last executing test programs: 8.751051632s ago: executing program 2 (id=874): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000180)) 6.600808778s ago: executing program 3 (id=883): mlockall(0x1) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) 4.085027498s ago: executing program 1 (id=891): getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) 3.903453884s ago: executing program 1 (id=893): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.903380784s ago: executing program 4 (id=894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mlockall(0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, 0x0, 0x0) 3.755800441s ago: executing program 1 (id=895): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000011240)=""/4086, 0xff6}], 0x1) r1 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000010040)={0x4}, 0xffffff23) write$P9_RLOPEN(r3, 0x0, 0x0) rt_sigreturn() msgctl$IPC_RMID(r1, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 2.804189858s ago: executing program 1 (id=896): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffd}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.77095755s ago: executing program 0 (id=897): socket$igmp(0x2, 0x3, 0x2) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)="41f404b5ab06f3c9a1c8a19a6c9c46f533352b2ffffe") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r3, &(0x7f0000000880)=""/4096, 0x1000, 0x0) 2.663692744s ago: executing program 4 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYBLOB="05003901"], 0x44}}, 0x0) 2.663627884s ago: executing program 3 (id=899): ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 2.624592625s ago: executing program 2 (id=900): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0/file0\x00'}, 0x6e) rt_sigreturn() sendmmsg$inet6(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.567815028s ago: executing program 1 (id=901): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) fsopen(0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shutdown(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), 0x4) 2.556621768s ago: executing program 4 (id=902): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x8912, 0x20000000) 2.475782042s ago: executing program 3 (id=903): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5452, 0x0) 2.475673951s ago: executing program 2 (id=904): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001340)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) 2.405899594s ago: executing program 4 (id=905): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.380521175s ago: executing program 3 (id=906): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000b80)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d475c5701c17866051e6a72fd9c635852af264213a47caa2cb5fb91a62d61417e32e8000890687d74ba2d1a8eaecaa169ef95f7347e7592e9283a9357185b1282ad068be2fcf88b", 0x82}, {&(0x7f0000000800)="8534f65f698d0200a3ee30459376efe5001dc546f93c6540e7a5215fa9f9469576e94b77cfaf3f76956c4c842247e2803e33335fa28b755829ea0000406333941d8989b0b8e304f307667026a45ceae6d184bd183144ad8f5ff9ec", 0x5b}], 0x3}, 0xc0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.801245048s ago: executing program 2 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@subsystem='devices'}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1701ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) 1.51138765s ago: executing program 0 (id=908): ioctl$PIO_FONT(0xffffffffffffffff, 0x5450, 0x0) 1.5112498s ago: executing program 1 (id=909): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNGETIFF(r1, 0x8904, 0x0) 1.380011915s ago: executing program 4 (id=910): signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40140, 0x0) close(r0) timer_create(0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_ATTR(r1, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x80341, 0x0) ioctl$TUNSETDEBUG(r2, 0x5450, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:\n'], 0x8) close(r1) rt_sigreturn() poll(0x0, 0x0, 0x64) rt_sigreturn() timer_settime(0x0, 0x0, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getrlimit(0x0, 0x0) 1.309240647s ago: executing program 0 (id=911): rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x8) rt_sigreturn() r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 1.083706096s ago: executing program 0 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYBLOB="05003901"], 0x44}}, 0x0) 756.9294ms ago: executing program 4 (id=913): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) mlockall(0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) 349.453175ms ago: executing program 3 (id=914): symlinkat(&(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 304.244987ms ago: executing program 2 (id=915): socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 303.848757ms ago: executing program 0 (id=916): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 15.755069ms ago: executing program 3 (id=917): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x5c003) 15.647229ms ago: executing program 0 (id=918): timer_create(0x3, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, r0+60000000}}, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 2 (id=919): socket$igmp(0x2, 0x3, 0x2) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)="41f404b5ab06f3c9a1c8a19a6c9c46f533352b2ffffe") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r3, &(0x7f0000000880)=""/4096, 0x1000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 45.970066][ T3535] cgroup: Unknown subsys name 'net' [ 46.095946][ T3535] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.341973][ T3535] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.085411][ T3547] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.102439][ T3550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.110774][ T3558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.119038][ T3558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.120826][ T3559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.126722][ T3558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.134404][ T3559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.148788][ T3558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.150030][ T3559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.156145][ T3558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.164482][ T3559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.170618][ T3558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.177639][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.184159][ T3558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.191876][ T3559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.205990][ T3558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.206845][ T3559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.213312][ T3558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.220810][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.227187][ T3558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.234933][ T3559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.242007][ T3558] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.248506][ T3559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.255627][ T3558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.262270][ T3559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 48.268967][ T3558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.284377][ T3558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.290778][ T3560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.291541][ T3558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.301224][ T3562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.666940][ T3548] chnl_net:caif_netlink_parms(): no params data found [ 48.695218][ T3551] chnl_net:caif_netlink_parms(): no params data found [ 48.805386][ T3556] chnl_net:caif_netlink_parms(): no params data found [ 48.900466][ T3544] chnl_net:caif_netlink_parms(): no params data found [ 48.913189][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.920290][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.929203][ T3548] device bridge_slave_0 entered promiscuous mode [ 48.938289][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.945760][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.954217][ T3551] device bridge_slave_0 entered promiscuous mode [ 48.970335][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.978485][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.986888][ T3548] device bridge_slave_1 entered promiscuous mode [ 48.994552][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.001718][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.009355][ T3551] device bridge_slave_1 entered promiscuous mode [ 49.027312][ T3552] chnl_net:caif_netlink_parms(): no params data found [ 49.071328][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.078522][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.086815][ T3556] device bridge_slave_0 entered promiscuous mode [ 49.106227][ T3548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.133146][ T3551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.142518][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.149599][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.157977][ T3556] device bridge_slave_1 entered promiscuous mode [ 49.166508][ T3548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.191783][ T3551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.262777][ T3556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.274666][ T3548] team0: Port device team_slave_0 added [ 49.296039][ T3551] team0: Port device team_slave_0 added [ 49.304163][ T3551] team0: Port device team_slave_1 added [ 49.311450][ T3556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.321997][ T3548] team0: Port device team_slave_1 added [ 49.327807][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.337135][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.345359][ T3544] device bridge_slave_0 entered promiscuous mode [ 49.385632][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.392946][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.400634][ T3544] device bridge_slave_1 entered promiscuous mode [ 49.425260][ T3556] team0: Port device team_slave_0 added [ 49.452354][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.459500][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.467359][ T3552] device bridge_slave_0 entered promiscuous mode [ 49.475227][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.482456][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.508364][ T3551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.521600][ T3556] team0: Port device team_slave_1 added [ 49.527755][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.534737][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.560650][ T3551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.572360][ T3548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.579314][ T3548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.605871][ T3548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.618784][ T3544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.628455][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.635718][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.643867][ T3552] device bridge_slave_1 entered promiscuous mode [ 49.671130][ T3548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.678098][ T3548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.704217][ T3548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.717185][ T3544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.743758][ T3556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.750725][ T3556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.776700][ T3556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.789087][ T3556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.796121][ T3556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.822779][ T3556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.881773][ T3552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.894128][ T3544] team0: Port device team_slave_0 added [ 49.901997][ T3544] team0: Port device team_slave_1 added [ 49.918503][ T3551] device hsr_slave_0 entered promiscuous mode [ 49.925946][ T3551] device hsr_slave_1 entered promiscuous mode [ 49.934915][ T3552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.967316][ T3544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.974486][ T3544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.001273][ T3544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.040796][ T3544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.047799][ T3544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.074159][ T3544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.094822][ T3548] device hsr_slave_0 entered promiscuous mode [ 50.101846][ T3548] device hsr_slave_1 entered promiscuous mode [ 50.108287][ T3548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.116772][ T3548] Cannot create hsr debugfs directory [ 50.125566][ T3556] device hsr_slave_0 entered promiscuous mode [ 50.132675][ T3556] device hsr_slave_1 entered promiscuous mode [ 50.139176][ T3556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.146925][ T3556] Cannot create hsr debugfs directory [ 50.161702][ T3552] team0: Port device team_slave_0 added [ 50.183110][ T3552] team0: Port device team_slave_1 added [ 50.274224][ T3544] device hsr_slave_0 entered promiscuous mode [ 50.281753][ T3544] device hsr_slave_1 entered promiscuous mode [ 50.288326][ T3544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.296098][ T3544] Cannot create hsr debugfs directory [ 50.302088][ T3552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.309031][ T3552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.335673][ T3552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.350633][ T3552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.358261][ T3552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.385020][ T3547] Bluetooth: hci0: command tx timeout [ 50.385030][ T47] Bluetooth: hci1: command tx timeout [ 50.390629][ T3547] Bluetooth: hci3: command tx timeout [ 50.396083][ T47] Bluetooth: hci2: command tx timeout [ 50.396187][ T47] Bluetooth: hci4: command tx timeout [ 50.407572][ T3552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.532104][ T3552] device hsr_slave_0 entered promiscuous mode [ 50.539350][ T3552] device hsr_slave_1 entered promiscuous mode [ 50.547523][ T3552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.555409][ T3552] Cannot create hsr debugfs directory [ 50.725411][ T3551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.738811][ T3551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.747656][ T3551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.756641][ T3551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.804319][ T3548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.822982][ T3548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.833388][ T3548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.847444][ T3548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.912115][ T3544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.934748][ T3544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.950102][ T3544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.960720][ T3544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.020458][ T3556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.042441][ T3556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.052402][ T3556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.065335][ T3556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.087652][ T3552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.098570][ T3552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.109237][ T3552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.119939][ T3552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.145922][ T3551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.194727][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.204977][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.217391][ T3551] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.227981][ T3548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.257369][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.269536][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.278502][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.285816][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.313321][ T3548] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.321716][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.332003][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.340508][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.349434][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.356510][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.364590][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.374069][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.383319][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.410596][ T3544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.432641][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.445285][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.454289][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.465501][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.474133][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.483266][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.492041][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.500321][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.507420][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.515276][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.523950][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.532923][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.539972][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.547712][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.555471][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.586294][ T3544] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.595706][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.604174][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.612490][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.620937][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.630395][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.639251][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.647698][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.656253][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.664937][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.673523][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.681911][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.690332][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.699319][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.725277][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.733596][ T3548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.744225][ T3548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.762029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.770436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.785456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.796311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.808563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.820421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.831539][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.838601][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.865965][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.873847][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.958629][ T3556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.970876][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.980628][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.011865][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.018979][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.030693][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.039306][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.048241][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.057865][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.074855][ T3544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.085772][ T3544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.106591][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.114704][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.123518][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.132612][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.141362][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.149932][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.158453][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.172978][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.189408][ T3556] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.213486][ T3548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.224353][ T3552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.235365][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.243902][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.251835][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.259799][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.282149][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.290842][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.299644][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.306903][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.336530][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.346042][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.354909][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.363124][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.372516][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.380819][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.387927][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.395867][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.417197][ T3552] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.429871][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.444904][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.453381][ T47] Bluetooth: hci3: command tx timeout [ 52.458790][ T47] Bluetooth: hci2: command tx timeout [ 52.468265][ T3545] Bluetooth: hci1: command tx timeout [ 52.468285][ T3547] Bluetooth: hci0: command tx timeout [ 52.473865][ T3545] Bluetooth: hci4: command tx timeout [ 52.488424][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.497250][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.512250][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.544314][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.552444][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.559829][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.568234][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.576653][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.584430][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.593165][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.602257][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.609332][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.617644][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.629175][ T3544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.640870][ T3551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.689264][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.700201][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.714825][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.721995][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.735636][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.744574][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.753306][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.761917][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.770117][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.778730][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.787117][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.795732][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.818006][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.841477][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.850210][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.872171][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.891146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.912242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.920598][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.941356][ T3548] device veth0_vlan entered promiscuous mode [ 52.954588][ T3544] device veth0_vlan entered promiscuous mode [ 52.966057][ T3548] device veth1_vlan entered promiscuous mode [ 52.978635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.987325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.996942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.010172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.018818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.033076][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.045532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.056176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.068042][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.078998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.087642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.098046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.107352][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.135263][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.143511][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.173716][ T3544] device veth1_vlan entered promiscuous mode [ 53.194126][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.212057][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.222233][ T3548] device veth0_macvtap entered promiscuous mode [ 53.248369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.257439][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.267077][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.285667][ T3548] device veth1_macvtap entered promiscuous mode [ 53.298469][ T3544] device veth0_macvtap entered promiscuous mode [ 53.321954][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.330095][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.341069][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.349751][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.358056][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.365676][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.374354][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.395558][ T3548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.405491][ T3551] device veth0_vlan entered promiscuous mode [ 53.414952][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.429671][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.438070][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.451882][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.460624][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.476996][ T3556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.487425][ T3548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.498424][ T3544] device veth1_macvtap entered promiscuous mode [ 53.513956][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.523562][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.536201][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.554058][ T3548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.566486][ T3548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.576219][ T3548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.585938][ T3548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.616224][ T3552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.640734][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.651924][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.664705][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.673943][ T3551] device veth1_vlan entered promiscuous mode [ 53.681304][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.689373][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.698174][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.706931][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.714635][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.722293][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.730690][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.763447][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.774349][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.787355][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.827231][ T3556] device veth0_vlan entered promiscuous mode [ 53.834276][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.842701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.851933][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.860523][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.869169][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.880560][ T3544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.893814][ T3544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.902956][ T3544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.911880][ T3544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.947244][ T3556] device veth1_vlan entered promiscuous mode [ 53.956779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.964567][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.972753][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.980585][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.989716][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.001620][ T3551] device veth0_macvtap entered promiscuous mode [ 54.046377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.054912][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.064363][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.073680][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.085716][ T3552] device veth0_vlan entered promiscuous mode [ 54.097906][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.106364][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.118437][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.126649][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.140496][ T3551] device veth1_macvtap entered promiscuous mode [ 54.152155][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.165660][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.180523][ T3552] device veth1_vlan entered promiscuous mode [ 54.201519][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.209597][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.218260][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.227341][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.238722][ T3556] device veth0_macvtap entered promiscuous mode [ 54.294468][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.304011][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.307466][ T3556] device veth1_macvtap entered promiscuous mode [ 54.325787][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.336728][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.347843][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.358570][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.372072][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.387983][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.396338][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.404795][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.413121][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.420779][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.430006][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.438695][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.447158][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.462088][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.471122][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.480934][ T3552] device veth0_macvtap entered promiscuous mode [ 54.491666][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.502482][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.513036][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.523892][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.534048][ T3545] Bluetooth: hci0: command tx timeout [ 54.534092][ T3545] Bluetooth: hci1: command tx timeout [ 54.534126][ T3545] Bluetooth: hci3: command tx timeout [ 54.542140][ T47] Bluetooth: hci4: command tx timeout [ 54.547259][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.550526][ T47] Bluetooth: hci2: command tx timeout [ 54.582723][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.596299][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.605684][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.620517][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.633808][ T3552] device veth1_macvtap entered promiscuous mode [ 54.651733][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.662440][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.673072][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.683894][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.694971][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.705945][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.719050][ T3556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.732748][ T3551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.743210][ T3551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.756430][ T3551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.768309][ T3551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.789742][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.797437][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.798444][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.818229][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.830460][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.841463][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.853508][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.864318][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.874743][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.885447][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.895625][ T3628] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 54.898780][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.909103][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.917458][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.926194][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.935040][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.944267][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.953188][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.964000][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.974843][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.984754][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.995658][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.005697][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.017822][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.028931][ T3556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.042682][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.055562][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.065674][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.077723][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.087608][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.098980][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.110063][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.120729][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.132264][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.146337][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.155432][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.164591][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.173727][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.187397][ T3556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.197328][ T3556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.207674][ T3556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.218052][ T3556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.235391][ T3552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.271186][ T3552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.279923][ T3552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.307452][ T3552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.581518][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.589470][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.623552][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.635904][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.638612][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.663409][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.673572][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.683889][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.706357][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.798829][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.799737][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.818220][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.827905][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.828034][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.855978][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.860202][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.871951][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.930534][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.123846][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 56.611658][ T47] Bluetooth: hci2: command tx timeout [ 56.611803][ T3545] Bluetooth: hci3: command tx timeout [ 56.617075][ T47] Bluetooth: hci1: command tx timeout [ 56.617102][ T47] Bluetooth: hci0: command tx timeout [ 56.622659][ T3562] Bluetooth: hci4: command tx timeout [ 57.154022][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 59.396455][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 60.374329][ T26] audit: type=1326 audit(1719891293.231:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3819 comm="syz.4.66" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f20375b99 code=0x0 [ 60.792895][ T3834] capability: warning: `syz.2.73' uses deprecated v2 capabilities in a way that may be insecure [ 60.848142][ T3835] program syz.2.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.597623][ T3862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.621344][ T3864] netlink: 64 bytes leftover after parsing attributes in process `syz.1.86'. [ 62.750933][ T3862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.832882][ T3862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.855512][ T3862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.917808][ T3862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.001850][ T3862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.089400][ T3878] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.875849][ T26] audit: type=1326 audit(1719891297.731:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3913 comm="syz.4.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f20375b99 code=0x0 [ 71.254384][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.260922][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.139148][ T4146] loop2: detected capacity change from 0 to 512 [ 72.431959][ T4146] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.487850][ T4146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.499064][ T4146] EXT4-fs (loop2): Unsupported encryption level 32 [ 72.686289][ T4156] loop2: detected capacity change from 0 to 1024 [ 72.756427][ T4156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.104943][ T4169] loop2: detected capacity change from 0 to 164 [ 73.521618][ T4177] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present! [ 74.557625][ T4190] cgroup: No subsys list or none specified [ 76.373801][ T1170] cfg80211: failed to load regulatory.db [ 76.571723][ T4235] loop2: detected capacity change from 0 to 512 [ 76.612816][ T4235] ======================================================= [ 76.612816][ T4235] WARNING: The mand mount option has been deprecated and [ 76.612816][ T4235] and is ignored by this kernel. Remove the mand [ 76.612816][ T4235] option from the mount to silence this warning. [ 76.612816][ T4235] ======================================================= [ 76.820915][ T4235] EXT4-fs (loop2): 1 orphan inode deleted [ 76.881128][ T4235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.895994][ T4250] device bridge0 entered promiscuous mode [ 76.900681][ T4235] ext4 filesystem being mounted at /root/syzkaller.9uOXya/47/file1 supports timestamps until 2038 (0x7fffffff) [ 76.937276][ T4250] device bridge0 left promiscuous mode [ 76.980098][ T26] audit: type=1804 audit(1719891309.831:4): pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.214" name="/root/syzkaller.9uOXya/47/file1/bus" dev="loop2" ino=16 res=1 errno=0 [ 76.986188][ T4235] EXT4-fs warning (device loop2): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 77.166522][ T3552] EXT4-fs (loop2): unmounting filesystem. [ 77.401169][ T153] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.533709][ T4273] Zero length message leads to an empty skb [ 77.628698][ T4279] device bond_slave_0 entered promiscuous mode [ 77.635228][ T4279] device bond_slave_1 entered promiscuous mode [ 77.649771][ T4279] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.669247][ T4279] device bond_slave_0 left promiscuous mode [ 77.675284][ T4279] device bond_slave_1 left promiscuous mode [ 77.761385][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.788742][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.579945][ T153] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 78.589587][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.613894][ T153] usb 1-1: config 0 descriptor?? [ 78.767485][ T4295] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 79.333902][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.357006][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.383001][ T4320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.243'. [ 79.456881][ T153] logitech-djreceiver 0003:046D:C71B.0001: unbalanced delimiter at end of report description [ 79.473174][ T153] logitech-djreceiver 0003:046D:C71B.0001: logi_dj_probe: parse failed [ 79.495196][ T153] logitech-djreceiver: probe of 0003:046D:C71B.0001 failed with error -22 [ 79.706657][ T26] audit: type=1804 audit(1719891312.561:5): pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.246" name="/root/syzkaller.s67hh8/61/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 80.554652][ T41] usb 1-1: USB disconnect, device number 2 [ 80.701309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.021231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.329596][ T4371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.257'. [ 81.710004][ T4385] tipc: Started in network mode [ 81.717350][ T4385] tipc: Node identity ffffffff, cluster identity 4711 [ 81.726415][ T4385] tipc: Node number set to 4294967295 [ 82.658087][ T4428] device team0 entered promiscuous mode [ 82.665474][ T4428] device team_slave_0 entered promiscuous mode [ 82.676778][ T4428] device team_slave_1 entered promiscuous mode [ 82.687137][ T4427] device team0 left promiscuous mode [ 82.699214][ T4427] device team_slave_0 left promiscuous mode [ 82.731926][ T4427] device team_slave_1 left promiscuous mode [ 83.445706][ T4466] device team0 entered promiscuous mode [ 83.461174][ T4466] device team_slave_0 entered promiscuous mode [ 83.485882][ T4466] device team_slave_1 entered promiscuous mode [ 83.585747][ T4465] device team0 left promiscuous mode [ 83.611081][ T4465] device team_slave_0 left promiscuous mode [ 83.624645][ T4465] device team_slave_1 left promiscuous mode [ 83.761767][ T3562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.772586][ T3562] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.790013][ T3562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.801681][ T3562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.809263][ T3562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.826593][ T3562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.925594][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.129305][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.258874][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.288628][ T4504] device team0 entered promiscuous mode [ 84.294846][ T4504] device team_slave_0 entered promiscuous mode [ 84.301456][ T4504] device team_slave_1 entered promiscuous mode [ 84.399428][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.448775][ T4502] device team0 left promiscuous mode [ 84.476358][ T4502] device team_slave_0 left promiscuous mode [ 84.496417][ T4502] device team_slave_1 left promiscuous mode [ 84.514625][ T4480] chnl_net:caif_netlink_parms(): no params data found [ 84.731553][ T4528] netlink: 248 bytes leftover after parsing attributes in process `syz.4.318'. [ 84.946180][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.988012][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.009249][ T4480] device bridge_slave_0 entered promiscuous mode [ 85.020828][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.021073][ T34] tipc: Left network mode [ 85.045950][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.066182][ T4480] device bridge_slave_1 entered promiscuous mode [ 85.584763][ T4480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.792951][ T4480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.894623][ T4480] team0: Port device team_slave_0 added [ 85.898630][ T3545] Bluetooth: hci0: command tx timeout [ 85.970720][ T4480] team0: Port device team_slave_1 added [ 86.135293][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.151710][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.243605][ T4480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.317865][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.329946][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.414769][ T4480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.655624][ T4480] device hsr_slave_0 entered promiscuous mode [ 86.700414][ T4480] device hsr_slave_1 entered promiscuous mode [ 86.720395][ T4480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.740616][ T4480] Cannot create hsr debugfs directory [ 87.395147][ T34] device hsr_slave_0 left promiscuous mode [ 87.468233][ T34] device hsr_slave_1 left promiscuous mode [ 87.478011][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.501122][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.542533][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.570319][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.602361][ T34] device bridge_slave_1 left promiscuous mode [ 87.620566][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.680926][ T34] device bridge_slave_0 left promiscuous mode [ 87.690599][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.841479][ T34] device veth1_macvtap left promiscuous mode [ 87.847846][ T34] device veth0_macvtap left promiscuous mode [ 87.888811][ T34] device veth1_vlan left promiscuous mode [ 87.915833][ T34] device veth0_vlan left promiscuous mode [ 87.976625][ T3545] Bluetooth: hci0: command tx timeout [ 89.195078][ T34] team0 (unregistering): Port device team_slave_1 removed [ 89.292301][ T34] team0 (unregistering): Port device team_slave_0 removed [ 89.411589][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.505824][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.726036][ T3545] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 89.811352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.826673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 89.835618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 89.847671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 89.864238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.874109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.890997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.908459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.586022][ T3547] Bluetooth: hci0: command tx timeout [ 91.701268][ T3590] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.735186][ T3547] Bluetooth: hci1: command tx timeout [ 92.061397][ T3590] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.072569][ T3590] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.085979][ T3590] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.095247][ T3590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.107139][ T3590] usb 3-1: config 0 descriptor?? [ 92.155831][ T3590] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 92.253130][ T34] bond0 (unregistering): Released all slaves [ 92.465190][ T3593] usb 3-1: USB disconnect, device number 2 [ 93.037087][ T4480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.064927][ T4480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.073643][ T3547] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 93.099281][ T4480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.939140][ T3545] Bluetooth: hci0: command tx timeout [ 95.091132][ T3545] Bluetooth: hci4: command tx timeout [ 95.145732][ T4480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.515818][ T4480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.594667][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.610578][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.638937][ T4480] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.670042][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.688440][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.701281][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.708636][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.804583][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.854436][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.888065][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.929239][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.936433][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.972465][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.076183][ T4480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.121118][ T4480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.157210][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.182121][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.221859][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.262259][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.281105][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.289665][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.331848][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.340458][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.417195][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.435060][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.447743][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.586218][ T3567] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.991313][ T3567] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.031205][ T3567] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.095269][ T3567] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.121374][ T3545] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 97.125286][ T4480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.159854][ T3567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.986058][ T3567] usb 5-1: config 0 descriptor?? [ 98.000296][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.043723][ T3567] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 98.081199][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.088672][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.149672][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.197007][ T4480] device veth0_vlan entered promiscuous mode [ 98.225083][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.243685][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.316789][ T4480] device veth1_vlan entered promiscuous mode [ 98.338299][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.349596][ T1170] usb 5-1: USB disconnect, device number 2 [ 98.361932][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.412244][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.449655][ T4480] device veth0_macvtap entered promiscuous mode [ 98.511050][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.519874][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.550542][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.582434][ T4480] device veth1_macvtap entered promiscuous mode [ 98.591790][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.620315][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.685561][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.731036][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.761220][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.800130][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.841012][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.892893][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.931058][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.975262][ T4808] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 98.991008][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.043843][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.081996][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.096989][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.137963][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 99.167471][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.181309][ T3545] Bluetooth: hci1: command tx timeout [ 99.192016][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.202235][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.221000][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.232232][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.242965][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.253164][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.265562][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.301244][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.308639][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.318825][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.334514][ T4817] netlink: 'syz.3.390': attribute type 21 has an invalid length. [ 99.381411][ T4817] netlink: 'syz.3.390': attribute type 2 has an invalid length. [ 99.389136][ T4817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.390'. [ 99.421204][ T41] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.453559][ T4480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.475168][ T4480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.519325][ T4480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.576578][ T4480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.661281][ T41] usb 2-1: Using ep0 maxpacket: 32 [ 99.781321][ T41] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 99.784069][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.802000][ T41] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 99.814076][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.851126][ T153] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.855223][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.868807][ T3545] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 99.873706][ T41] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 99.892651][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.900688][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.910683][ T41] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 99.952899][ T41] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.976231][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.641579][ T153] usb 3-1: Using ep0 maxpacket: 8 [ 100.711543][ T41] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.723975][ T41] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.783293][ T153] usb 3-1: config 0 has no interfaces? [ 100.789151][ T41] usb 2-1: Product: syz [ 100.819648][ T41] usb 2-1: Manufacturer: syz [ 100.849908][ T41] usb 2-1: SerialNumber: syz [ 100.861796][ T153] usb 3-1: config 0 has no interfaces? [ 100.892385][ T41] usb 2-1: config 0 descriptor?? [ 100.940802][ T41] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.950889][ T153] usb 3-1: config 0 has no interfaces? [ 100.996368][ T41] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 101.036136][ T153] usb 3-1: config 0 has no interfaces? [ 101.047351][ T153] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 101.057359][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.078460][ T153] usb 3-1: config 0 descriptor?? [ 101.264166][ T1170] usb 2-1: USB disconnect, device number 2 [ 101.271286][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 101.278596][ T4808] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 101.285891][ T4814] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 101.298659][ T1170] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 101.334716][ T3594] usb 3-1: USB disconnect, device number 3 [ 101.361168][ T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.614440][ T3547] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 101.821313][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.951114][ T3545] Bluetooth: hci2: command tx timeout [ 102.650084][ T41] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.663590][ T41] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.672875][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.688864][ T41] usb 1-1: config 0 descriptor?? [ 102.733130][ T41] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 102.945109][ T41] usb 1-1: USB disconnect, device number 3 [ 103.284322][ T4923] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 103.314918][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 103.496750][ T3547] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 103.621055][ T936] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.678656][ T3545] Bluetooth: hci4: command tx timeout [ 105.361203][ T936] usb 3-1: Using ep0 maxpacket: 32 [ 105.411455][ T4963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.432'. [ 105.491515][ T936] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 105.504495][ T936] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 105.545198][ T936] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 105.578881][ T936] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 105.608629][ T936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.731174][ T3547] Bluetooth: hci4: command tx timeout [ 106.621246][ T936] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 106.630323][ T936] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 106.647783][ T936] usb 3-1: Product: syz [ 106.671029][ T936] usb 3-1: Manufacturer: syz [ 106.690610][ T936] usb 3-1: config 0 descriptor?? [ 106.716355][ T936] usb 3-1: can't set config #0, error -71 [ 106.727485][ T936] usb 3-1: USB disconnect, device number 4 [ 106.959265][ T5009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.446'. [ 108.307607][ T26] audit: type=1326 audit(1719891341.161:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca78975b99 code=0x7ffc0000 [ 108.415898][ T26] audit: type=1326 audit(1719891341.221:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fca78975b99 code=0x7ffc0000 [ 108.703263][ T26] audit: type=1326 audit(1719891341.221:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca78975b99 code=0x7ffc0000 [ 108.760336][ T26] audit: type=1326 audit(1719891341.261:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fca78975b99 code=0x7ffc0000 [ 109.056489][ T5043] ptrace attach of "./syz-executor exec"[3556] was attempted by "./syz-executor exec"[5043] [ 109.060746][ T26] audit: type=1326 audit(1719891341.261:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca78975b99 code=0x7ffc0000 [ 109.189362][ T26] audit: type=1326 audit(1719891341.261:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fca78975b99 code=0x7ffc0000 [ 109.253217][ T26] audit: type=1326 audit(1719891341.261:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca78975b99 code=0x7ffc0000 [ 109.587398][ T5065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.461'. [ 110.208596][ T5089] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.550335][ T5104] loop1: detected capacity change from 0 to 256 [ 110.578666][ T5105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.481'. [ 110.609483][ T5108] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 110.650527][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 110.691527][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 111.001751][ T41] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.281064][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 111.415755][ T41] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 111.436851][ T5139] loop3: detected capacity change from 0 to 128 [ 111.437775][ T41] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 111.491139][ T41] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 111.507713][ T41] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 111.527644][ T5140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.495'. [ 111.557356][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 111.574750][ T41] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.709616][ T26] audit: type=1326 audit(1719891344.561:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5147 comm="syz.4.501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f20375b99 code=0x0 [ 111.751347][ T41] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 111.765029][ T5146] loop1: detected capacity change from 0 to 2048 [ 111.779117][ T41] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 111.809365][ T41] usb 3-1: Product: syz [ 111.814625][ T41] usb 3-1: Manufacturer: syz [ 111.824881][ T5146] loop1: p1 < > p3 [ 111.828678][ T41] usb 3-1: SerialNumber: syz [ 111.840210][ T5146] loop1: p3 size 134217728 extends beyond EOD, truncated [ 111.842639][ T41] usb 3-1: config 0 descriptor?? [ 111.902437][ T41] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 111.925824][ T41] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 112.005391][ T5156] program syz.0.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.224105][ T5166] loop0: detected capacity change from 0 to 128 [ 112.236856][ T41] usb 3-1: USB disconnect, device number 5 [ 112.248334][ T41] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 112.282829][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 112.412707][ T5173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.512'. [ 112.625426][ T5184] loop1: detected capacity change from 0 to 2048 [ 112.684881][ T5192] loop3: detected capacity change from 0 to 512 [ 112.700399][ T5184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.714708][ T5184] ext4 filesystem being mounted at /root/syzkaller.s67hh8/122/file0 supports timestamps until 2038 (0x7fffffff) [ 112.748081][ T5192] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.812983][ T5192] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 112.853295][ T5192] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 112.862715][ T5192] System zones: 0-2, 18-18, 34-34 [ 112.864557][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 112.875918][ T5192] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 112.903393][ T5192] EXT4-fs (loop3): 1 truncate cleaned up [ 112.909090][ T5192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.961569][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 112.987683][ T3556] EXT4-fs (loop3): unmounting filesystem. [ 113.016062][ T5207] loop4: detected capacity change from 0 to 2048 [ 113.084777][ T5207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.093559][ T5207] ext4 filesystem being mounted at /root/syzkaller.0gWcvY/121/file0 supports timestamps until 2038 (0x7fffffff) [ 113.124637][ T26] audit: type=1326 audit(1719891345.981:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.1.526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca78975b99 code=0x0 [ 113.147239][ T5207] fs-verity: sha512 using implementation "sha512-avx2" [ 113.171050][ T5178] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.207387][ T3551] EXT4-fs (loop4): unmounting filesystem. [ 113.455070][ T5223] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 113.542187][ T5178] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.561034][ T5178] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.611074][ T5178] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.633685][ T5178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.660615][ T5178] usb 1-1: config 0 descriptor?? [ 113.723078][ T5178] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 113.728649][ T5228] loop2: detected capacity change from 0 to 8192 [ 113.760792][ T5228] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.927706][ T5178] usb 1-1: USB disconnect, device number 4 [ 114.057262][ T5239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 114.394757][ T5262] loop4: detected capacity change from 0 to 64 [ 114.500862][ T26] audit: type=1326 audit(1719891347.351:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.3.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc28175b99 code=0x0 [ 114.641121][ T5260] loop1: detected capacity change from 0 to 8192 [ 114.668176][ T5260] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.774720][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 115.203119][ T5254] loop2: detected capacity change from 0 to 32768 [ 115.598895][ T5305] __nla_validate_parse: 1 callbacks suppressed [ 115.598912][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 115.611227][ T3594] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.814747][ T5315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.569'. [ 115.968696][ T5323] loop3: detected capacity change from 0 to 128 [ 115.982087][ T3594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.998572][ T3594] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.054824][ T3594] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.077889][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.097607][ T3594] usb 1-1: config 0 descriptor?? [ 116.151488][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 116.163153][ T3594] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 116.257152][ T5329] loop4: detected capacity change from 0 to 8 [ 116.369009][ T936] usb 1-1: USB disconnect, device number 5 [ 116.401434][ T5329] squashfs image failed sanity check [ 117.349480][ T5343] loop3: detected capacity change from 0 to 8 [ 117.386488][ T5343] squashfs image failed sanity check [ 117.390371][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 117.425634][ T5348] loop1: detected capacity change from 0 to 1024 [ 117.495060][ T5348] hfsplus: unable to parse mount options [ 117.646907][ T5356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.582'. [ 118.340781][ T26] audit: type=1800 audit(1719891351.191:16): pid=5369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.586" name="file0" dev="sda1" ino=1973 res=0 errno=0 [ 118.605052][ T5378] loop2: detected capacity change from 0 to 256 [ 118.985096][ T5378] FAT-fs (loop2): Directory bread(block 64) failed [ 119.001311][ T5176] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.157657][ T5378] FAT-fs (loop2): Directory bread(block 65) failed [ 119.252585][ T5378] FAT-fs (loop2): Directory bread(block 66) failed [ 119.259166][ T5378] FAT-fs (loop2): Directory bread(block 67) failed [ 119.331864][ T5378] FAT-fs (loop2): Directory bread(block 68) failed [ 119.338439][ T5378] FAT-fs (loop2): Directory bread(block 69) failed [ 119.345264][ T5378] FAT-fs (loop2): Directory bread(block 70) failed [ 119.351859][ T5378] FAT-fs (loop2): Directory bread(block 71) failed [ 119.358479][ T5378] FAT-fs (loop2): Directory bread(block 72) failed [ 119.365142][ T5378] FAT-fs (loop2): Directory bread(block 73) failed [ 119.391511][ T5176] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.420624][ T5176] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.457551][ T26] audit: type=1800 audit(1719891352.311:17): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.591" name="file1" dev="sda1" ino=1969 res=0 errno=0 [ 119.479128][ T5176] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.509022][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.546696][ T5176] usb 1-1: config 0 descriptor?? [ 119.573797][ T26] audit: type=1800 audit(1719891352.381:18): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.591" name="file1" dev="sda1" ino=1969 res=0 errno=0 [ 119.602487][ T5176] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 119.646673][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 119.656065][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 119.703286][ T26] audit: type=1800 audit(1719891352.381:19): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.591" name="file2" dev="sda1" ino=1970 res=0 errno=0 [ 119.810372][ T26] audit: type=1800 audit(1719891352.411:20): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.591" name="file2" dev="sda1" ino=1970 res=0 errno=0 [ 119.832934][ T5176] usb 1-1: USB disconnect, device number 6 [ 121.988270][ T5426] loop2: detected capacity change from 0 to 1024 [ 122.038038][ T5430] loop0: detected capacity change from 0 to 16 [ 122.046151][ T5426] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 122.066817][ T5431] Cannot find add_set index 0 as target [ 122.093001][ T5426] EXT4-fs (loop2): barriers disabled [ 122.101306][ T5426] JBD2: no valid journal superblock found [ 122.105763][ T5430] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 122.107032][ T5426] EXT4-fs (loop2): error loading journal [ 123.358210][ T26] audit: type=1800 audit(1719891356.211:21): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.611" name="file1" dev="sda1" ino=1972 res=0 errno=0 [ 123.382770][ T26] audit: type=1800 audit(1719891356.241:22): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.611" name="file1" dev="sda1" ino=1972 res=0 errno=0 [ 123.426238][ T26] audit: type=1800 audit(1719891356.271:23): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.611" name="file2" dev="sda1" ino=1973 res=0 errno=0 [ 123.468687][ T26] audit: type=1800 audit(1719891356.271:24): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.611" name="file2" dev="sda1" ino=1973 res=0 errno=0 [ 123.518196][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 123.527371][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 123.621213][ T936] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.001271][ T936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.041030][ T936] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.101303][ T936] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.134492][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.166534][ T936] usb 2-1: config 0 descriptor?? [ 124.233241][ T936] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 124.264927][ T5462] loop3: detected capacity change from 0 to 512 [ 124.293824][ T5462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.346394][ T5462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 124.382404][ T5462] System zones: 1-12 [ 124.420148][ T5440] loop0: detected capacity change from 0 to 40427 [ 124.432296][ T5440] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 124.441207][ T5440] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.441256][ T936] usb 2-1: USB disconnect, device number 3 [ 124.462464][ T5462] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.499223][ T5440] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.508814][ T5462] EXT4-fs (loop3): 1 truncate cleaned up [ 124.520768][ T5462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.636826][ T5440] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 124.656978][ T5440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.731355][ T5462] loop3: detected capacity change from 512 to 64 [ 124.750408][ T5479] syz.3.617: attempt to access beyond end of device [ 124.750408][ T5479] loop3: rw=2049, sector=76, nr_sectors = 32 limit=64 [ 125.028317][ T5479] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 38) [ 125.161332][ T153] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.224914][ T5479] Buffer I/O error on device loop3, logical block 38 [ 125.231922][ T5479] Buffer I/O error on device loop3, logical block 39 [ 125.238613][ T5479] Buffer I/O error on device loop3, logical block 40 [ 125.245312][ T5479] Buffer I/O error on device loop3, logical block 41 [ 125.481266][ T153] usb 1-1: Using ep0 maxpacket: 16 [ 125.492345][ T5479] Buffer I/O error on device loop3, logical block 42 [ 125.499064][ T5479] Buffer I/O error on device loop3, logical block 43 [ 125.505746][ T5479] Buffer I/O error on device loop3, logical block 44 [ 125.512424][ T5479] Buffer I/O error on device loop3, logical block 45 [ 125.519350][ T5479] Buffer I/O error on device loop3, logical block 46 [ 125.526043][ T5479] Buffer I/O error on device loop3, logical block 47 [ 125.571762][ T5479] syz.3.617: attempt to access beyond end of device [ 125.571762][ T5479] loop3: rw=2049, sector=418, nr_sectors = 32 limit=64 [ 125.585341][ T5479] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 209) [ 125.606482][ T5479] syz.3.617: attempt to access beyond end of device [ 125.606482][ T5479] loop3: rw=2049, sector=130, nr_sectors = 64 limit=64 [ 125.620840][ T5479] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 65) [ 125.706472][ T3556] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 125.720650][ T3556] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 125.734494][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 125.804573][ T3556] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 125.818240][ T153] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 125.827501][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.838664][ T3556] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 125.863863][ T153] usb 1-1: config 0 descriptor?? [ 125.877142][ T3556] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 125.893057][ T3556] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 125.909373][ T3556] EXT4-fs warning (device loop3): ext4_empty_dir:3120: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 126.521516][ T153] usb 1-1: can't set config #0, error -71 [ 126.535574][ T153] usb 1-1: USB disconnect, device number 7 [ 127.240142][ T5507] input: syz1 as /devices/virtual/input/input6 [ 127.275712][ T3556] EXT4-fs (loop3): unmounting filesystem. [ 127.281677][ T936] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 127.367861][ T3617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.514968][ T3617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.561058][ T153] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.690489][ T5519] loop4: detected capacity change from 0 to 1024 [ 127.713893][ T5519] hfsplus: unable to parse mount options [ 127.747220][ T3617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.781773][ T936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 127.798861][ T936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 127.979024][ T3545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.990905][ T3545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.000606][ T3545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.016256][ T3545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.028039][ T3545] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.037497][ T3545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.113658][ T936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 128.221692][ T936] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.282014][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.311318][ T5499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.328493][ T5499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.385342][ T3617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.466601][ T153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.496614][ T153] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.512470][ T5530] loop0: detected capacity change from 0 to 512 [ 128.531833][ T5530] EXT4-fs (loop0): invalid inodes per group: 0 [ 128.531833][ T5530] [ 128.547608][ T153] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.566261][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.617316][ T153] usb 2-1: config 0 descriptor?? [ 128.664705][ T936] usb 3-1: USB disconnect, device number 6 [ 128.683171][ T153] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 128.717185][ T5521] chnl_net:caif_netlink_parms(): no params data found [ 128.889984][ T5177] usb 2-1: USB disconnect, device number 4 [ 128.964403][ T5521] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.971756][ T5521] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.979883][ T5521] device bridge_slave_0 entered promiscuous mode [ 128.989305][ T5521] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.998632][ T5521] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.009607][ T5521] device bridge_slave_1 entered promiscuous mode [ 129.538103][ T5521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.577716][ T5521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.631099][ T5549] loop4: detected capacity change from 0 to 8 [ 129.641216][ T5549] squashfs image failed sanity check [ 129.842776][ T5521] team0: Port device team_slave_0 added [ 129.882335][ T5521] team0: Port device team_slave_1 added [ 130.312304][ T3545] Bluetooth: hci4: command tx timeout [ 130.559036][ T5521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.566671][ T5521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.593159][ T5521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.775750][ T5521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.804424][ T5521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.249051][ T5563] 9pnet_virtio: no channels available for device [ 131.265871][ T5521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.458062][ T5571] loop4: detected capacity change from 0 to 512 [ 131.507547][ T5571] EXT4-fs (loop4): 1 truncate cleaned up [ 131.513391][ T5571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.528645][ T5521] device hsr_slave_0 entered promiscuous mode [ 131.536669][ T5521] device hsr_slave_1 entered promiscuous mode [ 131.543933][ T5521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.551596][ T5521] Cannot create hsr debugfs directory [ 131.562923][ T3551] EXT4-fs (loop4): unmounting filesystem. [ 131.691333][ T936] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.738285][ T3617] device hsr_slave_0 left promiscuous mode [ 131.779517][ T1170] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.933038][ T3617] device hsr_slave_1 left promiscuous mode [ 131.998754][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.026069][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.079331][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.152011][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.181691][ T936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.264649][ T3617] device bridge_slave_1 left promiscuous mode [ 132.274824][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.282349][ T936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.296698][ T3617] device bridge_slave_0 left promiscuous mode [ 132.303662][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.332635][ T3617] device veth1_macvtap left promiscuous mode [ 132.339941][ T3617] device veth0_macvtap left promiscuous mode [ 132.347228][ T3617] device veth1_vlan left promiscuous mode [ 132.354337][ T3617] device veth0_vlan left promiscuous mode [ 132.361401][ T1170] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.372251][ T3545] Bluetooth: hci4: command tx timeout [ 132.378809][ T1170] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.392147][ T936] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.401364][ T1170] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.410828][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.421067][ T1170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.429123][ T936] usb 2-1: SerialNumber: syz [ 132.438879][ T1170] usb 3-1: config 0 descriptor?? [ 132.492917][ T1170] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 132.702414][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.708844][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.713117][ T936] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 132.849883][ T936] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 132.866395][ T936] usb 2-1: USB disconnect, device number 5 [ 133.993438][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 134.121833][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 134.165466][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.217953][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.502216][ T3545] Bluetooth: hci4: command tx timeout [ 135.031977][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 135.216213][ T3617] bond0 (unregistering): Released all slaves [ 135.296684][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 135.302885][ T3567] usb 3-1: USB disconnect, device number 7 [ 135.480596][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'. [ 135.529888][ T5622] loop2: detected capacity change from 0 to 512 [ 135.595703][ T5622] EXT4-fs (loop2): 1 truncate cleaned up [ 135.602404][ T5622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.738766][ T3552] EXT4-fs (loop2): unmounting filesystem. [ 135.859578][ T5637] sd 0:0:1:0: device reset [ 135.985443][ T5521] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.052450][ T1170] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.053456][ T5521] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.103673][ T5521] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.161266][ T5521] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.527616][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 136.531323][ T3562] Bluetooth: hci4: command tx timeout [ 136.551564][ T1170] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.612641][ T1170] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.689195][ T1170] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.710146][ T1170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.735922][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 136.746195][ T1170] usb 2-1: config 0 descriptor?? [ 136.768423][ T5521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.792289][ T1170] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 136.817197][ T5521] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.841464][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.861551][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.901112][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.913910][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.931538][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.938688][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.967768][ T5659] loop4: detected capacity change from 0 to 512 [ 136.971215][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.987600][ T5659] EXT4-fs (loop4): 1 truncate cleaned up [ 136.999257][ T5659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.013654][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.022476][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.030547][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.040893][ T3551] EXT4-fs (loop4): unmounting filesystem. [ 137.059080][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.096080][ T5177] usb 2-1: USB disconnect, device number 6 [ 137.104767][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.116073][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.126408][ T5665] sd 0:0:1:0: device reset [ 137.132598][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.152961][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.172159][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.188968][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.223329][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.234761][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.246310][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.259249][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.279923][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.310146][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.688062][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 137.747086][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.760583][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.787249][ T5521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.820178][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.829967][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.874320][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.889982][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.913434][ T5521] device veth0_vlan entered promiscuous mode [ 137.933593][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.948972][ T5686] ptrace attach of "./syz-executor exec"[3552] was attempted by "./syz-executor exec"[5686] [ 137.960322][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.984200][ T5521] device veth1_vlan entered promiscuous mode [ 138.030460][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.054271][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.080716][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.108679][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.135212][ T5521] device veth0_macvtap entered promiscuous mode [ 138.169209][ T5521] device veth1_macvtap entered promiscuous mode [ 138.305430][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.477054][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.637154][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.717929][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.749924][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.771166][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.791318][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.881036][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.921265][ T5521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.931444][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.942011][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.952163][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.963232][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.015295][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.542191][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.677174][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.687902][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.700329][ T5521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.708415][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.729202][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.761868][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.774711][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.788658][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.798335][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.810235][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 139.822641][ T5521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.838879][ T5521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.849549][ T5521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.859070][ T5521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.066285][ T3890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.097134][ T3890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.121604][ T3891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.141446][ T3891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.141601][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.159953][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.193795][ T5730] Bluetooth: MGMT ver 1.22 [ 140.226530][ T3625] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.197602][ T3567] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.381240][ T3625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.593499][ T3625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.622960][ T3567] usb 2-1: Using ep0 maxpacket: 16 [ 141.719755][ T3625] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 141.736005][ T3625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.759610][ T3625] usb 3-1: config 0 descriptor?? [ 141.811598][ T3567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 141.841133][ T3567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 141.854556][ T3567] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 141.873238][ T3567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.883286][ T3567] usb 2-1: config 0 descriptor?? [ 142.158411][ T5773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.723'. [ 142.200120][ T5773] loop3: detected capacity change from 0 to 512 [ 142.221297][ T5773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.312225][ T3545] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.318716][ T3562] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 142.502264][ T5773] EXT4-fs (loop3): 1 truncate cleaned up [ 142.508001][ T5773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.894848][ T5773] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.723: corrupted in-inode xattr [ 142.910342][ T5773] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1745: inode #15: comm syz.3.723: unable to update i_inline_off [ 142.941088][ T26] audit: type=1800 audit(1719891375.781:25): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.723" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 142.954515][ T5773] syz.3.723 (5773) used greatest stack depth: 19104 bytes left [ 142.969782][ T5521] EXT4-fs (loop3): unmounting filesystem. [ 143.001097][ T3625] usbhid 3-1:0.0: can't add hid device: -71 [ 143.007165][ T3625] usbhid: probe of 3-1:0.0 failed with error -71 [ 143.022676][ T3625] usb 3-1: USB disconnect, device number 8 [ 143.044442][ T5734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.055630][ T5734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.084246][ T3567] hid (null): unknown global tag 0xe [ 143.092760][ T3567] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 143.102143][ T3567] hid-generic 0003:0158:0100.0002: unexpected long global item [ 143.110642][ T3567] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 143.249089][ T5789] syz.0.730[5789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.249193][ T5789] syz.0.730[5789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.289208][ T22] usb 2-1: USB disconnect, device number 7 [ 143.764464][ T5800] device pim6reg1 entered promiscuous mode [ 144.055489][ T5806] syz.4.736[5806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.055586][ T5806] syz.4.736[5806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.387908][ T5823] mkiss: ax0: crc mode is auto. [ 144.527331][ T5829] loop4: detected capacity change from 0 to 256 [ 144.625881][ T5829] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x19a2be85, utbl_chksum : 0xe619d30d) [ 144.937923][ T5823] mkiss: ax0: crc mode is auto. [ 145.215446][ T5835] loop0: detected capacity change from 0 to 128 [ 145.296874][ T5835] VFS: could not find a valid V7 on loop0. [ 145.968087][ T5851] sctp: [Deprecated]: syz.2.751 (pid 5851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.968087][ T5851] Use struct sctp_sack_info instead [ 146.594191][ T5858] afs: Unknown parameter 'd' [ 146.608613][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 146.645778][ T5859] loop2: detected capacity change from 0 to 512 [ 146.707657][ T5859] EXT4-fs (sda1): re-mounted. Quota mode: journalled. [ 147.807870][ T5875] loop0: detected capacity change from 0 to 256 [ 147.886952][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 147.903704][ T5877] loop1: detected capacity change from 0 to 512 [ 148.474124][ T5877] EXT4-fs (sda1): re-mounted. Quota mode: journalled. [ 148.650771][ T5880] loop2: detected capacity change from 0 to 1024 [ 148.732597][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.886462][ T5880] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 148.953882][ T5890] loop3: detected capacity change from 0 to 1024 [ 148.986630][ T5880] loop2: detected capacity change from 0 to 1024 [ 149.047483][ T5890] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 149.093845][ T5890] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.327387][ T5890] EXT4-fs error (device loop3): ext4_free_blocks:6213: comm syz.3.765: Freeing blocks not in datazone - block = 0, count = 4096 [ 149.583312][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 149.645696][ T5901] loop1: detected capacity change from 0 to 512 [ 150.306321][ T26] audit: type=1326 audit(1719891382.261:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf82975b99 code=0x7ffc0000 [ 150.358840][ T5901] EXT4-fs (sda1): re-mounted. Quota mode: journalled. [ 150.570471][ T26] audit: type=1326 audit(1719891382.261:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf82975b99 code=0x7ffc0000 [ 150.593247][ T5890] EXT4-fs (loop3): 1 orphan inode deleted [ 150.599004][ T5890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 150.679493][ T26] audit: type=1326 audit(1719891382.271:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf82975b99 code=0x7ffc0000 [ 150.726490][ T5890] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.765: path /root/syzkaller.BCFJdw/16/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 150.771579][ T26] audit: type=1326 audit(1719891382.271:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf82975b99 code=0x7ffc0000 [ 150.795128][ T26] audit: type=1326 audit(1719891382.271:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf82975b99 code=0x7ffc0000 [ 150.796606][ T5890] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz.3.765: path /root/syzkaller.BCFJdw/16/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 150.866416][ T26] audit: type=1326 audit(1719891382.271:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf829745d0 code=0x7ffc0000 [ 150.895635][ T26] audit: type=1326 audit(1719891382.271:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdf82977327 code=0x7ffc0000 [ 150.939004][ T26] audit: type=1326 audit(1719891382.271:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf82975b99 code=0x7ffc0000 [ 150.969267][ T26] audit: type=1326 audit(1719891383.151:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdf82977327 code=0x7ffc0000 [ 150.991506][ T26] audit: type=1326 audit(1719891383.151:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf829748ca code=0x7ffc0000 [ 151.025084][ T3617] hfsplus: b-tree write err: -5, ino 4 [ 151.047595][ T5521] EXT4-fs (loop3): unmounting filesystem. [ 152.396780][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 152.459229][ T5934] loop3: detected capacity change from 0 to 512 [ 152.466599][ T5934] EXT4-fs (sda1): re-mounted. Quota mode: journalled. [ 152.813558][ T5914] loop2: detected capacity change from 0 to 32768 [ 153.050173][ T5914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.769 (5914) [ 153.094773][ T5914] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.106584][ T5914] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 153.115875][ T5914] BTRFS info (device loop2): using free space tree [ 153.168962][ T5914] BTRFS info (device loop2): enabling ssd optimizations [ 153.529683][ T5963] loop0: detected capacity change from 0 to 512 [ 154.162184][ T5963] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.194314][ T5962] netlink: 44 bytes leftover after parsing attributes in process `syz.0.779'. [ 154.210180][ T5931] loop4: detected capacity change from 0 to 32768 [ 154.222335][ T5963] EXT4-fs (loop0): 1 truncate cleaned up [ 154.228005][ T5963] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 154.264370][ T5960] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.779: corrupted in-inode xattr [ 154.282398][ T5960] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1745: inode #15: comm syz.0.779: unable to update i_inline_off [ 154.299908][ T5960] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #15: comm syz.0.779: corrupted in-inode xattr [ 154.314737][ T5960] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.779: corrupted in-inode xattr [ 154.345737][ T5931] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 154.363177][ T5931] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 154.386374][ T3552] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.397334][ T5968] loop1: detected capacity change from 0 to 256 [ 154.433735][ T5931] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 154.477105][ T3592] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.496898][ T4480] EXT4-fs (loop0): unmounting filesystem. [ 154.831262][ T3592] usb 4-1: Using ep0 maxpacket: 32 [ 154.897911][ T5931] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 155.150068][ T3592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 155.175610][ T3592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 155.321348][ T5980] loop2: detected capacity change from 0 to 128 [ 155.341278][ T3592] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 155.352796][ T3592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.361131][ T3592] usb 4-1: Product: syz [ 155.365495][ T3592] usb 4-1: Manufacturer: syz [ 155.374124][ T3592] usb 4-1: SerialNumber: syz [ 155.384589][ T3592] usb 4-1: config 0 descriptor?? [ 156.887478][ T3592] usb 4-1: USB disconnect, device number 2 [ 157.616191][ T3562] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 159.661329][ T3545] Bluetooth: hci4: command tx timeout [ 159.670467][ T6035] loop2: detected capacity change from 0 to 256 [ 159.710484][ T6036] mkiss: ax0: crc mode is auto. [ 159.906693][ T6040] mkiss: ax0: crc mode is auto. [ 159.937934][ T6036] loop0: detected capacity change from 0 to 128 [ 159.953930][ T6036] VFS: could not find a valid V7 on loop0. [ 160.949158][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 161.010639][ T6066] loop4: detected capacity change from 0 to 512 [ 161.018454][ T6066] EXT4-fs (sda1): re-mounted. Quota mode: journalled. [ 161.849600][ T6075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.812'. [ 163.014807][ T6111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.828'. [ 164.979259][ T6130] loop2: detected capacity change from 0 to 256 [ 165.249581][ T6108] loop0: detected capacity change from 0 to 40427 [ 166.482784][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 166.969034][ T6155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.840'. [ 167.151794][ T6164] sctp: [Deprecated]: syz.2.846 (pid 6164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.151794][ T6164] Use struct sctp_sack_info instead [ 168.370780][ T6187] netlink: 32 bytes leftover after parsing attributes in process `syz.3.858'. [ 168.578710][ T6202] sctp: [Deprecated]: syz.3.861 (pid 6202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.578710][ T6202] Use struct sctp_sack_info instead [ 168.719204][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 169.392644][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 170.414045][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.871'. [ 170.465574][ T6236] netlink: 'syz.0.873': attribute type 8 has an invalid length. [ 170.611276][ T3545] Bluetooth: hci1: command 0x0406 tx timeout [ 170.611481][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 170.617496][ T3545] Bluetooth: hci3: command 0x0406 tx timeout [ 171.762774][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 173.917841][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.886'. [ 175.744867][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 176.599879][ T6319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.898'. [ 178.802454][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.912'. [ 179.131695][ T5521] [ 179.134054][ T5521] ====================================================== [ 179.141072][ T5521] WARNING: possible circular locking dependency detected [ 179.148087][ T5521] 6.1.96-syzkaller #0 Not tainted [ 179.153108][ T5521] ------------------------------------------------------ [ 179.160122][ T5521] syz-executor/5521 is trying to acquire lock: [ 179.166276][ T5521] ffff88807e90c3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x213/0x760 [ 179.177543][ T5521] [ 179.177543][ T5521] but task is already holding lock: [ 179.184936][ T5521] ffff888060ab8400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0 [ 179.194633][ T5521] [ 179.194633][ T5521] which lock already depends on the new lock. [ 179.194633][ T5521] [ 179.205047][ T5521] [ 179.205047][ T5521] the existing dependency chain (in reverse order) is: [ 179.214073][ T5521] [ 179.214073][ T5521] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 179.222704][ T5521] lock_acquire+0x1f8/0x5a0 [ 179.227747][ T5521] down_read+0xad/0xa30 [ 179.232444][ T5521] ext4_bmap+0x4b/0x410 [ 179.237132][ T5521] bmap+0xa1/0xd0 [ 179.241297][ T5521] jbd2_journal_flush+0x5b5/0xc40 [ 179.246885][ T5521] ext4_ioctl+0x3986/0x5f60 [ 179.251928][ T5521] __se_sys_ioctl+0xf1/0x160 [ 179.257049][ T5521] do_syscall_64+0x3b/0xb0 [ 179.261998][ T5521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.268422][ T5521] [ 179.268422][ T5521] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 179.277216][ T5521] validate_chain+0x1661/0x5950 [ 179.282617][ T5521] __lock_acquire+0x125b/0x1f80 [ 179.288000][ T5521] lock_acquire+0x1f8/0x5a0 [ 179.293037][ T5521] mutex_lock_io_nested+0x134/0xab0 [ 179.298758][ T5521] __jbd2_log_wait_for_space+0x213/0x760 [ 179.304920][ T5521] start_this_handle+0x1040/0x21b0 [ 179.310554][ T5521] jbd2__journal_start+0x2d1/0x5c0 [ 179.316187][ T5521] __ext4_journal_start_sb+0x19b/0x410 [ 179.322172][ T5521] __ext4_unlink+0x412/0xba0 [ 179.327285][ T5521] ext4_unlink+0x1d5/0x670 [ 179.332220][ T5521] vfs_unlink+0x359/0x5f0 [ 179.337072][ T5521] do_unlinkat+0x4a5/0x820 [ 179.342011][ T5521] __x64_sys_unlink+0x45/0x50 [ 179.347213][ T5521] do_syscall_64+0x3b/0xb0 [ 179.352157][ T5521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.358578][ T5521] [ 179.358578][ T5521] other info that might help us debug this: [ 179.358578][ T5521] [ 179.368809][ T5521] Possible unsafe locking scenario: [ 179.368809][ T5521] [ 179.376262][ T5521] CPU0 CPU1 [ 179.381626][ T5521] ---- ---- [ 179.386989][ T5521] lock(&sb->s_type->i_mutex_key#8); [ 179.392376][ T5521] lock(&journal->j_checkpoint_mutex); [ 179.400449][ T5521] lock(&sb->s_type->i_mutex_key#8); [ 179.408356][ T5521] lock(&journal->j_checkpoint_mutex); [ 179.413909][ T5521] [ 179.413909][ T5521] *** DEADLOCK *** [ 179.413909][ T5521] [ 179.422051][ T5521] 3 locks held by syz-executor/5521: [ 179.427333][ T5521] #0: ffff88807e908460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 179.436497][ T5521] #1: ffff888055676850 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x266/0x820 [ 179.446793][ T5521] #2: ffff888060ab8400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0 [ 179.456912][ T5521] [ 179.456912][ T5521] stack backtrace: [ 179.462804][ T5521] CPU: 0 PID: 5521 Comm: syz-executor Not tainted 6.1.96-syzkaller #0 [ 179.470959][ T5521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 179.481189][ T5521] Call Trace: [ 179.484469][ T5521] [ 179.487404][ T5521] dump_stack_lvl+0x1e3/0x2cb [ 179.492102][ T5521] ? nf_tcp_handle_invalid+0x642/0x642 [ 179.497581][ T5521] ? print_circular_bug+0x12b/0x1a0 [ 179.502786][ T5521] check_noncircular+0x2fa/0x3b0 [ 179.507733][ T5521] ? add_chain_block+0x850/0x850 [ 179.512686][ T5521] ? queued_spin_lock_slowpath+0x42/0x50 [ 179.518328][ T5521] ? lockdep_lock+0x1a7/0x2a0 [ 179.523020][ T5521] ? _find_first_zero_bit+0xd0/0x100 [ 179.528320][ T5521] validate_chain+0x1661/0x5950 [ 179.533195][ T5521] ? validate_chain+0x112/0x5950 [ 179.538149][ T5521] ? validate_chain+0x112/0x5950 [ 179.543100][ T5521] ? reacquire_held_locks+0x660/0x660 [ 179.548486][ T5521] ? reacquire_held_locks+0x660/0x660 [ 179.553887][ T5521] ? reacquire_held_locks+0x660/0x660 [ 179.559271][ T5521] ? __lock_acquire+0x125b/0x1f80 [ 179.564311][ T5521] ? reacquire_held_locks+0x660/0x660 [ 179.569697][ T5521] ? reacquire_held_locks+0x660/0x660 [ 179.575085][ T5521] ? mark_lock+0x9a/0x340 [ 179.579424][ T5521] __lock_acquire+0x125b/0x1f80 [ 179.584293][ T5521] lock_acquire+0x1f8/0x5a0 [ 179.588807][ T5521] ? __jbd2_log_wait_for_space+0x213/0x760 [ 179.594628][ T5521] ? __jbd2_log_wait_for_space+0x213/0x760 [ 179.600445][ T5521] ? read_lock_is_recursive+0x10/0x10 [ 179.605832][ T5521] ? __might_sleep+0xb0/0xb0 [ 179.610436][ T5521] ? is_bpf_text_address+0x22/0x2a0 [ 179.615653][ T5521] ? __jbd2_log_wait_for_space+0x213/0x760 [ 179.621475][ T5521] mutex_lock_io_nested+0x134/0xab0 [ 179.626686][ T5521] ? __jbd2_log_wait_for_space+0x213/0x760 [ 179.632507][ T5521] ? __jbd2_log_wait_for_space+0x207/0x760 [ 179.638326][ T5521] ? __lock_acquire+0x1f80/0x1f80 [ 179.643370][ T5521] ? mutex_lock_interruptible_nested+0x20/0x20 [ 179.649541][ T5521] __jbd2_log_wait_for_space+0x213/0x760 [ 179.655192][ T5521] ? do_raw_write_lock+0x143/0x4e0 [ 179.660314][ T5521] ? jbd2_commit_block_csum_verify+0x4f0/0x4f0 [ 179.666480][ T5521] ? do_raw_read_unlock+0x70/0x70 [ 179.671516][ T5521] start_this_handle+0x1040/0x21b0 [ 179.676635][ T5521] ? jbd2__journal_start+0x144/0x5c0 [ 179.681937][ T5521] ? jbd2__journal_start+0x5c0/0x5c0 [ 179.687234][ T5521] ? __kasan_slab_alloc+0x65/0x70 [ 179.692261][ T5521] ? slab_post_alloc_hook+0x71/0x3a0 [ 179.697552][ T5521] ? rcu_is_watching+0x11/0xb0 [ 179.702319][ T5521] ? jbd2__journal_start+0x144/0x5c0 [ 179.707615][ T5521] jbd2__journal_start+0x2d1/0x5c0 [ 179.712738][ T5521] __ext4_journal_start_sb+0x19b/0x410 [ 179.718206][ T5521] __ext4_unlink+0x412/0xba0 [ 179.722805][ T5521] ? __ext4_read_dirblock+0x880/0x880 [ 179.728192][ T5521] ? rwsem_write_trylock+0x166/0x210 [ 179.733485][ T5521] ? inode_permission+0xf7/0x450 [ 179.738427][ T5521] ? clear_nonspinnable+0x60/0x60 [ 179.743462][ T5521] ext4_unlink+0x1d5/0x670 [ 179.747886][ T5521] vfs_unlink+0x359/0x5f0 [ 179.752229][ T5521] do_unlinkat+0x4a5/0x820 [ 179.756655][ T5521] ? fsnotify_link_count+0xf0/0xf0 [ 179.761782][ T5521] __x64_sys_unlink+0x45/0x50 [ 179.766477][ T5521] do_syscall_64+0x3b/0xb0 [ 179.770905][ T5521] ? clear_bhb_loop+0x45/0xa0 [ 179.775597][ T5521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.781503][ T5521] RIP: 0033:0x7fc77e3751e7 [ 179.785929][ T5521] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.805550][ T5521] RSP: 002b:00007ffe23ef1418 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 179.813971][ T5521] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc77e3751e7 [ 179.821951][ T5521] RDX: 00007ffe23ef1440 RSI: 00007ffe23ef14d0 RDI: 00007ffe23ef14d0 [ 179.829928][ T5521] RBP: 00007ffe23ef14d0 R08: 0000000000000000 R09: 0000000000000000 [ 179.837903][ T5521] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe23ef2580 [ 179.845881][ T5521] R13: 00007fc77e3e364a R14: 000000000002bb09 R15: 00007ffe23ef25c0 [ 179.853859][ T5521]