last executing test programs: 9.609791974s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a6", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB='\b'], 0x28}}, 0x0) 8.186636057s ago: executing program 2: r0 = socket(0x0, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}], 0x1, 0x0, 0x0) 7.294979823s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00'}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280), 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 6.867075506s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@empty, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000019000f0000000000000000000a"], 0x24}}, 0x0) 6.180362822s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 6.150329694s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a6", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB='\b'], 0x28}}, 0x0) 5.582457393s ago: executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138) 5.361694327s ago: executing program 1: clock_nanosleep(0x4, 0x0, &(0x7f0000001d40), 0x0) 5.355169765s ago: executing program 4: r0 = socket(0x0, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}], 0x1, 0x0, 0x0) 5.041904361s ago: executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x3, 0x2, @void}, 0x62) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) chdir(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x9000000, @private2, 0x4}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_user=&#@,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',func=FILE_CHECK,\x00'], 0x2, 0x9f4, &(0x7f0000001100)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fremovexattr(r6, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 4.818583299s ago: executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rtc(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 4.699576265s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)={0x0, 0x9, [@dev, @random="c7afd6239ca3", @dev, @remote, @remote, @remote, @empty, @broadcast, @local]}) 4.372776409s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00'}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280), 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 4.092197792s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)="a6", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 3.919670927s ago: executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002c00)="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", 0x869}], 0x1}, 0x0) read(r0, &(0x7f0000000b80)=""/4096, 0x1000) setsockopt$inet_group_source_req(r0, 0x0, 0x55, &(0x7f00000000c0)={0x9, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x104) 3.651302474s ago: executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002040)=""/207, 0xcf, 0x1) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x2020) 3.306990199s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}}, 0x0) 3.070743526s ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x3, 0x8}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f40)={{r2}, &(0x7f0000000ec0), &(0x7f0000000f00)='%pB \x00'}, 0x20) write$cgroup_type(r1, &(0x7f0000000140), 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r5}, 0x5e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r6) ioctl$TUNSETLINK(r0, 0x400454cd, 0x103) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r4) 3.025565165s ago: executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.72306425s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a6", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB='\b'], 0x28}}, 0x0) 2.574068636s ago: executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 2.145846356s ago: executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket(0x0, 0x3, 0x4) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[0x0]) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xff, &(0x7f0000000000)) socket(0x80000000000000a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="0e", 0xfffffdef}], 0x1}, 0x0) 1.963446132s ago: executing program 4: r0 = socket(0x28, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}], 0x1, 0x0, 0x0) 1.761627101s ago: executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rtc(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 1.196724736s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000001) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000dc0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES8, @ANYBLOB="2c6372626172726965722c6e6f621a32b86172726965722c8152e6342c9250ad646f6e745f6d65617375757365723d3b5e283a232c0000000000000000"], 0x1, 0x6da, &(0x7f0000000300)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000010140)='./file0\x00', 0x0, 0x30) splice(r4, &(0x7f0000000040)=0x100000001, r2, &(0x7f0000000240), 0x7, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000300)={@id, 0x40, 0x0, '\x00', @a}) 1.17568425s ago: executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000540)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @broadcast, @random="55dafbf97e8b", {}, @device_b}}, 0x1e) 1.072449924s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00'}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280), 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 893.402366ms ago: executing program 1: r0 = gettid() keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=r0], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x54f6, &(0x7f0000005800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) write$cgroup_subtree(r2, 0x0, 0x7ffffffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x809, &(0x7f00000004c0)=ANY=[], 0x10, 0x21a, &(0x7f0000000c80)="$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") r5 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[]}, 0x50) socket$inet6(0xa, 0x6, 0x0) 521.506691ms ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x2f) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0: bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) kernel console output (not intermixed with test programs): evsim netdevsim1 netdevsim2: renamed from eth2 [ 371.696570][ T5579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 371.761804][ T5577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 371.844545][ T5579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.083626][ T5635] loop2: detected capacity change from 0 to 16 [ 373.209306][ T5635] erofs: (device loop2): mounted with root inode @ nid 36. [ 373.810042][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.065241][ T4432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.076733][ T4432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.091678][ T4432] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.119871][ T4432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.140751][ T5557] veth0_vlan: entered promiscuous mode [ 374.163964][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.173415][ T4432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.188591][ T4432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.238102][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.292311][ T5557] veth1_vlan: entered promiscuous mode [ 374.343036][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.351045][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.498672][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.506560][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.534756][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.667745][ T5557] veth0_macvtap: entered promiscuous mode [ 374.709415][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.717349][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.732674][ T5557] veth1_macvtap: entered promiscuous mode [ 374.903376][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.917853][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.928216][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.938965][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.957355][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.010045][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.017978][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.203750][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.214651][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.224905][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.235694][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.251468][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.506902][ T5557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.516263][ T5557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.525496][ T5557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.534852][ T5557] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.309706][ T4432] Bluetooth: hci2: command tx timeout [ 376.513562][ T5636] chnl_net:caif_netlink_parms(): no params data found [ 378.086981][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.330745][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.341205][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.349226][ T5636] bridge_slave_0: entered allmulticast mode [ 378.359203][ T5636] bridge_slave_0: entered promiscuous mode [ 378.389838][ T4432] Bluetooth: hci2: command tx timeout [ 378.414804][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.423193][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.434253][ T5636] bridge_slave_1: entered allmulticast mode [ 378.444338][ T5636] bridge_slave_1: entered promiscuous mode [ 378.614718][ T3258] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.798614][ T3258] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.964669][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.001372][ T3258] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.059016][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.196628][ T3258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.419705][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.456005][ T5636] team0: Port device team_slave_0 added [ 379.546927][ T5636] team0: Port device team_slave_1 added [ 379.565861][ T5577] veth0_vlan: entered promiscuous mode [ 379.932022][ T5577] veth1_vlan: entered promiscuous mode [ 379.967995][ T3258] bridge_slave_1: left allmulticast mode [ 379.973949][ T3258] bridge_slave_1: left promiscuous mode [ 379.981827][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.024662][ T3258] bridge_slave_0: left allmulticast mode [ 380.031070][ T3258] bridge_slave_0: left promiscuous mode [ 380.038775][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.467543][ T4432] Bluetooth: hci2: command tx timeout [ 380.663880][ T3258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.723388][ T3258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.765106][ T3258] bond0 (unregistering): Released all slaves [ 380.798658][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.807306][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.833937][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.968914][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.976137][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.004875][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.356267][ T5670] 9pnet_fd: Insufficient options for proto=fd [ 381.383459][ T5577] veth0_macvtap: entered promiscuous mode [ 381.584748][ T5577] veth1_macvtap: entered promiscuous mode [ 381.887496][ T3258] hsr_slave_0: left promiscuous mode [ 381.915501][ T3258] hsr_slave_1: left promiscuous mode [ 381.937008][ T3258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.948986][ T3258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.971604][ T3258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.979559][ T3258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.039618][ T3258] veth1_macvtap: left promiscuous mode [ 382.045458][ T3258] veth0_macvtap: left promiscuous mode [ 382.053064][ T3258] veth1_vlan: left promiscuous mode [ 382.058767][ T3258] veth0_vlan: left promiscuous mode [ 382.548809][ T4432] Bluetooth: hci2: command tx timeout [ 382.908021][ T3258] team0 (unregistering): Port device team_slave_1 removed [ 382.971496][ T3258] team0 (unregistering): Port device team_slave_0 removed [ 383.364164][ T5579] veth0_vlan: entered promiscuous mode [ 383.444944][ T5636] hsr_slave_0: entered promiscuous mode [ 383.505699][ T5636] hsr_slave_1: entered promiscuous mode [ 383.578590][ T5636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.586609][ T5636] Cannot create hsr debugfs directory [ 383.831151][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.843590][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.854669][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.865524][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.882429][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.894495][ T5579] veth1_vlan: entered promiscuous mode [ 384.091007][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.101974][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.112731][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.123570][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.141985][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.331804][ T5577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.342357][ T5577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.351765][ T5577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.360969][ T5577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.619824][ T5579] veth0_macvtap: entered promiscuous mode [ 384.866673][ T5579] veth1_macvtap: entered promiscuous mode [ 384.890062][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.898206][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.298110][ T3975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.306319][ T3975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.422913][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.436530][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.448494][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.459312][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.469550][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.480369][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.498342][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.656004][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.666952][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.679003][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.690255][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.701609][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.712805][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.730363][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.958304][ T5579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.969168][ T5579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.978502][ T5579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.987812][ T5579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.077600][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 386.087668][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 386.228511][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.359083][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.436614][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.539096][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 388.030737][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.295604][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.491386][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.499539][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.516923][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.524594][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.019955][ T5699] loop4: detected capacity change from 0 to 1764 [ 389.457850][ T5699] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 391.219106][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 391.351745][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.015534][ T5636] veth0_vlan: entered promiscuous mode [ 392.159635][ T5636] veth1_vlan: entered promiscuous mode [ 392.552991][ T5636] veth0_macvtap: entered promiscuous mode [ 392.628489][ T5636] veth1_macvtap: entered promiscuous mode [ 392.822510][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.834275][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.844585][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.855421][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.866875][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.879151][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.889531][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.900522][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.916369][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.093081][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.104342][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.114826][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.125636][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.136128][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.147063][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.158009][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.169166][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.186707][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.266499][ T5688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.275868][ T5688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.343767][ T3772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.353011][ T3772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.412286][ T5636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.421647][ T5636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.431398][ T5636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.440835][ T5636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.507082][ T5744] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 395.079682][ T3258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.089027][ T3258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.439155][ T3723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.448302][ T3723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.797616][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 396.067271][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 396.228310][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.237822][ T5758] loop3: detected capacity change from 0 to 256 [ 396.239563][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.260606][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.273965][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 396.283426][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.354759][ T43] usb 3-1: config 0 descriptor?? [ 396.925735][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 396.933336][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 396.941050][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 396.948611][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 396.956016][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 396.971157][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 396.981357][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 396.989492][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 396.996916][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 397.004383][ T43] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 397.418891][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input7 [ 397.559609][ T43] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 397.647740][ T43] usb 3-1: USB disconnect, device number 2 [ 399.956882][ T3723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.966105][ T3723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.171554][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.179813][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.193564][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 401.573797][ T8] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 401.584843][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.631264][ T8] usb 1-1: config 0 descriptor?? [ 401.664899][ T5787] loop3: detected capacity change from 0 to 164 [ 402.194993][ T8] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 402.618617][ T8] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 402.722939][ T8] usb 1-1: USB disconnect, device number 4 [ 402.927400][ T29] audit: type=1326 audit(1718201214.780:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73af579 code=0x0 [ 403.118047][ T5796] binder: 5792:5796 ioctl c0306201 200011c0 returned -14 [ 403.438055][ T5130] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 403.708910][ T5130] usb 4-1: Using ep0 maxpacket: 8 [ 403.830819][ T5130] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.841075][ T5130] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.851137][ T5130] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 403.862735][ T5130] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 403.873119][ T5130] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.886437][ T5130] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.895873][ T5130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.048709][ T5130] usb 4-1: usb_control_msg returned -71 [ 405.063108][ T5130] usbtmc 4-1:16.0: can't read capabilities [ 405.138355][ T5130] usb 4-1: USB disconnect, device number 2 [ 405.678442][ T29] audit: type=1326 audit(1718201217.440:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 405.701396][ T29] audit: type=1326 audit(1718201217.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 405.724114][ T29] audit: type=1326 audit(1718201217.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 405.748383][ T29] audit: type=1326 audit(1718201217.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 405.775778][ T29] audit: type=1326 audit(1718201217.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 405.799806][ T29] audit: type=1326 audit(1718201217.500:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 405.822775][ T29] audit: type=1326 audit(1718201217.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 405.846766][ T29] audit: type=1326 audit(1718201217.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 405.870602][ T29] audit: type=1326 audit(1718201217.500:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf73af579 code=0x7ffc0000 [ 406.938914][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.948594][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 407.952571][ T5823] pim6reg1: entered promiscuous mode [ 407.958456][ T5823] pim6reg1: entered allmulticast mode [ 408.216624][ T5827] loop3: detected capacity change from 0 to 256 [ 408.515739][ T5827] FAT-fs (loop3): Directory bread(block 64) failed [ 408.522907][ T5827] FAT-fs (loop3): Directory bread(block 65) failed [ 408.529918][ T5827] FAT-fs (loop3): Directory bread(block 66) failed [ 408.542106][ T5827] FAT-fs (loop3): Directory bread(block 67) failed [ 408.568402][ T5827] FAT-fs (loop3): Directory bread(block 68) failed [ 408.575092][ T5827] FAT-fs (loop3): Directory bread(block 69) failed [ 408.583279][ T5827] FAT-fs (loop3): Directory bread(block 70) failed [ 408.590204][ T5827] FAT-fs (loop3): Directory bread(block 71) failed [ 408.597465][ T5827] FAT-fs (loop3): Directory bread(block 72) failed [ 408.597835][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.604159][ T5827] FAT-fs (loop3): Directory bread(block 73) failed [ 408.610891][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.869582][ T5827] syz-executor.3: attempt to access beyond end of device [ 408.869582][ T5827] loop3: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 408.884388][ T5827] syz-executor.3: attempt to access beyond end of device [ 408.884388][ T5827] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 408.967648][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 408.967729][ T29] audit: type=1800 audit(1718201220.760:14): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 412.353988][ T5840] loop4: detected capacity change from 0 to 4096 [ 414.159602][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 416.344149][ T5863] loop4: detected capacity change from 0 to 8192 [ 416.505446][ T5863] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.666864][ T5873] loop3: detected capacity change from 0 to 1024 [ 416.962831][ T5876] loop1: detected capacity change from 0 to 8 [ 417.146169][ T5863] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 417.155779][ T5863] FAT-fs (loop4): Filesystem has been set read-only [ 417.210733][ T5863] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 417.264440][ T5871] loop0: detected capacity change from 0 to 1764 [ 417.272044][ T5863] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 417.437068][ T3723] hfsplus: b-tree write err: -5, ino 4 [ 417.848430][ T5557] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 418.081265][ T5877] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 419.744410][ T5882] loop3: detected capacity change from 0 to 4096 [ 419.837285][ T5882] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 420.552447][ T5882] syz-executor.3 (5882) used greatest stack depth: 4920 bytes left [ 421.903663][ T3723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.117051][ T5889] loop3: detected capacity change from 0 to 64 [ 422.124284][ T3723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.267037][ T5889] hfs: unable to read volume bitmap [ 422.273121][ T5889] hfs: can't find a HFS filesystem on dev loop3 [ 422.280768][ T3723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.428619][ T3723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.786989][ T3723] bridge_slave_1: left allmulticast mode [ 422.793185][ T3723] bridge_slave_1: left promiscuous mode [ 422.800496][ T3723] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.858328][ T3723] bridge_slave_0: left allmulticast mode [ 422.864393][ T3723] bridge_slave_0: left promiscuous mode [ 422.878057][ T3723] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.812973][ T3723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.019818][ T3723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.115307][ T3723] bond0 (unregistering): Released all slaves [ 425.354653][ T5895] loop3: detected capacity change from 0 to 1024 [ 425.588662][ T3723] hsr_slave_0: left promiscuous mode [ 425.662549][ T3723] hsr_slave_1: left promiscuous mode [ 425.718403][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.726209][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.922679][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.930930][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.188621][ T3723] veth1_macvtap: left promiscuous mode [ 426.194695][ T3723] veth0_macvtap: left promiscuous mode [ 426.201005][ T3723] veth1_vlan: left promiscuous mode [ 426.206630][ T3723] veth0_vlan: left promiscuous mode [ 426.835009][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.849596][ T5080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.916024][ T5080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.993921][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.098845][ T5080] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 427.112618][ T3258] hfsplus: b-tree write err: -5, ino 4 [ 427.130972][ T5080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.951673][ T3723] team0 (unregistering): Port device team_slave_1 removed [ 428.088462][ T3723] team0 (unregistering): Port device team_slave_0 removed [ 429.191507][ T5080] Bluetooth: hci0: command tx timeout [ 429.403423][ T29] audit: type=1326 audit(1718201241.170:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73af579 code=0xffff0000 [ 430.735978][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 431.274773][ T5080] Bluetooth: hci0: command tx timeout [ 431.365612][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 431.425210][ T5920] team0: Device veth0_virt_wifi is up. Set it down before adding it as a team port [ 431.454817][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.572847][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.580891][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.589177][ T5901] bridge_slave_0: entered allmulticast mode [ 432.608775][ T5901] bridge_slave_0: entered promiscuous mode [ 432.877934][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.878577][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.879306][ T5901] bridge_slave_1: entered allmulticast mode [ 432.882964][ T5901] bridge_slave_1: entered promiscuous mode [ 433.132871][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.160583][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.348032][ T5080] Bluetooth: hci0: command tx timeout [ 433.380516][ T5901] team0: Port device team_slave_0 added [ 433.427528][ T5901] team0: Port device team_slave_1 added [ 433.607409][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.607463][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.607565][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.635403][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.635489][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.635647][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.933516][ T5901] hsr_slave_0: entered promiscuous mode [ 433.968661][ T5901] hsr_slave_1: entered promiscuous mode [ 435.438905][ T5080] Bluetooth: hci0: command tx timeout [ 435.840606][ T5901] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.931971][ T5901] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.009506][ T5901] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.128616][ T5901] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.435733][ T5931] loop2: detected capacity change from 0 to 1024 [ 436.808851][ T5934] hfsplus: found bad thread record in catalog [ 437.263499][ T5688] hfsplus: b-tree write err: -5, ino 4 [ 437.628529][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.781908][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.854103][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.861840][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.970201][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.978234][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.569426][ T5942] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 438.578851][ T5942] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 438.735967][ T5942] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 438.746382][ T5942] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 440.775128][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.147679][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.334141][ T5954] team0: Device geneve0 is up. Set it down before adding it as a team port [ 441.478826][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 442.167222][ T5901] veth0_vlan: entered promiscuous mode [ 442.314472][ T5901] veth1_vlan: entered promiscuous mode [ 442.793854][ T5901] veth0_macvtap: entered promiscuous mode [ 442.901358][ T5901] veth1_macvtap: entered promiscuous mode [ 443.290575][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.301877][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.312286][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.323082][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.333350][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.344151][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.355690][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.366875][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.387749][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.864848][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.875881][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.886134][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.896946][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.907276][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.918102][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.928781][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.939632][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.955671][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.456471][ T5901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.466520][ T5901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.478345][ T5901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.487484][ T5901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.331373][ T5976] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 445.340480][ T5976] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 445.603242][ T5976] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 445.611763][ T5976] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 445.737961][ T3258] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.902616][ T3258] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.083919][ T3258] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.288777][ T3258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.925485][ T3258] bridge_slave_1: left allmulticast mode [ 446.933625][ T3258] bridge_slave_1: left promiscuous mode [ 446.940986][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.069444][ T3258] bridge_slave_0: left allmulticast mode [ 447.075340][ T3258] bridge_slave_0: left promiscuous mode [ 447.081922][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.864048][ T3258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.883886][ T4432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.923250][ T3258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.951633][ T3258] bond0 (unregistering): Released all slaves [ 448.061458][ T5155] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 448.116058][ T4432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 448.130913][ T4432] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 448.155602][ T4432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 448.171104][ T4432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 448.182223][ T4432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 448.413384][ T5155] usb 4-1: device descriptor read/64, error -71 [ 448.727812][ T5155] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 449.120158][ T5155] usb 4-1: device descriptor read/64, error -71 [ 449.135154][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 449.250667][ T3258] hsr_slave_0: left promiscuous mode [ 449.260071][ T5155] usb usb4-port1: attempt power cycle [ 449.264826][ T3258] hsr_slave_1: left promiscuous mode [ 449.280752][ T3258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.281085][ T3258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.305043][ T3258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.305183][ T3258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.336918][ T3258] veth1_macvtap: left promiscuous mode [ 449.337191][ T3258] veth0_macvtap: left promiscuous mode [ 449.337889][ T3258] veth1_vlan: left promiscuous mode [ 449.338128][ T3258] veth0_vlan: left promiscuous mode [ 450.231551][ T5080] Bluetooth: hci2: command tx timeout [ 450.538963][ T3258] team0 (unregistering): Port device team_slave_1 removed [ 450.570111][ T3258] team0 (unregistering): Port device team_slave_0 removed [ 450.948764][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.680262][ T4432] Bluetooth: hci1: command 0x0406 tx timeout [ 452.175606][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 452.319022][ T5080] Bluetooth: hci2: command tx timeout [ 452.816027][ T6029] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 452.824668][ T6029] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 453.074585][ T6029] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 453.084567][ T6029] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 453.984311][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.984898][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.985495][ T5993] bridge_slave_0: entered allmulticast mode [ 453.991635][ T5993] bridge_slave_0: entered promiscuous mode [ 454.074137][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.074724][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.075403][ T5993] bridge_slave_1: entered allmulticast mode [ 454.079037][ T5993] bridge_slave_1: entered promiscuous mode [ 454.228272][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 454.359285][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.389545][ T5080] Bluetooth: hci2: command tx timeout [ 454.451924][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.005858][ T5993] team0: Port device team_slave_0 added [ 455.074103][ T5155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.074198][ T5155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.144120][ T5993] team0: Port device team_slave_1 added [ 455.373542][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.373614][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.373753][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.412227][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.412297][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.412404][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.511664][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.511758][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.883352][ T5993] hsr_slave_0: entered promiscuous mode [ 455.929097][ T5993] hsr_slave_1: entered promiscuous mode [ 455.975354][ T5993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.975444][ T5993] Cannot create hsr debugfs directory [ 456.008200][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 456.247463][ T8] usb 4-1: device descriptor read/64, error -71 [ 456.448644][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 456.483712][ T5080] Bluetooth: hci2: command tx timeout [ 456.550133][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 456.568556][ T6062] team0: Device xfrm0 is of different type [ 456.610683][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 456.807892][ T8] usb 4-1: device descriptor read/64, error -71 [ 456.955502][ T8] usb usb4-port1: attempt power cycle [ 457.199789][ T6068] loop1: detected capacity change from 0 to 64 [ 457.395756][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 457.529301][ T8] usb 4-1: device descriptor read/8, error -71 [ 457.880364][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 457.938829][ T5993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.039152][ T5993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.142636][ T5993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.228761][ T8] usb 4-1: device descriptor read/8, error -71 [ 458.236361][ T5993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.381318][ T8] usb usb4-port1: unable to enumerate USB device [ 458.408879][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 458.418904][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.537849][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.628076][ T6091] loop1: detected capacity change from 0 to 1024 [ 459.759651][ T6091] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 459.898738][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.113206][ T6091] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 460.171222][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.179199][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.210429][ T6091] EXT4-fs (loop1): orphan cleanup on readonly fs [ 460.227989][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.235821][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.301340][ T6091] EXT4-fs error (device loop1): ext4_free_blocks:6576: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 460.381318][ T6091] EXT4-fs (loop1): 1 orphan inode deleted [ 460.387705][ T6091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 460.653231][ T5993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.983273][ T5901] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.115914][ T6110] loop3: detected capacity change from 0 to 1024 [ 461.122082][ T6105] loop2: detected capacity change from 0 to 2048 [ 461.170634][ T6108] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 461.193619][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 461.213642][ T6105] udf: Unknown parameter 'ÿ' [ 461.505152][ T3258] hfsplus: b-tree write err: -5, ino 4 [ 462.690124][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.834772][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 463.027919][ T4504] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 463.281948][ T5993] veth0_vlan: entered promiscuous mode [ 463.315504][ T4504] usb 5-1: Using ep0 maxpacket: 16 [ 463.401507][ T5993] veth1_vlan: entered promiscuous mode [ 463.609926][ T4504] usb 5-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 463.619541][ T4504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.630773][ T4504] usb 5-1: Product: syz [ 463.635086][ T4504] usb 5-1: Manufacturer: syz [ 463.641259][ T4504] usb 5-1: SerialNumber: syz [ 463.672136][ T4504] usb 5-1: config 0 descriptor?? [ 463.754597][ T4504] sierra 5-1:0.0: Sierra USB modem converter detected [ 463.866216][ T5993] veth0_macvtap: entered promiscuous mode [ 463.946213][ T5993] veth1_macvtap: entered promiscuous mode [ 464.028641][ T4504] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 464.086756][ T4504] usb 5-1: USB disconnect, device number 2 [ 464.152333][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.163266][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.173762][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.184436][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.194467][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.205249][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.215320][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.226002][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.245829][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.269947][ T4504] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 464.280236][ T4504] sierra 5-1:0.0: device disconnected [ 464.422334][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.433301][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.448305][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.460152][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.472842][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.483927][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.493989][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.504641][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.518872][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.688443][ T5993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.698025][ T5993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.706941][ T5993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.716246][ T5993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.787902][ T6146] loop4: detected capacity change from 0 to 4096 [ 466.951269][ T4432] Bluetooth: hci5: command 0x0406 tx timeout [ 467.878457][ T5124] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 468.318707][ T5124] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.329436][ T5124] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 468.341637][ T5124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.369593][ T6156] team0: Device macsec0 is up. Set it down before adding it as a team port [ 468.375640][ T5124] usb 4-1: config 0 descriptor?? [ 468.420507][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 468.461961][ T6156] veth1_macvtap: left promiscuous mode [ 468.901236][ T5124] ath6kl: Failed to read usb control message: -71 [ 468.908216][ T5124] ath6kl: Unable to read the bmi data from the device: -71 [ 468.915706][ T5124] ath6kl: Unable to recv target info: -71 [ 468.972337][ T5124] ath6kl: Failed to init ath6kl core: -71 [ 468.982543][ T5124] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 469.135487][ T5124] usb 4-1: USB disconnect, device number 10 [ 470.033460][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.040365][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.509769][ T6171] loop4: detected capacity change from 0 to 128 [ 470.594743][ T6171] sysv_free_block: trying to free block not in datazone [ 470.603751][ T6171] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 471.023159][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.031391][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.365949][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.374182][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.882728][ T4504] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 472.167768][ T4504] usb 4-1: Using ep0 maxpacket: 16 [ 472.300952][ T6177] loop1: detected capacity change from 0 to 1764 [ 472.498159][ T4504] usb 4-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 472.507843][ T4504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.516025][ T4504] usb 4-1: Product: syz [ 472.520992][ T4504] usb 4-1: Manufacturer: syz [ 472.525858][ T4504] usb 4-1: SerialNumber: syz [ 472.675690][ T4504] usb 4-1: config 0 descriptor?? [ 472.736525][ T4504] sierra 4-1:0.0: Sierra USB modem converter detected [ 473.005377][ T4504] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 473.017363][ T6189] hsr_slave_0: left promiscuous mode [ 473.059773][ T4504] usb 4-1: USB disconnect, device number 11 [ 473.079244][ T6189] hsr_slave_1: left promiscuous mode [ 473.116398][ T4504] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 473.128099][ T4504] sierra 4-1:0.0: device disconnected [ 474.365260][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 475.829271][ T6207] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 475.837782][ T6207] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 476.684073][ T6210] loop4: detected capacity change from 0 to 256 [ 477.035849][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 477.074300][ T6210] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 477.187501][ T4432] Bluetooth: hci6: command 0x0406 tx timeout [ 477.666820][ T6217] loop0: detected capacity change from 0 to 128 [ 478.071575][ T5993] sysv_free_block: trying to free block not in datazone [ 478.079847][ T5993] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 483.817482][ T5131] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 484.078359][ T5131] usb 3-1: Using ep0 maxpacket: 16 [ 484.368670][ T5131] usb 3-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 484.378528][ T5131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.386921][ T5131] usb 3-1: Product: syz [ 484.391668][ T5131] usb 3-1: Manufacturer: syz [ 484.396657][ T5131] usb 3-1: SerialNumber: syz [ 484.473097][ T5131] usb 3-1: config 0 descriptor?? [ 484.544079][ T5131] sierra 3-1:0.0: Sierra USB modem converter detected [ 484.851479][ T5131] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 484.894906][ T5131] usb 3-1: USB disconnect, device number 3 [ 484.943294][ T5131] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 484.953615][ T5131] sierra 3-1:0.0: device disconnected [ 485.692990][ T6231] team0: Device veth0_to_bridge is up. Set it down before adding it as a team port [ 485.778600][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 485.887730][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.959380][ T6240] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 486.968238][ T6240] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 487.835715][ T6249] loop3: detected capacity change from 0 to 128 [ 487.944324][ T5579] sysv_free_block: trying to free block not in datazone [ 487.952496][ T5579] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 488.765923][ T6255] loop0: detected capacity change from 0 to 2048 [ 488.824826][ T6255] udf: Unknown parameter 'ÿ' [ 489.061824][ T6259] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 490.069644][ T782] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 490.358761][ T782] usb 5-1: Using ep0 maxpacket: 16 [ 490.648444][ T782] usb 5-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 490.663164][ T782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.672594][ T782] usb 5-1: Product: syz [ 490.676926][ T782] usb 5-1: Manufacturer: syz [ 490.681826][ T782] usb 5-1: SerialNumber: syz [ 490.779068][ T782] usb 5-1: config 0 descriptor?? [ 490.838798][ T782] sierra 5-1:0.0: Sierra USB modem converter detected [ 491.116823][ T782] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 491.148419][ T782] usb 5-1: USB disconnect, device number 3 [ 491.222237][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.247026][ T782] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 491.257376][ T782] sierra 5-1:0.0: device disconnected [ 491.896926][ T6273] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 491.905786][ T6273] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 492.685727][ T6279] loop3: detected capacity change from 0 to 128 [ 493.002973][ T5579] sysv_free_block: trying to free block not in datazone [ 493.011439][ T5579] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 495.143957][ T6299] team0: Device veth0_to_team is up. Set it down before adding it as a team port [ 495.179170][ T6303] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 495.188433][ T6303] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 495.238590][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 495.422720][ T6303] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 495.431687][ T6303] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 495.507417][ T6301] loop4: detected capacity change from 0 to 4096 [ 495.740870][ T6301] NILFS (loop4): invalid segment: Checksum error in segment payload [ 495.751482][ T6301] NILFS (loop4): trying rollback from an earlier position [ 495.845681][ T6301] NILFS (loop4): recovery complete [ 495.866266][ T6306] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 496.572871][ T5155] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 496.857693][ T5155] usb 4-1: Using ep0 maxpacket: 8 [ 496.998968][ T5155] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 497.012400][ T5155] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 497.026059][ T5155] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 497.173414][ T5155] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 497.181282][ T5155] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 497.193081][ T5155] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 497.328974][ T5155] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 497.336943][ T5155] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 497.349330][ T5155] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 497.397547][ T6316] loop4: detected capacity change from 0 to 128 [ 497.454341][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.454341][ T6316] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 497.469395][ T6316] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 497.478317][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.478317][ T6316] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 497.492775][ T6316] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 497.501948][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.501948][ T6316] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 497.516142][ T6316] Buffer I/O error on dev loop4, logical block 1157, async page read [ 497.532099][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.532099][ T6316] loop4: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 497.548359][ T6316] Buffer I/O error on dev loop4, logical block 3211264, async page read [ 497.557007][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.557007][ T6316] loop4: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 497.571576][ T6316] Buffer I/O error on dev loop4, logical block 8768635, async page read [ 497.580410][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.580410][ T6316] loop4: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 497.594964][ T6316] Buffer I/O error on dev loop4, logical block 13466417, async page read [ 497.603909][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.603909][ T6316] loop4: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 497.618429][ T6316] Buffer I/O error on dev loop4, logical block 209285, async page read [ 497.636067][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.636067][ T6316] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 497.652509][ T6316] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 497.661418][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.661418][ T6316] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 497.675831][ T6316] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 497.684746][ T6316] syz-executor.4: attempt to access beyond end of device [ 497.684746][ T6316] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 497.698815][ T6316] Buffer I/O error on dev loop4, logical block 1157, async page read [ 497.781432][ T29] audit: type=1800 audit(1718201309.570:16): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=2 res=0 errno=0 [ 497.938024][ T5155] usb 4-1: string descriptor 0 read error: -22 [ 497.945011][ T5155] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 497.954884][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.064041][ T5155] adutux 4-1:168.0: interrupt endpoints not found [ 498.240432][ T5557] sysv_free_block: trying to free block not in datazone [ 498.248768][ T5557] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 498.255376][ T782] usb 4-1: USB disconnect, device number 12 [ 500.451851][ T6323] loop4: detected capacity change from 0 to 1764 [ 500.520711][ T29] audit: type=1804 audit(1718201312.290:17): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2721706490/syzkaller.eYgHdp/16/bus" dev="sda1" ino=1965 res=1 errno=0 [ 501.458363][ T6335] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 501.466861][ T6335] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 501.562369][ T6337] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 501.570953][ T6337] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 501.902899][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.902690][ T6349] loop2: detected capacity change from 0 to 128 [ 502.925476][ T6349] bio_check_eod: 4 callbacks suppressed [ 502.925534][ T6349] syz-executor.2: attempt to access beyond end of device [ 502.925534][ T6349] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 502.953609][ T6349] buffer_io_error: 4 callbacks suppressed [ 502.953661][ T6349] Buffer I/O error on dev loop2, logical block 8767744, async page read [ 502.970093][ T6349] syz-executor.2: attempt to access beyond end of device [ 502.970093][ T6349] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 502.984569][ T6349] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 502.993418][ T6349] syz-executor.2: attempt to access beyond end of device [ 502.993418][ T6349] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 503.007472][ T6349] Buffer I/O error on dev loop2, logical block 1157, async page read [ 503.015730][ T6349] syz-executor.2: attempt to access beyond end of device [ 503.015730][ T6349] loop2: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 503.030498][ T6349] Buffer I/O error on dev loop2, logical block 3211264, async page read [ 503.039183][ T6349] syz-executor.2: attempt to access beyond end of device [ 503.039183][ T6349] loop2: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 503.058281][ T6349] Buffer I/O error on dev loop2, logical block 8768635, async page read [ 503.066803][ T6349] syz-executor.2: attempt to access beyond end of device [ 503.066803][ T6349] loop2: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 503.082408][ T6349] Buffer I/O error on dev loop2, logical block 13466417, async page read [ 503.091270][ T6349] syz-executor.2: attempt to access beyond end of device [ 503.091270][ T6349] loop2: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 503.105426][ T6349] Buffer I/O error on dev loop2, logical block 209285, async page read [ 503.115217][ T6349] syz-executor.2: attempt to access beyond end of device [ 503.115217][ T6349] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 503.129379][ T6349] Buffer I/O error on dev loop2, logical block 8767744, async page read [ 503.138520][ T6349] syz-executor.2: attempt to access beyond end of device [ 503.138520][ T6349] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 503.158612][ T6349] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 503.169206][ T6349] syz-executor.2: attempt to access beyond end of device [ 503.169206][ T6349] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 503.183228][ T6349] Buffer I/O error on dev loop2, logical block 1157, async page read [ 503.342807][ T29] audit: type=1800 audit(1718201315.060:18): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="/" dev="loop2" ino=2 res=0 errno=0 [ 503.706147][ T5518] sysv_free_block: trying to free block not in datazone [ 503.714675][ T5518] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 505.704629][ T6373] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 505.718641][ T6373] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 505.908815][ T6373] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 505.922976][ T6373] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 506.661422][ T6378] team0: Device geneve1 is up. Set it down before adding it as a team port [ 506.754731][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.564358][ T6386] loop3: detected capacity change from 0 to 128 [ 507.744321][ T29] audit: type=1800 audit(1718201319.470:19): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=2 res=0 errno=0 [ 507.884101][ T5579] sysv_free_block: trying to free block not in datazone [ 507.892906][ T5579] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 508.856354][ T6395] loop3: detected capacity change from 0 to 2048 [ 508.916848][ T6395] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 509.003124][ T6395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.312204][ T6406] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 510.325476][ T6406] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 510.401421][ T6407] bridge1: port 1(gretap1) entered blocking state [ 510.408764][ T6407] bridge1: port 1(gretap1) entered disabled state [ 510.415892][ T6407] gretap1: entered allmulticast mode [ 510.431143][ T6407] gretap1: entered promiscuous mode [ 510.496392][ T6406] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 510.505499][ T6406] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 511.076100][ T6409] loop2: detected capacity change from 0 to 128 [ 512.065804][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.530271][ T6419] loop0: detected capacity change from 0 to 128 [ 512.741181][ T5993] sysv_free_block: trying to free block not in datazone [ 512.751417][ T5993] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 514.120797][ T6440] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 514.130692][ T6440] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 514.256829][ T6440] bridge1: port 1(gretap1) entered blocking state [ 514.264273][ T6440] bridge1: port 1(gretap1) entered disabled state [ 514.271795][ T6440] gretap1: entered allmulticast mode [ 514.281008][ T6440] gretap1: entered promiscuous mode [ 514.286857][ T6439] loop1: detected capacity change from 0 to 2048 [ 514.354559][ T6440] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 514.364122][ T6440] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 514.383893][ T6439] udf: Unknown parameter 'ÿ' [ 514.500684][ T6444] tipc: Started in network mode [ 514.506077][ T6444] tipc: Node identity 2007ff, cluster identity 4711 [ 514.514199][ T6444] tipc: Node number set to 2099199 [ 514.649006][ T34] tipc: Subscription rejected, illegal request [ 516.179457][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.235499][ T6459] loop3: detected capacity change from 0 to 128 [ 516.327745][ T6457] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 516.373367][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.580391][ T5579] sysv_free_block: trying to free block not in datazone [ 516.590042][ T5579] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 519.006733][ T6475] fuse: Bad value for 'fd' [ 522.148162][ T6484] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 522.156679][ T6484] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 522.356882][ T6484] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 522.366127][ T6484] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 522.671336][ T6488] tipc: Started in network mode [ 522.676489][ T6488] tipc: Node identity 2007ff, cluster identity 4711 [ 522.683610][ T6488] tipc: Node number set to 2099199 [ 522.822500][ T59] tipc: Subscription rejected, illegal request [ 524.275010][ T6497] loop3: detected capacity change from 0 to 128 [ 524.362594][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.479492][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.769265][ T5579] sysv_free_block: trying to free block not in datazone [ 524.777518][ T5579] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 525.768187][ T4504] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 526.077634][ T4504] usb 4-1: Using ep0 maxpacket: 32 [ 526.211523][ T4504] usb 4-1: config 0 has no interfaces? [ 526.217645][ T4504] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 526.227703][ T4504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.301845][ T4504] usb 4-1: config 0 descriptor?? [ 526.685429][ T5131] usb 4-1: USB disconnect, device number 13 [ 527.291208][ T6515] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 527.299789][ T6515] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 527.594867][ T6515] bridge1: port 1(gretap1) entered blocking state [ 527.602266][ T6515] bridge1: port 1(gretap1) entered disabled state [ 527.609745][ T6515] gretap1: entered allmulticast mode [ 527.618097][ T6515] gretap1: entered promiscuous mode [ 527.812341][ T6515] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 527.820865][ T6515] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 528.269158][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.329676][ T6520] tipc: Started in network mode [ 528.334792][ T6520] tipc: Node identity 2007ff, cluster identity 4711 [ 528.347810][ T6520] tipc: Node number set to 2099199 [ 528.388409][ T34] tipc: Subscription rejected, illegal request [ 528.470649][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.661782][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.819818][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.072332][ T4432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 529.083619][ T4432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 529.096179][ T4432] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 529.189594][ T4432] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 529.220571][ T4432] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 529.239458][ T4432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 529.296789][ T59] bridge_slave_1: left allmulticast mode [ 529.302964][ T59] bridge_slave_1: left promiscuous mode [ 529.310270][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.380814][ T59] bridge_slave_0: left allmulticast mode [ 529.386863][ T59] bridge_slave_0: left promiscuous mode [ 529.393589][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.765690][ T6532] loop2: detected capacity change from 0 to 128 [ 530.206778][ T5518] sysv_free_block: trying to free block not in datazone [ 530.215767][ T5518] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 530.443633][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.525816][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.554422][ T59] bond0 (unregistering): Released all slaves [ 530.678220][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 530.888636][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 531.348189][ T4432] Bluetooth: hci3: command tx timeout [ 531.468162][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.474997][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.779505][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.789064][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.815702][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.830753][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.935417][ T59] veth0_macvtap: left promiscuous mode [ 531.942330][ T59] veth0_vlan: left promiscuous mode [ 532.997816][ T59] team0 (unregistering): Port device team_slave_1 removed [ 533.066789][ T59] team0 (unregistering): Port device team_slave_0 removed [ 533.429978][ T4432] Bluetooth: hci3: command tx timeout [ 533.787587][ T5124] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 534.067443][ T6562] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 534.080446][ T6562] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 534.184211][ T5124] usb 3-1: Using ep0 maxpacket: 16 [ 534.411078][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 534.431851][ T6557] loop0: detected capacity change from 0 to 1764 [ 534.444985][ T6562] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 534.454429][ T6562] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 534.687856][ T5124] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 534.700218][ T5124] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 534.709601][ T5124] usb 3-1: Product: syz [ 534.713930][ T5124] usb 3-1: Manufacturer: syz [ 534.718763][ T5124] usb 3-1: SerialNumber: syz [ 534.762405][ T5124] usb 3-1: config 0 descriptor?? [ 534.858636][ T5124] usb 3-1: selecting invalid altsetting 1 [ 535.033989][ T5124] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 535.076123][ T5124] usb 3-1: USB disconnect, device number 4 [ 535.512993][ T4432] Bluetooth: hci3: command tx timeout [ 535.803359][ T5688] tipc: Subscription rejected, illegal request [ 537.258835][ T6576] loop2: detected capacity change from 0 to 128 [ 537.384973][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.393073][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.401210][ T6526] bridge_slave_0: entered allmulticast mode [ 537.411166][ T6526] bridge_slave_0: entered promiscuous mode [ 537.566294][ T5518] sysv_free_block: trying to free block not in datazone [ 537.574927][ T5518] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 537.614327][ T4432] Bluetooth: hci3: command tx timeout [ 537.699832][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.707834][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.715514][ T6526] bridge_slave_1: entered allmulticast mode [ 537.724215][ T6526] bridge_slave_1: entered promiscuous mode [ 537.869688][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.892490][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.237502][ T6526] team0: Port device team_slave_0 added [ 538.344961][ T6526] team0: Port device team_slave_1 added [ 538.603373][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.610781][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.638085][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.753067][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.760652][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.792104][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.961551][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.971360][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 539.241940][ T6526] hsr_slave_0: entered promiscuous mode [ 539.279476][ T6526] hsr_slave_1: entered promiscuous mode [ 539.288833][ T6583] loop1: detected capacity change from 0 to 512 [ 539.316983][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.325117][ T6526] Cannot create hsr debugfs directory [ 539.339968][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 539.382075][ T6583] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 539.407950][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 539.511150][ T6583] EXT4-fs (loop1): 1 truncate cleaned up [ 539.517400][ T6583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.134078][ T6526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 541.416622][ T6526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 541.527933][ T6597] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 541.536213][ T6597] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 541.592495][ T6526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 541.658998][ T6526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 541.683805][ T5131] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 541.703099][ T6597] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 541.712119][ T6597] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 542.059110][ T5131] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 542.071949][ T5131] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 542.184317][ T5131] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 542.194277][ T5131] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 542.202751][ T5131] usb 3-1: Manufacturer: syz [ 542.309939][ T5131] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 542.710271][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.870904][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.954774][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.962911][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.073823][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.081521][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.506160][ T5131] usb 3-1: USB disconnect, device number 5 [ 544.042255][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 545.023032][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.791104][ T6614] loop2: detected capacity change from 0 to 128 [ 546.258192][ T5518] sysv_free_block: trying to free block not in datazone [ 546.270174][ T5518] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 546.637659][ T6616] loop3: detected capacity change from 0 to 2048 [ 546.748815][ T6616] udf: Unknown parameter 'ÿ' [ 547.985862][ T6526] veth0_vlan: entered promiscuous mode [ 548.134358][ T6526] veth1_vlan: entered promiscuous mode [ 548.458334][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 548.559844][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 548.701415][ T6526] veth0_macvtap: entered promiscuous mode [ 548.813040][ T6526] veth1_macvtap: entered promiscuous mode [ 548.975488][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.986335][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.996435][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.007270][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.017427][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.035681][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.048424][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.059300][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.073616][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.250798][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.261937][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.272410][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.283230][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.293522][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.304307][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.314657][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.325386][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.344422][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.427567][ T6526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.440790][ T6526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.451112][ T6526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.460257][ T6526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.817909][ T5130] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 550.087584][ T5130] usb 3-1: Using ep0 maxpacket: 16 [ 550.209153][ T5130] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 550.218219][ T5130] usb 3-1: config 0 has no interface number 0 [ 550.224538][ T5130] usb 3-1: config 0 interface 107 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 550.437815][ T5130] usb 3-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 550.447391][ T5130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.455570][ T5130] usb 3-1: Product: syz [ 550.463597][ T5130] usb 3-1: Manufacturer: syz [ 550.470370][ T5130] usb 3-1: SerialNumber: syz [ 550.554227][ T5130] usb 3-1: config 0 descriptor?? [ 550.648127][ T5130] go7007 3-1:0.107: probe with driver go7007 failed with error -12 [ 550.816600][ T5130] usb 3-1: USB disconnect, device number 6 [ 553.070259][ T6645] loop2: detected capacity change from 0 to 512 [ 553.259920][ T6645] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 553.340191][ T6645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 553.383183][ T6645] EXT4-fs (loop2): orphan cleanup on readonly fs [ 553.482549][ T6645] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 361: padding at end of block bitmap is not set [ 553.505498][ T6645] EXT4-fs (loop2): Remounting filesystem read-only [ 553.513352][ T6645] EXT4-fs (loop2): 1 truncate cleaned up [ 553.521180][ T6645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 553.684879][ T5518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 553.988618][ T5080] Bluetooth: hci0: command 0x0406 tx timeout [ 554.089810][ T6652] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 554.098377][ T6652] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 554.160824][ T6652] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 554.169310][ T6652] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 555.357706][ T6659] loop2: detected capacity change from 0 to 512 [ 555.420959][ T6659] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 555.726627][ T5124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.734987][ T5124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.775400][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.787909][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.069964][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 558.151536][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 560.046285][ T6680] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 560.054901][ T6680] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 560.176770][ T6682] loop2: detected capacity change from 0 to 256 [ 560.402392][ T6680] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 560.411064][ T6680] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 560.547887][ T5518] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 560.555697][ T5518] FAT-fs (loop2): Filesystem has been set read-only [ 560.672184][ T5518] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 561.356084][ T5604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.563029][ T5604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.773862][ T5604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.911559][ T5604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.377847][ T5604] bridge_slave_1: left allmulticast mode [ 562.383703][ T5604] bridge_slave_1: left promiscuous mode [ 562.390414][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.978297][ T5604] bridge_slave_0: left allmulticast mode [ 562.984159][ T5604] bridge_slave_0: left promiscuous mode [ 562.991144][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.079633][ T5604] gretap1: left allmulticast mode [ 563.084959][ T5604] gretap1: left promiscuous mode [ 563.091175][ T5604] bridge1: port 1(gretap1) entered disabled state [ 564.167492][ T5604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.239020][ T5604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.407928][ T5604] bond0 (unregistering): Released all slaves [ 564.534418][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 564.549736][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 564.563574][ T5080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 564.585543][ T5080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.617259][ T5080] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 564.631955][ T5080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.018806][ T5604] tipc: Left network mode [ 565.981115][ T5080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.019410][ T6640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.050803][ T6640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.084953][ T6640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.102851][ T5604] hsr_slave_0: left promiscuous mode [ 566.117199][ T6640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 566.133086][ T5604] hsr_slave_1: left promiscuous mode [ 566.150841][ T6640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 566.216577][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.224841][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.270338][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.280279][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.329016][ T5604] veth1_macvtap: left promiscuous mode [ 566.338464][ T5604] veth0_macvtap: left promiscuous mode [ 566.344376][ T5604] veth1_vlan: left promiscuous mode [ 566.350104][ T5604] veth0_vlan: left promiscuous mode [ 566.709196][ T4432] Bluetooth: hci1: command tx timeout [ 567.200947][ T5604] team0 (unregistering): Port device team_slave_1 removed [ 567.238132][ T5604] team0 (unregistering): Port device team_slave_0 removed [ 568.222268][ T6583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.227704][ T4432] Bluetooth: hci2: command tx timeout [ 568.431894][ T6689] chnl_net:caif_netlink_parms(): no params data found [ 568.849520][ T4432] Bluetooth: hci1: command tx timeout [ 569.728321][ T6693] chnl_net:caif_netlink_parms(): no params data found [ 570.347945][ T4432] Bluetooth: hci2: command tx timeout [ 570.869357][ T4432] Bluetooth: hci1: command tx timeout [ 570.929744][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.937596][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.947901][ T6689] bridge_slave_0: entered allmulticast mode [ 570.956864][ T6689] bridge_slave_0: entered promiscuous mode [ 571.151422][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.162502][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.172153][ T6689] bridge_slave_1: entered allmulticast mode [ 571.180866][ T6689] bridge_slave_1: entered promiscuous mode [ 571.710960][ T6689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.911683][ T6689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.074845][ T6640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 572.103423][ T6640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 572.129127][ T6640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 572.155280][ T6640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 572.178560][ T6640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 572.188496][ T6640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 572.407391][ T6640] Bluetooth: hci2: command tx timeout [ 572.442141][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 572.628167][ T6689] team0: Port device team_slave_0 added [ 572.859582][ T6689] team0: Port device team_slave_1 added [ 572.949709][ T6640] Bluetooth: hci1: command tx timeout [ 573.343056][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.350915][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.359154][ T6693] bridge_slave_0: entered allmulticast mode [ 573.367935][ T6693] bridge_slave_0: entered promiscuous mode [ 573.413239][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.421477][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.448039][ T6689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.473969][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.481748][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.489645][ T6693] bridge_slave_1: entered allmulticast mode [ 573.501778][ T6693] bridge_slave_1: entered promiscuous mode [ 573.920072][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.927421][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.953944][ T6689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.979679][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.126833][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.242229][ T6640] Bluetooth: hci0: command tx timeout [ 574.376607][ T6693] team0: Port device team_slave_0 added [ 574.468582][ T6640] Bluetooth: hci2: command tx timeout [ 574.500411][ T6721] loop4: detected capacity change from 0 to 256 [ 574.566346][ T6693] team0: Port device team_slave_1 added [ 574.694085][ T6689] hsr_slave_0: entered promiscuous mode [ 574.724697][ T6689] hsr_slave_1: entered promiscuous mode [ 574.750332][ T6689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.758252][ T6689] Cannot create hsr debugfs directory [ 574.984333][ T6711] chnl_net:caif_netlink_parms(): no params data found [ 575.006652][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.014047][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.047433][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.223106][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.230661][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.263953][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.393777][ T6724] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 575.404227][ T6724] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 575.615014][ T5604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.636081][ T6724] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 575.644711][ T6724] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 575.850946][ T5604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.922558][ T6693] hsr_slave_0: entered promiscuous mode [ 575.990211][ T6693] hsr_slave_1: entered promiscuous mode [ 576.024684][ T6693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.032878][ T6693] Cannot create hsr debugfs directory [ 576.210343][ T5604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.311645][ T6640] Bluetooth: hci0: command tx timeout [ 576.339357][ T5604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.413495][ T5604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.743263][ T5604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.999806][ T5604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.030860][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.041828][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.048703][ T4432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 578.052411][ T6711] bridge_slave_0: entered allmulticast mode [ 578.068725][ T6711] bridge_slave_0: entered promiscuous mode [ 578.087855][ T4432] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 578.145935][ T4432] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 578.180100][ T4432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 578.191700][ T4432] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 578.201778][ T4432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 578.220032][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.228055][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.235917][ T6711] bridge_slave_1: entered allmulticast mode [ 578.245518][ T6711] bridge_slave_1: entered promiscuous mode [ 578.291029][ T5604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.422081][ T6640] Bluetooth: hci0: command tx timeout [ 578.448882][ T6711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.484097][ T6711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.627714][ T6738] loop4: detected capacity change from 0 to 1764 [ 578.995072][ T5604] bridge_slave_1: left allmulticast mode [ 579.001261][ T5604] bridge_slave_1: left promiscuous mode [ 579.007822][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.148732][ T5604] bridge_slave_0: left allmulticast mode [ 579.154660][ T5604] bridge_slave_0: left promiscuous mode [ 579.161780][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.241532][ T5604] gretap1: left allmulticast mode [ 579.247365][ T5604] gretap1: left promiscuous mode [ 579.253290][ T5604] bridge1: port 1(gretap1) entered disabled state [ 579.273598][ T5604] bridge_slave_1: left allmulticast mode [ 579.279637][ T5604] bridge_slave_1: left promiscuous mode [ 579.286081][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.309310][ T5604] bridge_slave_0: left allmulticast mode [ 579.315342][ T5604] bridge_slave_0: left promiscuous mode [ 579.324113][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.364963][ T5604] gretap1: left allmulticast mode [ 579.370945][ T5604] gretap1: left promiscuous mode [ 579.380409][ T5604] bridge1: port 1(gretap1) entered disabled state [ 580.389352][ T6640] Bluetooth: hci4: command tx timeout [ 580.469586][ T6640] Bluetooth: hci0: command tx timeout [ 580.844717][ T5604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.959347][ T5604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.034047][ T5604] bond0 (unregistering): Released all slaves [ 581.104069][ T5604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.139458][ T5604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.158343][ T5604] bond0 (unregistering): Released all slaves [ 581.228267][ T6711] team0: Port device team_slave_0 added [ 581.414654][ T6711] team0: Port device team_slave_1 added [ 581.673855][ T5604] tipc: Left network mode [ 581.825297][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.833473][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.860955][ T6711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.932852][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.940273][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.967808][ T6711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.467385][ T6640] Bluetooth: hci4: command tx timeout [ 582.491112][ T6711] hsr_slave_0: entered promiscuous mode [ 582.507920][ T6711] hsr_slave_1: entered promiscuous mode [ 582.524497][ T6711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.533340][ T6711] Cannot create hsr debugfs directory [ 583.168754][ T5604] hsr_slave_0: left promiscuous mode [ 583.193748][ T5604] hsr_slave_1: left promiscuous mode [ 583.213138][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.221166][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.236012][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.244123][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.284926][ T5604] hsr_slave_0: left promiscuous mode [ 583.298777][ T5604] hsr_slave_1: left promiscuous mode [ 583.321661][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.332075][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.351469][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.359352][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.393217][ T5604] veth1_macvtap: left promiscuous mode [ 583.399204][ T5604] veth0_macvtap: left promiscuous mode [ 583.405066][ T5604] veth1_vlan: left promiscuous mode [ 583.410828][ T5604] veth0_vlan: left promiscuous mode [ 583.419289][ T5604] veth1_macvtap: left promiscuous mode [ 583.425029][ T5604] veth0_macvtap: left promiscuous mode [ 583.433570][ T5604] veth1_vlan: left promiscuous mode [ 583.439881][ T5604] veth0_vlan: left promiscuous mode [ 584.557474][ T6640] Bluetooth: hci4: command tx timeout [ 584.584570][ T5604] team0 (unregistering): Port device team_slave_1 removed [ 584.663065][ T5604] team0 (unregistering): Port device team_slave_0 removed [ 585.302571][ T5604] team0 (unregistering): Port device team_slave_1 removed [ 585.400704][ T5604] team0 (unregistering): Port device team_slave_0 removed [ 585.768900][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 586.032058][ T6689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 586.227496][ T6693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 586.269970][ T6689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 586.303162][ T6693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 586.551458][ T6689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 586.610749][ T6693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 586.628924][ T6640] Bluetooth: hci4: command tx timeout [ 586.673119][ T6689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 586.741237][ T6693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.741242][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.749447][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.757606][ T6735] bridge_slave_0: entered allmulticast mode [ 587.766213][ T6735] bridge_slave_0: entered promiscuous mode [ 587.895751][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.904347][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.912253][ T6735] bridge_slave_1: entered allmulticast mode [ 587.920883][ T6735] bridge_slave_1: entered promiscuous mode [ 588.128123][ T6711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 588.216167][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.232785][ T6711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 588.339290][ T6711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 588.412679][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.430656][ T6711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 588.722942][ T6735] team0: Port device team_slave_0 added [ 588.816467][ T6735] team0: Port device team_slave_1 added [ 589.179822][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.187341][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.213809][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.399115][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.406340][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.433836][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.476451][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.934964][ T6693] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.996711][ T6735] hsr_slave_0: entered promiscuous mode [ 590.025727][ T6735] hsr_slave_1: entered promiscuous mode [ 590.083034][ T6689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.131659][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.139629][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.333893][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.342134][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.523871][ T6689] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.557690][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.844225][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.853726][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.874570][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.882224][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.971533][ T6693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.982467][ T6693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.065755][ T6711] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.306490][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.314199][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.335043][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.342742][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.054522][ T6735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.299816][ T6735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.558206][ T6735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.798686][ T6735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.902190][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.909330][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.178655][ T5604] bridge_slave_1: left allmulticast mode [ 593.184545][ T5604] bridge_slave_1: left promiscuous mode [ 593.194900][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.261299][ T5604] bridge_slave_0: left allmulticast mode [ 593.272353][ T5604] bridge_slave_0: left promiscuous mode [ 593.279289][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.598139][ T5604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.646544][ T5604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.670159][ T5604] bond0 (unregistering): Released all slaves [ 594.844598][ T5604] tipc: Left network mode [ 595.143746][ T6735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 595.342753][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.388418][ T6735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 595.500153][ T5604] hsr_slave_0: left promiscuous mode [ 595.515701][ T5604] hsr_slave_1: left promiscuous mode [ 595.525853][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.534052][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.546834][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.555275][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.582610][ T5604] veth1_macvtap: left promiscuous mode [ 595.589037][ T5604] veth0_macvtap: left promiscuous mode [ 595.594887][ T5604] veth1_vlan: left promiscuous mode [ 595.600740][ T5604] veth0_vlan: left promiscuous mode [ 596.368276][ T5604] team0 (unregistering): Port device team_slave_1 removed [ 596.415583][ T5604] team0 (unregistering): Port device team_slave_0 removed [ 596.677532][ T6735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 596.825990][ T6735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 597.062291][ T6689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.096185][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.577682][ T6693] veth0_vlan: entered promiscuous mode [ 597.750520][ T6689] veth0_vlan: entered promiscuous mode [ 597.824883][ T6693] veth1_vlan: entered promiscuous mode [ 597.941941][ T6689] veth1_vlan: entered promiscuous mode [ 597.993724][ T6711] veth0_vlan: entered promiscuous mode [ 598.199644][ T6711] veth1_vlan: entered promiscuous mode [ 598.380367][ T6689] veth0_macvtap: entered promiscuous mode [ 598.502247][ T6693] veth0_macvtap: entered promiscuous mode [ 598.542998][ T6689] veth1_macvtap: entered promiscuous mode [ 598.616481][ T6693] veth1_macvtap: entered promiscuous mode [ 598.841684][ T6689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.853071][ T6689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.872003][ T6689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.951788][ T6711] veth0_macvtap: entered promiscuous mode [ 599.014564][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.025389][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.036288][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.049274][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.063659][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.083546][ T6689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.094437][ T6689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.114468][ T6689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.162829][ T6711] veth1_macvtap: entered promiscuous mode [ 599.206278][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.299948][ T6689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.315319][ T6689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.327451][ T6689] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.336552][ T6689] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.420535][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.432795][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.443800][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.454541][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.469647][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.546606][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.557642][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.568052][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.579160][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.589579][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.600707][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.622837][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.665015][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.712013][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.722939][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.733056][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.743750][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.753940][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.764646][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.779073][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.874293][ T6693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.884066][ T6693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.893425][ T6693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.902601][ T6693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.990603][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.998337][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.112504][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.120584][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.133607][ T6711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.145959][ T6711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.155495][ T6711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.166427][ T6711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.155254][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.958072][ T6735] veth0_vlan: entered promiscuous mode [ 604.139399][ T6735] veth1_vlan: entered promiscuous mode [ 604.491657][ T6735] veth0_macvtap: entered promiscuous mode [ 604.582391][ T6735] veth1_macvtap: entered promiscuous mode [ 604.797838][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.808739][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.818968][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.829764][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.842204][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.853803][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.868463][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.882788][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.898923][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.093710][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.107776][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.118461][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.129268][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.139489][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.152802][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.163854][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.175050][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.191100][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.264501][ T6735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.274106][ T6735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.283379][ T6735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.292635][ T6735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.914585][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.674844][ T5604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.683444][ T5604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.693348][ T3975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.693443][ T3975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.955466][ T5604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.965070][ T5604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.121515][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.129965][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.448136][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.456146][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.815959][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.824447][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.948381][ T29] audit: type=1800 audit(1718201420.740:20): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 609.010435][ T6857] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 609.020283][ T6857] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 609.310140][ T6857] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 609.318657][ T6857] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 609.738522][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 609.880260][ T6867] team0: Device gre0 is of different type [ 609.925807][ T6862] loop1: detected capacity change from 0 to 2048 [ 609.979576][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 610.004277][ T6862] udf: Unknown parameter 'ÿ' [ 611.744747][ T6889] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 611.753478][ T6889] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 611.761952][ T6889] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 611.874659][ T6880] loop4: detected capacity change from 0 to 1764 [ 612.409124][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.417450][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.665537][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.673971][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.770790][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 615.071888][ T6912] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 615.081684][ T6912] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 615.169379][ T6912] team0: Port device gretap1 added [ 615.205333][ T6913] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 615.213907][ T6913] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 615.494172][ T6915] Bluetooth: MGMT ver 1.22 [ 616.429221][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.684191][ T6919] team0: Device sit0 is of different type [ 616.748496][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 617.514721][ T6640] Bluetooth: hci0: command tx timeout [ 617.679364][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 618.054621][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.116220][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 620.903312][ T6942] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 620.913361][ T6942] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 621.344321][ T6943] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 621.353463][ T6943] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 622.394116][ T6951] net_ratelimit: 44 callbacks suppressed [ 622.394174][ T6951] dccp_xmit_packet: Payload too large (65475) for featneg. [ 623.182289][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 623.278802][ T6955] team0: Device caif0 is of different type [ 623.308628][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.688907][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 630.121311][ T6980] syzkaller0: entered promiscuous mode [ 630.129033][ T6980] syzkaller0: entered allmulticast mode [ 631.719132][ T6985] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 631.772829][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.265548][ T6990] team0: Failed to send options change via netlink (err -105) [ 632.286456][ T6990] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 632.301324][ T6990] team0: Port device team_slave_0 removed [ 632.959594][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 633.318826][ T6872] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 633.326732][ T6872] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 633.353286][ T6872] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 633.471308][ T7005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.112921][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 634.852758][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.893989][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.904993][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.915336][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.926661][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.936961][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.958401][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.978800][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.990047][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.000252][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.011064][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.102558][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.114434][ T7025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.221723][ T7025] team0: Device batadv_slave_1 is up. Set it down before adding it as a team port [ 635.319684][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 635.503662][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 636.124332][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.872441][ T7046] loop2: detected capacity change from 0 to 1764 [ 637.026200][ T29] audit: type=1804 audit(1718201448.780:21): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3502172008/syzkaller.vvZQ10/18/bus" dev="sda1" ino=1950 res=1 errno=0 [ 637.053278][ T29] audit: type=1804 audit(1718201448.820:22): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3502172008/syzkaller.vvZQ10/18/bus" dev="sda1" ino=1950 res=1 errno=0 [ 637.996364][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 638.233261][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 638.329266][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 638.478923][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 638.508949][ T7069] pim6reg1: entered promiscuous mode [ 638.515118][ T7069] pim6reg1: entered allmulticast mode [ 639.861379][ T7087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.042492][ T7093] trusted_key: encrypted_key: insufficient parameters specified [ 640.280597][ T7092] loop3: detected capacity change from 0 to 1024 [ 640.664342][ T7092] ===================================================== [ 640.672043][ T7092] BUG: KMSAN: uninit-value in sized_strscpy+0xc4/0x160 [ 640.680259][ T7092] sized_strscpy+0xc4/0x160 [ 640.685596][ T7092] copy_name+0x2af/0x320 [ 640.690415][ T7092] hfsplus_listxattr+0x11e9/0x1a50 [ 640.695890][ T7092] listxattr+0x1f3/0x6b0 [ 640.700571][ T7092] __ia32_sys_llistxattr+0x164/0x2e0 [ 640.706105][ T7092] ia32_sys_call+0x1649/0x40a0 2024/06/12 14:10:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 640.712564][ T7092] __do_fast_syscall_32+0xb4/0x120 [ 640.718193][ T7092] do_fast_syscall_32+0x38/0x80 [ 640.723202][ T7092] do_SYSENTER_32+0x1f/0x30 [ 640.727970][ T7092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.734558][ T7092] [ 640.736935][ T7092] Uninit was created at: [ 640.741609][ T7092] kmalloc_trace+0x57b/0xbe0 [ 640.747608][ T7092] hfsplus_listxattr+0x4cc/0x1a50 [ 640.752990][ T7092] listxattr+0x1f3/0x6b0 [ 640.757747][ T7092] __ia32_sys_llistxattr+0x164/0x2e0 [ 640.763501][ T7092] ia32_sys_call+0x1649/0x40a0 [ 640.769113][ T7092] __do_fast_syscall_32+0xb4/0x120 [ 640.774519][ T7092] do_fast_syscall_32+0x38/0x80 [ 640.780664][ T7092] do_SYSENTER_32+0x1f/0x30 [ 640.785472][ T7092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.792781][ T7092] [ 640.795459][ T7092] CPU: 0 PID: 7092 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 640.805928][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 640.816418][ T7092] ===================================================== [ 640.824329][ T7092] Disabling lock debugging due to kernel taint [ 640.830726][ T7092] Kernel panic - not syncing: kmsan.panic set ... [ 640.837257][ T7092] CPU: 0 PID: 7092 Comm: syz-executor.3 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 640.848907][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 640.859070][ T7092] Call Trace: [ 640.862427][ T7092] [ 640.865432][ T7092] dump_stack_lvl+0x216/0x2d0 [ 640.870290][ T7092] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 640.876237][ T7092] dump_stack+0x1e/0x30 [ 640.880658][ T7092] panic+0x4e2/0xcd0 [ 640.884792][ T7092] ? kmsan_get_metadata+0xf1/0x1d0 [ 640.890154][ T7092] kmsan_report+0x2d5/0x2e0 [ 640.894848][ T7092] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 640.900812][ T7092] ? __msan_warning+0x95/0x120 [ 640.905678][ T7092] ? sized_strscpy+0xc4/0x160 [ 640.910533][ T7092] ? copy_name+0x2af/0x320 [ 640.915083][ T7092] ? hfsplus_listxattr+0x11e9/0x1a50 [ 640.920522][ T7092] ? listxattr+0x1f3/0x6b0 [ 640.925109][ T7092] ? __ia32_sys_llistxattr+0x164/0x2e0 [ 640.930891][ T7092] ? ia32_sys_call+0x1649/0x40a0 [ 640.936116][ T7092] ? __do_fast_syscall_32+0xb4/0x120 [ 640.941690][ T7092] ? do_fast_syscall_32+0x38/0x80 [ 640.947002][ T7092] ? do_SYSENTER_32+0x1f/0x30 [ 640.951915][ T7092] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.958721][ T7092] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.965498][ T7092] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 640.971514][ T7092] ? kmsan_get_metadata+0x146/0x1d0 [ 640.976927][ T7092] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 640.982946][ T7092] ? kmsan_get_metadata+0x146/0x1d0 [ 640.988363][ T7092] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 640.994885][ T7092] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 641.001207][ T7092] ? kmsan_get_metadata+0x146/0x1d0 [ 641.006625][ T7092] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 641.013127][ T7092] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 641.019422][ T7092] ? kmsan_get_metadata+0x146/0x1d0 [ 641.024813][ T7092] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 641.030895][ T7092] __msan_warning+0x95/0x120 [ 641.035659][ T7092] sized_strscpy+0xc4/0x160 [ 641.040408][ T7092] copy_name+0x2af/0x320 [ 641.044849][ T7092] hfsplus_listxattr+0x11e9/0x1a50 [ 641.050270][ T7092] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 641.056281][ T7092] ? kmsan_get_metadata+0x146/0x1d0 [ 641.061673][ T7092] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 641.067669][ T7092] ? kmsan_get_metadata+0x146/0x1d0 [ 641.073037][ T7092] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 641.079038][ T7092] ? __pfx_hfsplus_listxattr+0x10/0x10 [ 641.084717][ T7092] ? __pfx_hfsplus_listxattr+0x10/0x10 [ 641.090401][ T7092] listxattr+0x1f3/0x6b0 [ 641.094839][ T7092] __ia32_sys_llistxattr+0x164/0x2e0 [ 641.100380][ T7092] ia32_sys_call+0x1649/0x40a0 [ 641.105388][ T7092] __do_fast_syscall_32+0xb4/0x120 [ 641.110781][ T7092] ? irqentry_exit+0x16/0x60 [ 641.115657][ T7092] do_fast_syscall_32+0x38/0x80 [ 641.120793][ T7092] do_SYSENTER_32+0x1f/0x30 [ 641.125532][ T7092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.132128][ T7092] RIP: 0023:0xf73d9579 [ 641.136342][ T7092] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 641.156170][ T7092] RSP: 002b:00000000f5e205ac EFLAGS: 00000206 ORIG_RAX: 00000000000000e9 [ 641.164793][ T7092] RAX: ffffffffffffffda RBX: 0000000020010140 RCX: 0000000000000000 [ 641.172915][ T7092] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.181027][ T7092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.189162][ T7092] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 641.197361][ T7092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.205516][ T7092] [ 641.208979][ T7092] Kernel Offset: disabled [ 641.213383][ T7092] Rebooting in 86400 seconds..