 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r3, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f00000002c0), 0x8}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 310.249616][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 310.280329][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:06:26 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000280)=[{0x0, 0x4}, {}], 0x2) semctl$GETZCNT(r0, 0x3, 0xf, 0x0) [ 310.323463][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 310.365102][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.404785][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 310.431753][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.476517][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.485929][ T8514] device veth1_macvtap entered promiscuous mode [ 310.509082][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.534554][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.561617][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.571238][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.595278][ T9901] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 310.595278][ T9901] The task syz-executor.1 (9901) triggered the difference, watch for misbehavior. [ 310.595567][ T8510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.660573][ T8510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.671030][ T8510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.680105][ T8510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.742544][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 310.758889][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.777496][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 310.793940][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.805399][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 310.820202][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.831031][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 310.842387][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.859201][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.887848][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.903572][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.933215][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 310.948116][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.962825][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 310.990783][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.010720][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 311.033026][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.047291][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 311.069939][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.093060][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.138488][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.167167][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.193103][ T8514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.231667][ T8514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.259807][ T8514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.290811][ T8514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 16:06:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5382, 0x0) [ 311.313297][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.349162][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 16:06:27 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 311.480926][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.525577][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.533958][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.556137][ T35] audit: type=1804 audit(1608912387.340:9): pid=9923 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir185577199/syzkaller.rs2x07/2/bus" dev="sda1" ino=15750 res=1 errno=0 [ 311.557292][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:06:27 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 16:06:27 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff000}) [ 311.654409][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.673313][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.729159][ T8667] device veth0_vlan entered promiscuous mode [ 311.778923][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.800825][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.831736][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.844764][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.853682][ T8667] device veth1_vlan entered promiscuous mode [ 311.867373][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.944453][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.971187][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.115460][ T8667] device veth0_macvtap entered promiscuous mode [ 312.124530][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.132657][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.144322][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.167294][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.204850][ T8667] device veth1_macvtap entered promiscuous mode [ 312.235484][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.245344][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.263834][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.314387][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.366452][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.385528][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.416378][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.434685][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.454668][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.464485][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.533740][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.574671][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.603501][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.618550][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.642966][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.656197][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.667183][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.679900][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.691603][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.734652][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.747910][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.759241][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.770058][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.782311][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.802710][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.824819][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.833545][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.858064][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.886111][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.903980][ T8667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.940303][ T8667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.967056][ T8667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.994628][ T8667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.203846][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.215520][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.225136][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.302493][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.331340][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.406710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:06:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)=ANY=[@ANYBLOB='k']) 16:06:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x0, @local}}) 16:06:30 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 16:06:30 executing program 2: io_setup(0x202, &(0x7f0000000200)) 16:06:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x2, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030060", 0x3, 0x800}], 0x0, &(0x7f0000000140)=ANY=[]) 16:06:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x101) 16:06:30 executing program 3: process_vm_readv(0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/14, 0xe}], 0x1, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 314.813291][T10005] loop4: detected capacity change from 512 to 0 [ 314.851374][T10005] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 16:06:30 executing program 0: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a000319, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:06:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x8903, &(0x7f0000000080)) 16:06:30 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfd30) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 314.862434][T10005] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 6291459)! [ 314.892979][T10005] EXT4-fs (loop4): group descriptors corrupted! 16:06:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x200080c0, &(0x7f0000000100)=@generic={0x29, "f0e8114db38a91982d391453ab95affd99d682f5571543307f7ef3fe2ab1a92d8280f697dce3d10f4a311ef6d7403c2851996439d69bb460de783e32f5274f05fcabd020a7783d43cd36239537cb4c518f3c6c0144bc469dc524e0df1883375a3513cbb3743f00d992acf5c6061bc0a6bf3dee42fa5aaab52aecb8774a41"}, 0x80) [ 314.997836][T10005] loop4: detected capacity change from 512 to 0 [ 315.020073][T10005] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 16:06:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) dup3(r1, r0, 0x0) [ 315.053511][T10005] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 6291459)! [ 315.134982][T10025] loop0: detected capacity change from 264192 to 0 [ 315.190994][T10005] EXT4-fs (loop4): group descriptors corrupted! [ 315.200585][T10025] EXT4-fs (loop0): mounting with "discard" option, but the device does not support discard [ 315.214846][T10025] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 16:06:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000000)=""/147, 0x93) 16:06:31 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="55530700ae897094e61b0fb1f147a869c5dabcda97014d25d86800278dcff47d010068fbe9bd378f36467920ee72a9a18e37108b1464a1e5a2bb9529c6f35ffcb87a2e646eea88ed0320c5130b71a9e25e07407e70b086035a894facbd82d28abbbdb20feefecd8d078fb57023b0b1f10b597cea5f67d237409398dc", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 16:06:31 executing program 2: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xc74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='sysv\x00', 0x40080, &(0x7f00000003c0)='configfs\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./bus/file0\x00', &(0x7f0000000480), 0x1000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x600, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x0, 0x9) [ 315.319937][T10025] ext4 filesystem being mounted at /root/syzkaller-testdir923713646/syzkaller.oONHhM/2/file0 supports timestamps until 2038 (0x7fffffff) 16:06:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x3, 0x0) 16:06:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x2, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030060", 0x3, 0x800}], 0x0, &(0x7f0000000140)=ANY=[]) 16:06:31 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xc74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='sysv\x00', 0x40080, &(0x7f00000003c0)='configfs\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./bus/file0\x00', &(0x7f0000000480), 0x1000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x600, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x80, 0x9) 16:06:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) [ 315.460334][T10040] ptrace attach of "/root/syz-executor.1"[10039] was attempted by "/root/syz-executor.1"[10040] 16:06:31 executing program 0: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a000319, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 315.577806][ C0] hrtimer: interrupt took 55725 ns [ 315.617106][T10049] loop4: detected capacity change from 512 to 0 [ 315.778589][T10049] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 315.808225][T10049] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 6291459)! [ 315.854990][T10049] EXT4-fs (loop4): group descriptors corrupted! [ 315.989225][T10055] overlayfs: './file0' not a directory [ 316.126715][T10047] overlayfs: failed to resolve './bus': -2 [ 316.155136][T10055] overlayfs: 'file0' not a directory 16:06:31 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xc74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='sysv\x00', 0x40080, &(0x7f00000003c0)='configfs\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./bus/file0\x00', &(0x7f0000000480), 0x1000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x0, 0x9) 16:06:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b", 0x55, 0x400}], 0x0, &(0x7f0000000080)) 16:06:31 executing program 0: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a000319, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:06:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x15, &(0x7f0000000080)=@caif=@util={0x25, "8b48d16ba12001e08108585310cf18e2"}, 0x80) [ 316.184703][T10053] overlayfs: 'file0' not a directory 16:06:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="498d120909fce14ecb17f8ec5e80279be41e776e512763b3013e24391aec9c1d21", 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)}) 16:06:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227e, &(0x7f0000000040)) 16:06:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/151) [ 316.363842][T10079] loop5: detected capacity change from 4 to 0 [ 316.417488][T10079] EXT4-fs (loop5): unsupported inode size: 0 [ 316.423607][T10079] EXT4-fs (loop5): blocksize: 4096 [ 316.473806][T10082] loop0: detected capacity change from 264192 to 0 [ 316.557475][T10081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 316.571107][T10082] EXT4-fs (loop0): mounting with "discard" option, but the device does not support discard [ 316.589092][ C0] sd 0:0:1:0: [sg0] tag#7738 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 316.599535][ C0] sd 0:0:1:0: [sg0] tag#7738 CDB: Play track relative(10) [ 316.606759][ C0] sd 0:0:1:0: [sg0] tag#7738 CDB[00]: 49 8d 12 09 09 fc e1 4e cb 17 f8 ec 5e 80 27 9b [ 316.616487][ C0] sd 0:0:1:0: [sg0] tag#7738 CDB[10]: e4 1e 77 6e 51 27 63 b3 01 3e 24 39 1a ec 9c 1d [ 316.626127][ C0] sd 0:0:1:0: [sg0] tag#7738 CDB[20]: 21 16:06:32 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x49db, 0x12) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x101) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 16:06:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x46) [ 316.697124][T10082] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 16:06:32 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)='sysv\x00', 0x40080, &(0x7f00000003c0)='configfs\x00') creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 16:06:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="498d120909fce14ecb17f8ec5e80279be41e776e512763b3013e24391aec9c1d21", 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)}) [ 316.777955][T10082] ext4 filesystem being mounted at /root/syzkaller-testdir923713646/syzkaller.oONHhM/4/file0 supports timestamps until 2038 (0x7fffffff) [ 316.783290][T10081] overlayfs: 'file0' not a directory [ 316.816391][T10084] overlayfs: './file0' not a directory 16:06:32 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xc74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='sysv\x00', 0x40080, &(0x7f00000003c0)='configfs\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./bus/file0\x00', &(0x7f0000000480), 0x1000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x0, 0x9) [ 316.948433][ T35] audit: type=1800 audit(1608912392.730:10): pid=10107 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 16:06:32 executing program 0: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a000319, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 317.009060][ C1] sd 0:0:1:0: [sg0] tag#7739 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 317.019563][ C1] sd 0:0:1:0: [sg0] tag#7739 CDB: Play track relative(10) [ 317.026796][ C1] sd 0:0:1:0: [sg0] tag#7739 CDB[00]: 49 8d 12 09 09 fc e1 4e cb 17 f8 ec 5e 80 27 9b [ 317.036413][ C1] sd 0:0:1:0: [sg0] tag#7739 CDB[10]: e4 1e 77 6e 51 27 63 b3 01 3e 24 39 1a ec 9c 1d [ 317.046493][ C1] sd 0:0:1:0: [sg0] tag#7739 CDB[20]: 21 [ 317.143379][ T35] audit: type=1800 audit(1608912392.860:11): pid=10107 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 16:06:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="498d120909fce14ecb17f8ec5e80279be41e776e512763b3013e24391aec9c1d21", 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)}) 16:06:33 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xc74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='sysv\x00', 0x40080, &(0x7f00000003c0)='configfs\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./bus/file0\x00', &(0x7f0000000480), 0x1000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x0, 0x9) [ 317.212432][T10113] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 317.303032][ T7] BUG: kernel NULL pointer dereference, address: 0000000000000008 [ 317.310859][ T7] #PF: supervisor read access in kernel mode [ 317.315959][T10114] overlayfs: './file0' not a directory [ 317.316831][ T7] #PF: error_code(0x0000) - not-present page [ 317.327526][T10109] overlayfs: 'file0' not a directory [ 317.328226][ T7] PGD 0 P4D 0 [ 317.328246][ T7] Oops: 0000 [#1] PREEMPT SMP KASAN [ 317.342036][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.10.0-syzkaller #0 [ 317.349930][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.359983][ T7] Workqueue: events free_ipc [ 317.364594][ T7] RIP: 0010:kasan_record_aux_stack+0x77/0xb0 [ 317.370585][ T7] Code: 48 f7 fe 8b 47 24 49 89 f0 48 29 d3 8d 70 ff 41 0f af f0 48 01 ce 48 39 f3 48 0f 46 f3 e8 81 e9 ff ff bf 00 08 00 00 48 89 c3 <8b> 40 08 89 43 0c e8 1e e6 ff ff 89 43 08 5b c3 48 8b 50 08 48 c7 [ 317.390195][ T7] RSP: 0018:ffffc90000cdfae8 EFLAGS: 00010046 [ 317.396270][ T7] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88807d800000 [ 317.404247][ T7] RDX: 0000000000000078 RSI: ffff88807d800000 RDI: 0000000000000800 [ 317.412224][ T7] RBP: ffffffff837f04d0 R08: 0000000000400000 R09: 000000000000002e [ 317.420197][ T7] R10: ffffffff8132b7ea R11: 000000000000003f R12: 0000000000035b40 [ 317.423618][T10121] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 317.428165][ T7] R13: ffff88807d800088 R14: ffffc90000cdfc08 R15: 0000000000000200 [ 317.428183][ T7] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 317.428203][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.462537][ T7] CR2: 0000000000000008 CR3: 000000001db23000 CR4: 00000000001506f0 [ 317.470601][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.478571][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.486544][ T7] Call Trace: [ 317.489823][ T7] call_rcu+0xbb/0x710 [ 317.493908][ T7] ? sem_more_checks+0xa0/0xa0 [ 317.498683][ T7] ipc_rcu_putref+0x83/0xb0 [ 317.503193][ T7] freeary+0x139c/0x1b30 [ 317.507481][ T7] ? newary+0xc60/0xc60 [ 317.511646][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 317.516591][ T7] ? __radix_tree_lookup+0x211/0x2a0 [ 317.522000][ T7] free_ipcs+0x98/0x1e0 [ 317.526162][ T7] ? newary+0xc60/0xc60 [ 317.530325][ T7] sem_exit_ns+0x1b/0x40 [ 317.534573][ T7] free_ipc+0xf8/0x200 [ 317.538647][ T7] process_one_work+0x98d/0x1630 [ 317.543596][ T7] ? pwq_dec_nr_in_flight+0x320/0x320 [ 317.548978][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 317.553925][ T7] ? _raw_spin_lock_irq+0x41/0x50 [ 317.558979][ T7] worker_thread+0x64c/0x1120 [ 317.563664][ T7] ? process_one_work+0x1630/0x1630 [ 317.568868][ T7] kthread+0x3b1/0x4a0 [ 317.572940][ T7] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 317.578842][ T7] ret_from_fork+0x1f/0x30 [ 317.583268][ T7] Modules linked in: [ 317.587156][ T7] CR2: 0000000000000008 [ 317.591308][ T7] ---[ end trace 7f98ba34c42c34af ]--- [ 317.596759][ T7] RIP: 0010:kasan_record_aux_stack+0x77/0xb0 [ 317.602749][ T7] Code: 48 f7 fe 8b 47 24 49 89 f0 48 29 d3 8d 70 ff 41 0f af f0 48 01 ce 48 39 f3 48 0f 46 f3 e8 81 e9 ff ff bf 00 08 00 00 48 89 c3 <8b> 40 08 89 43 0c e8 1e e6 ff ff 89 43 08 5b c3 48 8b 50 08 48 c7 [ 317.622363][ T7] RSP: 0018:ffffc90000cdfae8 EFLAGS: 00010046 [ 317.628433][ T7] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88807d800000 [ 317.636405][ T7] RDX: 0000000000000078 RSI: ffff88807d800000 RDI: 0000000000000800 [ 317.644376][ T7] RBP: ffffffff837f04d0 R08: 0000000000400000 R09: 000000000000002e [ 317.652349][ T7] R10: ffffffff8132b7ea R11: 000000000000003f R12: 0000000000035b40 [ 317.660408][ T7] R13: ffff88807d800088 R14: ffffc90000cdfc08 R15: 0000000000000200 [ 317.668380][ T7] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 317.677315][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.683906][ T7] CR2: 0000000000000008 CR3: 000000001db23000 CR4: 00000000001506f0 [ 317.691883][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.699854][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.707827][ T7] Kernel panic - not syncing: Fatal exception [ 317.714630][ T7] Kernel Offset: disabled [ 317.718944][ T7] Rebooting in 86400 seconds..