last executing test programs: 1m44.345691628s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)='\r', 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xdd\x00\x00\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\t\xff~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8a\xc5at\x94=F\xc7\xea\x84\xea0\xf4\x0f\"C\xeb\x17\xe9V\x92o\xa7\xe3/H~\x81\xebnG5\xe3O\x9a\xd9\t_\x88e\xa9x\xd2\xa0\x1e\"\xb3\xbb\x8e\x961\xf5N\xdbj\x1f\xcf>1y\xe8\xb4\xbd{\x9a\x95\xcd\xaf\"^\x86\xd2\xed`\x84\xb6\xb1\xf8\xb5\x99\xce|\x12\xad\xac\xe17\x15\x19!\xae\x03J\xd5\xabnS\x81\xe0\xfa\aP\f', 0x0) fcntl$setlease(r2, 0x400, 0x0) fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) r3 = dup(r2) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m14.05183796s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x40, &(0x7f0000000480)={[{@nombcache}, {@resgid}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@auto_da_alloc}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7bf, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[]) 1m11.617595118s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x40, &(0x7f0000000480)={[{@nombcache}, {@resgid}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@auto_da_alloc}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7bf, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[]) 1m10.251754732s ago: executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) io_destroy(0x0) 1m8.326366666s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d00010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x18, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000000180)=',#', 0x4000) 1m3.601203415s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2028, 0x4, @link_id}, 0x20) 1m2.665963424s ago: executing program 2: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) pipe(&(0x7f0000000000)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_create(0x6, &(0x7f0000000040)={0x0, 0x24, 0x4, @tid=r2}, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) write$UHID_INPUT(r1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) sendto$inet(r3, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x649}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001980)="d5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001d80)="fe", 0x1}], 0x1}}], 0x3, 0x4008095) 1m1.51678888s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = getpgrp(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x2}}) r3 = memfd_secret(0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x5c4, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) prctl$PR_SET_PTRACER(0x59616d61, r2) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000d0000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0, 0x0) 44.091140083s ago: executing program 4: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 42.289500535s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) 41.466940684s ago: executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlink(&(0x7f0000000100)='./file0/file0\x00') chroot(&(0x7f0000000240)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000aa40)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90}, 0x0, 0x0, 0x0, 0x0}) 40.761744387s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400100, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000003e00)={'wg2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000000000)=@newlinkprop={0x24, 0x2e, 0x3133eae229be74b7, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 38.587806597s ago: executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000017c0)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000380)={&(0x7f0000000200), 0x18, &(0x7f0000000340)={&(0x7f00000000c0)="10", 0x1}}, 0x0) 31.185171562s ago: executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b8", 0xb7, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) 27.050342622s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x40, &(0x7f0000000480)={[{@nombcache}, {@resgid}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@auto_da_alloc}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7bf, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[]) 26.099282539s ago: executing program 0: close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) unshare(0x0) writev(r0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0xc2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 24.667762603s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = getpgrp(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x2}}) r3 = memfd_secret(0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x5c4, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) prctl$PR_SET_PTRACER(0x59616d61, r2) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000d0000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0, 0x0) 6.92256801s ago: executing program 1: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) writev(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x418d840, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x0, 0x4, 0x0, @link_id=0xffffffffffffffff}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f815110000005e140602000000000e000a001000000002800000123f", 0x2e}], 0x1}, 0x0) 5.49520892s ago: executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 5.478606339s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x40, &(0x7f0000000480)={[{@nombcache}, {@resgid}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@auto_da_alloc}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7bf, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) 4.688779594s ago: executing program 1: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) pipe(&(0x7f0000000000)) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_create(0x6, &(0x7f0000000040)={0x0, 0x24, 0x4, @tid=r1}, &(0x7f0000000100)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) sendto$inet(r2, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x649}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001980)="d5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001d80)="fe", 0x1}], 0x1}}], 0x3, 0x4008095) 4.318876003s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x0) 3.76343896s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3e, 0x0, "cfaa02de0b42430606ba0a01e0d2669e8b9a9025903f0b05c311b240e623031da74b8ea6de52db9e0b56436ca0c8a9237bd3c12be9e2ebb6e829bfb5b928193e9db3fe74f8f5640f4016d64a50bcfba0"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8914, &(0x7f0000001440)={'bridge0\x00', 0x0}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000340)}], 0x1) 3.457567278s ago: executing program 3: close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) unshare(0x2000400) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0xc2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.815915541s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x200000100000011, 0x803, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.126190463s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d00010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac67"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000000180)=',#', 0x4000) 1.761006222s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xff}, {0x3fe}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 842.052823ms ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000002580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000600000014"], 0x58}}, 0x0) 260.716639ms ago: executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) writev(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x418d840, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x0, 0x4, 0x0, @link_id=0xffffffffffffffff}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f815110000005e140602000000000e000a001000000002800000123f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000017c0)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000380)={&(0x7f0000000200), 0x18, &(0x7f0000000340)={&(0x7f00000000c0)="10", 0x1}}, 0x0) kernel console output (not intermixed with test programs): ailed with error -5 [ 533.871063][ T5706] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 533.952634][ T5706] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 534.048365][ T5706] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 534.429652][ T6233] usb 4-1: USB disconnect, device number 10 [ 534.472901][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 534.664987][ T7030] loop0: detected capacity change from 0 to 2048 [ 534.739605][ T7030] NILFS (loop0): invalid segment: Sequence number mismatch [ 534.755753][ T7030] NILFS (loop0): trying rollback from an earlier position [ 534.888045][ T7030] NILFS (loop0): recovery complete [ 534.917899][ T7038] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 535.091186][ T7037] loop2: detected capacity change from 0 to 1024 [ 535.176692][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.176692][ T7037] loop2: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 535.242825][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.242825][ T7037] loop2: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 535.293690][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.293690][ T7037] loop2: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 535.320299][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.320299][ T7037] loop2: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 535.430204][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.430204][ T7037] loop2: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 535.458053][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.458053][ T7037] loop2: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 535.497745][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.497745][ T7037] loop2: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 535.555369][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.555369][ T7037] loop2: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 535.631188][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.631188][ T7037] loop2: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 535.714358][ T7037] syz-executor.2: attempt to access beyond end of device [ 535.714358][ T7037] loop2: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 536.174615][ T7047] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 536.222352][ T29] audit: type=1800 audit(1718297040.026:104): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 539.496228][ T7060] loop4: detected capacity change from 0 to 2048 [ 539.602498][ T7060] NILFS (loop4): invalid segment: Sequence number mismatch [ 539.610244][ T7060] NILFS (loop4): trying rollback from an earlier position [ 539.781420][ T7060] NILFS (loop4): recovery complete [ 539.808060][ T7066] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.984156][ T7082] loop3: detected capacity change from 0 to 1024 [ 541.998155][ T7083] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 542.042176][ T29] audit: type=1800 audit(1718297045.866:105): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1945 res=0 errno=0 [ 542.112873][ T7082] bio_check_eod: 23 callbacks suppressed [ 542.112958][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.112958][ T7082] loop3: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 542.191298][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.191298][ T7082] loop3: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 542.245742][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.245742][ T7082] loop3: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 542.312671][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.312671][ T7082] loop3: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 542.390264][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.390264][ T7082] loop3: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 542.463277][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.463277][ T7082] loop3: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 542.549819][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.549819][ T7082] loop3: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 542.612600][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.612600][ T7082] loop3: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 542.655686][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.655686][ T7082] loop3: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 542.730492][ T7082] syz-executor.3: attempt to access beyond end of device [ 542.730492][ T7082] loop3: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 544.297766][ T7097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.433725][ T7116] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 547.456852][ T29] audit: type=1800 audit(1718297051.256:106): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 548.990750][ T7128] loop0: detected capacity change from 0 to 1024 [ 549.106600][ T7128] bio_check_eod: 23 callbacks suppressed [ 549.106685][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.106685][ T7128] loop0: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 549.140840][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.140840][ T7128] loop0: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 549.165904][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.165904][ T7128] loop0: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 549.216564][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.216564][ T7128] loop0: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 549.241422][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.241422][ T7128] loop0: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 549.340402][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.340402][ T7128] loop0: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 549.382616][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.382616][ T7128] loop0: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 549.427107][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.427107][ T7128] loop0: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 549.465120][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.465120][ T7128] loop0: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 549.519431][ T7128] syz-executor.0: attempt to access beyond end of device [ 549.519431][ T7128] loop0: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 550.805565][ T7134] loop3: detected capacity change from 0 to 2048 [ 551.151276][ T7134] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.466757][ T5706] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 553.772242][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 553.905908][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.916937][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.928462][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 553.938707][ T5706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 553.948994][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.110231][ T5706] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 554.121089][ T5706] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 554.130693][ T5706] usb 5-1: Manufacturer: syz [ 554.143258][ T7150] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 554.190644][ T29] audit: type=1800 audit(1718297057.966:107): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 554.223616][ T5706] usb 5-1: config 0 descriptor?? [ 554.868776][ T7142] loop4: detected capacity change from 0 to 1024 [ 554.961428][ T7154] loop3: detected capacity change from 0 to 128 [ 555.048468][ T7142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.112544][ T5706] rc_core: IR keymap rc-hauppauge not found [ 555.118708][ T5706] Registered IR keymap rc-empty [ 555.135297][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.198050][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.264493][ T5706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 555.280161][ T5706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 555.375767][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.449679][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.523222][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.579428][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.665038][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.733219][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.808981][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.882063][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.902036][ T7166] loop1: detected capacity change from 0 to 1024 [ 555.935922][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 556.015771][ T7166] bio_check_eod: 23 callbacks suppressed [ 556.015859][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.015859][ T7166] loop1: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 556.032656][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 556.069033][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.069033][ T7166] loop1: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 556.086195][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.086195][ T7166] loop1: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 556.106714][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.106714][ T7166] loop1: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 556.125069][ T5706] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 556.133546][ T5706] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 556.138349][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.138349][ T7166] loop1: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 556.210075][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.210075][ T7166] loop1: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 556.262708][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.262708][ T7166] loop1: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 556.317890][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.317890][ T7166] loop1: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 556.398787][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.398787][ T7166] loop1: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 556.501332][ T7166] syz-executor.1: attempt to access beyond end of device [ 556.501332][ T7166] loop1: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 556.753998][ T6233] usb 5-1: USB disconnect, device number 7 [ 556.855048][ T6473] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.619532][ T7172] loop4: detected capacity change from 0 to 512 [ 557.917680][ T7172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.918270][ T7172] ext4 filesystem being mounted at /root/syzkaller-testdir3920689535/syzkaller.PoyLwa/35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 558.335463][ T6473] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.997704][ T7179] pim6reg: entered allmulticast mode [ 559.293345][ T7179] pim6reg: left allmulticast mode [ 560.224037][ T7188] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 560.241554][ T29] audit: type=1800 audit(1718297064.096:108): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 560.984346][ T7194] bond0: option ad_select: unable to set because the bond device is up [ 560.995714][ T2839] bond0: (slave bond_slave_0): interface is now down [ 561.003098][ T2839] bond0: (slave bond_slave_1): interface is now down [ 561.012659][ T2839] bond0: now running without any active interface! [ 562.462361][ T7209] loop1: detected capacity change from 0 to 1024 [ 562.513975][ T7209] bio_check_eod: 23 callbacks suppressed [ 562.514064][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.514064][ T7209] loop1: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 562.571344][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.571344][ T7209] loop1: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 562.637043][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.637043][ T7209] loop1: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 562.814198][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.814198][ T7209] loop1: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 562.868829][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.868829][ T7209] loop1: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 562.870003][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.870003][ T7209] loop1: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 562.954875][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.954875][ T7209] loop1: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 562.956861][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.956861][ T7209] loop1: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 562.957736][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.957736][ T7209] loop1: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 562.958622][ T7209] syz-executor.1: attempt to access beyond end of device [ 562.958622][ T7209] loop1: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 563.597060][ T7219] __nla_validate_parse: 11 callbacks suppressed [ 563.597149][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 564.163743][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 564.270984][ T29] audit: type=1800 audit(1718297068.156:109): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 564.368150][ T7226] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 566.267124][ T7259] loop0: detected capacity change from 0 to 64 [ 567.075722][ T29] audit: type=1800 audit(1718297070.916:110): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1956 res=0 errno=0 [ 567.118411][ T7272] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 567.868511][ T5121] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 568.263928][ T5121] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 568.273508][ T5121] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 568.284250][ T5121] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 568.293857][ T5121] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 568.306443][ T5121] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 568.495411][ T5121] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 568.505909][ T5121] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 568.514874][ T5121] usb 1-1: Product: syz [ 568.519311][ T5121] usb 1-1: Manufacturer: syz [ 568.663773][ T7279] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 568.743410][ T5121] cdc_wdm 1-1:1.0: skipping garbage [ 568.749100][ T5121] cdc_wdm 1-1:1.0: skipping garbage [ 568.811052][ T5121] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 568.817739][ T5121] cdc_wdm 1-1:1.0: Unknown control protocol [ 568.937845][ T780] usb 1-1: USB disconnect, device number 4 [ 569.284566][ T5078] Bluetooth: hci3: command 0x0406 tx timeout [ 569.291353][ T5071] Bluetooth: hci1: command 0x0406 tx timeout [ 570.629143][ T29] audit: type=1800 audit(1718297074.516:111): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1942 res=0 errno=0 [ 570.737442][ T7318] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 573.499596][ T7353] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 574.402359][ T5078] Bluetooth: hci4: command 0x0406 tx timeout [ 575.464629][ T7385] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 576.193657][ T7401] syz-executor.4[7401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.199814][ T7401] syz-executor.4[7401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.355283][ T7422] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 581.313115][ T7459] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 581.330746][ T29] audit: type=1800 audit(1718297085.156:112): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 582.405782][ T7467] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 582.439043][ T7467] syzkaller0: entered promiscuous mode [ 582.445046][ T7467] syzkaller0: entered allmulticast mode [ 582.548517][ T780] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 582.963727][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.975671][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.992274][ T780] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 583.002217][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.101272][ T780] usb 3-1: config 0 descriptor?? [ 583.862728][ T780] usbhid 3-1:0.0: can't add hid device: -71 [ 583.869646][ T780] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 583.937299][ T780] usb 3-1: USB disconnect, device number 9 [ 584.582052][ T29] audit: type=1800 audit(1718297088.416:113): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1948 res=0 errno=0 [ 584.606015][ T7488] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 591.736391][ T7524] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 591.812390][ T29] audit: type=1800 audit(1718297095.606:114): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 592.865612][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.872674][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.547871][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 593.654000][ T7541] binder: 7537:7541 ioctl 4018620d 0 returned -22 [ 596.525850][ T7567] loop2: detected capacity change from 0 to 1024 [ 596.732755][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 600.335025][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.345665][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.826155][ T7608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.833709][ T7608] IPv6: NLM_F_CREATE should be set when creating new route [ 600.841639][ T7608] IPv6: NLM_F_CREATE should be set when creating new route [ 602.766000][ T7628] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 604.049766][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 609.324120][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 609.333290][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 609.480372][ T7699] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 609.642063][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 609.800555][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=5a.b1 [ 609.817198][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.904220][ T25] usb 2-1: config 0 descriptor?? [ 609.973651][ T25] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 610.228288][ T25] usb 2-1: USB disconnect, device number 7 [ 611.468630][ T7720] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 611.848500][ T29] audit: type=1800 audit(1718297115.696:115): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1949 res=0 errno=0 [ 611.885070][ T7724] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 613.098247][ T7737] loop4: detected capacity change from 0 to 512 [ 613.335733][ T7737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.349280][ T7737] ext4 filesystem being mounted at /root/syzkaller-testdir3920689535/syzkaller.PoyLwa/85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.441536][ T7741] loop3: detected capacity change from 0 to 1024 [ 613.472934][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 613.589573][ T7741] loop3: detected capacity change from 0 to 256 [ 613.781350][ T7741] FAT-fs (loop3): Directory bread(block 64) failed [ 613.782367][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 613.788499][ T7741] FAT-fs (loop3): Directory bread(block 65) failed [ 613.806425][ T7741] FAT-fs (loop3): Directory bread(block 66) failed [ 613.814440][ T7741] FAT-fs (loop3): Directory bread(block 67) failed [ 613.821259][ T7741] FAT-fs (loop3): Directory bread(block 68) failed [ 613.828120][ T7741] FAT-fs (loop3): Directory bread(block 69) failed [ 613.835273][ T7741] FAT-fs (loop3): Directory bread(block 70) failed [ 613.842342][ T7741] FAT-fs (loop3): Directory bread(block 71) failed [ 613.849155][ T7741] FAT-fs (loop3): Directory bread(block 72) failed [ 613.856097][ T7741] FAT-fs (loop3): Directory bread(block 73) failed [ 614.083080][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=5a.b1 [ 614.092662][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.011114][ T25] usb 3-1: config 0 descriptor?? [ 616.072125][ T7748] loop1: detected capacity change from 0 to 2048 [ 616.193986][ T7748] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 616.202201][ T7748] UDF-fs: Scanning with blocksize 512 failed [ 616.399956][ T7748] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 616.480610][ T7748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 616.527104][ T25] usb 3-1: can't set config #0, error -71 [ 616.536336][ T6473] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.605898][ T25] usb 3-1: USB disconnect, device number 10 [ 617.156539][ T7754] loop0: detected capacity change from 0 to 8 [ 617.247684][ T7754] SQUASHFS error: zlib decompression failed, data probably corrupt [ 617.256319][ T7754] SQUASHFS error: Failed to read block 0x4e8: -5 [ 617.336775][ T29] audit: type=1800 audit(1718297121.156:116): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 617.419920][ T7760] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 617.454339][ T29] audit: type=1800 audit(1718297121.296:117): pid=7760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 618.155780][ T7769] loop1: detected capacity change from 0 to 512 [ 618.262488][ T7769] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 618.284980][ T7769] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 618.343268][ T7769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.378008][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.388335][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.559322][ T29] audit: type=1800 audit(1718297122.436:118): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=13 res=0 errno=0 [ 618.901540][ T6429] EXT4-fs error (device loop1): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 618.925017][ T7778] loop2: detected capacity change from 0 to 512 [ 618.985407][ T6429] EXT4-fs error (device loop1): ext4_lookup:1858: inode #2: comm syz-executor.1: deleted inode referenced: 15 [ 619.057799][ T6429] EXT4-fs error (device loop1): ext4_lookup:1858: inode #2: comm syz-executor.1: deleted inode referenced: 15 [ 619.080106][ T7778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.093863][ T7778] ext4 filesystem being mounted at /root/syzkaller-testdir2329450345/syzkaller.zmMaLw/82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.308605][ T5121] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 619.660830][ T6429] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.684023][ T5121] usb 1-1: Using ep0 maxpacket: 8 [ 619.720052][ T7788] binder: 7787:7788 ioctl 4018620d 0 returned -22 [ 619.834306][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.852461][ T5121] usb 1-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=5a.b1 [ 619.862291][ T5121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.009943][ T5121] usb 1-1: config 0 descriptor?? [ 620.069152][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.124383][ T5121] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 620.278349][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.403717][ T780] usb 1-1: USB disconnect, device number 5 [ 620.487220][ T5078] Bluetooth: hci2: command 0x0406 tx timeout [ 620.490695][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.532509][ T6424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.597486][ T7793] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 620.658456][ T29] audit: type=1800 audit(1718297124.476:119): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1956 res=0 errno=0 [ 620.853259][ T11] bridge_slave_1: left allmulticast mode [ 620.859201][ T11] bridge_slave_1: left promiscuous mode [ 620.875664][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.910897][ T11] bridge_slave_0: left allmulticast mode [ 620.917199][ T11] bridge_slave_0: left promiscuous mode [ 620.924138][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.735323][ T7801] QAT: Invalid ioctl -805268463 [ 621.894506][ T7801] QAT: Invalid ioctl -805268418 [ 621.906833][ T7804] QAT: Invalid ioctl -1066363887 [ 621.945477][ T7801] QAT: Invalid ioctl -1066363887 [ 621.973257][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.013289][ T7801] QAT: Invalid ioctl -805268418 [ 622.023620][ T7801] QAT: Invalid ioctl -805268419 [ 622.042458][ T7801] QAT: Invalid ioctl -1066363887 [ 622.052487][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.063166][ T7801] QAT: Invalid ioctl -2114415556 [ 622.107795][ T7801] QAT: Invalid ioctl -805268419 [ 622.127178][ T11] bond0 (unregistering): Released all slaves [ 622.145205][ T7801] QAT: Invalid ioctl -805268463 [ 623.204488][ T11] hsr_slave_0: left promiscuous mode [ 623.283788][ T11] hsr_slave_1: left promiscuous mode [ 623.359867][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.367963][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.504577][ T5078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 623.517137][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.536096][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.547838][ T5078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 623.557857][ T5078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 623.574769][ T5078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 623.595729][ T5078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 623.609252][ T5078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 623.704047][ T11] veth1_macvtap: left promiscuous mode [ 623.710435][ T11] veth0_macvtap: left promiscuous mode [ 623.716503][ T11] veth1_vlan: left promiscuous mode [ 623.722740][ T11] veth0_vlan: left promiscuous mode [ 624.009128][ T7818] binder: 7813:7818 ioctl 4018620d 0 returned -22 [ 624.519669][ T11] team0 (unregistering): Port device team_slave_1 removed [ 624.568146][ T11] team0 (unregistering): Port device team_slave_0 removed [ 624.787119][ T11] team0 (unregistering): Port device dummy0 removed [ 625.350411][ T7826] loop3: detected capacity change from 0 to 512 [ 625.609999][ T7826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.623608][ T7826] ext4 filesystem being mounted at /root/syzkaller-testdir3985020022/syzkaller.ZLbCko/104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.717166][ T5071] Bluetooth: hci1: command tx timeout [ 626.003304][ T5121] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 626.111717][ T29] audit: type=1800 audit(1718297129.966:120): pid=7838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 626.138528][ T7838] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 626.301682][ T5121] usb 5-1: Using ep0 maxpacket: 8 [ 626.359381][ T7819] chnl_net:caif_netlink_parms(): no params data found [ 626.455502][ T5121] usb 5-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=5a.b1 [ 626.465132][ T5121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.514699][ T5121] usb 5-1: config 0 descriptor?? [ 626.606622][ T5121] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 626.788784][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.916071][ T5121] usb 5-1: USB disconnect, device number 8 [ 627.762352][ T5071] Bluetooth: hci1: command tx timeout [ 628.383371][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.391272][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.400472][ T7819] bridge_slave_0: entered allmulticast mode [ 628.409135][ T7819] bridge_slave_0: entered promiscuous mode [ 628.441180][ T7850] loop2: detected capacity change from 0 to 2048 [ 628.480884][ T7853] process 'syz-executor.3' launched './file2' with NULL argv: empty string added [ 628.525472][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.533397][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.541103][ T7819] bridge_slave_1: entered allmulticast mode [ 628.555749][ T7819] bridge_slave_1: entered promiscuous mode [ 628.628133][ T7850] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 628.636719][ T7850] UDF-fs: Scanning with blocksize 512 failed [ 628.775730][ T7850] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 628.819127][ T7850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.967358][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.115819][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.501708][ T7819] team0: Port device team_slave_0 added [ 629.563748][ T7819] team0: Port device team_slave_1 added [ 629.842282][ T5071] Bluetooth: hci1: command tx timeout [ 629.997679][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.007940][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.034653][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.131276][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.139962][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.166524][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.637838][ T7819] hsr_slave_0: entered promiscuous mode [ 630.684238][ T7819] hsr_slave_1: entered promiscuous mode [ 630.752148][ T7819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.760092][ T7819] Cannot create hsr debugfs directory [ 631.095596][ T7868] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 631.129194][ T29] audit: type=1800 audit(1718297134.946:121): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1942 res=0 errno=0 [ 631.646195][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 631.926071][ T5071] Bluetooth: hci1: command tx timeout [ 632.832699][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.842846][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.974972][ T7819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 633.080806][ T7819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 633.238584][ T7819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 633.311257][ T7819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 633.715334][ T7882] sctp: failed to load transform for md5: -2 [ 634.242727][ T7896] loop2: detected capacity change from 0 to 2048 [ 634.398057][ T7896] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 634.406885][ T7896] UDF-fs: Scanning with blocksize 512 failed [ 634.518451][ T7896] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 634.560940][ T7896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 634.628993][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.873901][ T7819] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.969795][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.977651][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.124688][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.132624][ T5706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.375322][ T7909] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 636.411535][ T29] audit: type=1800 audit(1718297140.246:122): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1945 res=0 errno=0 [ 637.500530][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.045288][ T7819] veth0_vlan: entered promiscuous mode [ 638.141328][ T7819] veth1_vlan: entered promiscuous mode [ 638.269098][ T7929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.277037][ T7929] IPv6: NLM_F_CREATE should be set when creating new route [ 638.284628][ T7929] IPv6: NLM_F_CREATE should be set when creating new route [ 638.504972][ T7819] veth0_macvtap: entered promiscuous mode [ 638.554404][ T7819] veth1_macvtap: entered promiscuous mode [ 638.767402][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.778882][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.798050][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.813866][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.824384][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.835274][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.845637][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.856452][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.867194][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.878111][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.914858][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.055428][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.066393][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.078717][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.101351][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.114049][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.125001][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.135163][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.146087][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.156287][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.167078][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.183613][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.344909][ T7935] loop4: detected capacity change from 0 to 2048 [ 639.413258][ T7935] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 639.421484][ T7935] UDF-fs: Scanning with blocksize 512 failed [ 639.444552][ T7819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.453938][ T7819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.463146][ T7819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.472528][ T7819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.533738][ T7935] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 639.577928][ T7935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 640.337687][ T29] audit: type=1326 audit(1718297144.196:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 640.361237][ T29] audit: type=1326 audit(1718297144.196:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 640.436437][ T29] audit: type=1326 audit(1718297144.286:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 640.459887][ T29] audit: type=1326 audit(1718297144.286:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 640.484048][ T29] audit: type=1326 audit(1718297144.286:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 640.507487][ T29] audit: type=1326 audit(1718297144.286:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 640.532620][ T29] audit: type=1326 audit(1718297144.286:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 640.556111][ T29] audit: type=1326 audit(1718297144.306:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 640.579388][ T29] audit: type=1326 audit(1718297144.306:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf73cf579 code=0x7ffc0000 [ 641.426929][ T7953] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 643.435910][ T7973] loop3: detected capacity change from 0 to 1764 [ 644.907353][ T7981] loop2: detected capacity change from 0 to 2048 [ 645.023625][ T7981] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 645.037957][ T7981] UDF-fs: Scanning with blocksize 512 failed [ 645.324228][ T7981] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 645.383699][ T7981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.640395][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 645.640484][ T29] audit: type=1800 audit(1718297149.526:156): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1961 res=0 errno=0 [ 645.671080][ T7992] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 646.069529][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.077903][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.288985][ T5120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.297333][ T5120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.697382][ T7997] loop2: detected capacity change from 0 to 1024 [ 646.759502][ T7997] EXT4-fs (loop2): inodes count not valid: 32 vs 12 [ 647.867486][ T8004] loop0: detected capacity change from 0 to 2048 [ 647.949705][ T8004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 647.957528][ T8004] EXT4-fs: Ignoring removed nobh option [ 647.991301][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.001691][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.052228][ T7997] loop2: detected capacity change from 0 to 8192 [ 648.089256][ T7997] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 648.226473][ T8004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.276115][ T8013] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 648.425003][ T8013] EXT4-fs (loop0): Remounting filesystem read-only [ 648.785075][ T6664] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.443776][ T29] audit: type=1800 audit(1718297154.286:157): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1962 res=0 errno=0 [ 650.486042][ T8031] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 650.705985][ T8030] loop1: detected capacity change from 0 to 2048 [ 650.962255][ T8030] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 650.979085][ T8030] UDF-fs: Scanning with blocksize 512 failed [ 651.122310][ T8030] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 651.221041][ T8030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.260551][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 651.270676][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 651.822107][ T8040] binder: 8036:8040 ioctl 4018620d 0 returned -22 [ 654.081602][ T8057] loop2: detected capacity change from 0 to 128 [ 654.161495][ T8057] FAT-fs (loop2): Unrecognized mount option "1844674407370955161518446744073709551615ÿÿÿÿF-ÿI"$Hˆ%ʃqià¯G¦˜„¹Ù @¥_´áÍ‹.*™UÊt‘²?ÄK‘›þ¾*kÿb•7õò®Œ”Áw°~Í–$ [ 654.161495][ T8057] æ÷8òÖ¦²Yj[ƒß>3üZ6î´–½æz¶°A¬$&23üZ6î´–½æz¶°A¬$&2 1 [ 706.819960][ T5078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 706.831966][ T5078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 706.848743][ T5078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 706.860927][ T5078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 706.871559][ T5078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 708.377913][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 708.962389][ T5078] Bluetooth: hci1: command tx timeout [ 709.805096][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.813172][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.820972][ T8431] bridge_slave_0: entered allmulticast mode [ 709.829628][ T8431] bridge_slave_0: entered promiscuous mode [ 709.937290][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.944983][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.959061][ T8431] bridge_slave_1: entered allmulticast mode [ 709.968561][ T8431] bridge_slave_1: entered promiscuous mode [ 710.205480][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.316895][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.614846][ T8431] team0: Port device team_slave_0 added [ 710.646222][ T8431] team0: Port device team_slave_1 added [ 710.796029][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.803520][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.829848][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.924743][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.932130][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.958981][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.052012][ T5078] Bluetooth: hci1: command tx timeout [ 711.764318][ T8431] hsr_slave_0: entered promiscuous mode [ 711.814879][ T8431] hsr_slave_1: entered promiscuous mode [ 711.861400][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.869257][ T8431] Cannot create hsr debugfs directory [ 713.123080][ T5078] Bluetooth: hci1: command tx timeout [ 713.187548][ T8431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.368729][ T8431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.835236][ T8431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.020886][ T8431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.558954][ T8431] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 714.607215][ T8431] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 714.733974][ T8431] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.013401][ T8431] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.203937][ T5078] Bluetooth: hci1: command tx timeout [ 715.745730][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.752649][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.444106][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.660535][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.774038][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.781607][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.933371][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.941013][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.314939][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.976204][ T8431] veth0_vlan: entered promiscuous mode [ 720.107235][ T8431] veth1_vlan: entered promiscuous mode [ 720.622871][ T8431] veth0_macvtap: entered promiscuous mode [ 720.740949][ T8431] veth1_macvtap: entered promiscuous mode [ 721.059747][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.070644][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.081272][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.092478][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.102671][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.123404][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.136241][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.147053][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.157252][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.168042][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.178329][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.189134][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.208820][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.612984][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.623720][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.638540][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.650835][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.661026][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.671961][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.682679][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.693755][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.704895][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.717218][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.728039][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.744258][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.768629][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.857661][ T8431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.866829][ T8431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.876074][ T8431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.885355][ T8431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.143792][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.323667][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.557403][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.038562][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.504584][ T49] bridge_slave_1: left allmulticast mode [ 728.510599][ T49] bridge_slave_1: left promiscuous mode [ 728.519299][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.703675][ T49] bridge_slave_0: left allmulticast mode [ 728.709624][ T49] bridge_slave_0: left promiscuous mode [ 728.718037][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.890186][ T5071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 729.078772][ T5071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 729.089733][ T5071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 729.133324][ T5071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 729.151567][ T5071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 729.160800][ T5071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 729.474266][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.587927][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.653749][ T49] bond0 (unregistering): Released all slaves [ 729.674991][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 730.930955][ T49] hsr_slave_0: left promiscuous mode [ 730.958898][ T49] hsr_slave_1: left promiscuous mode [ 730.970249][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.978321][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.989659][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.997627][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.038107][ T49] veth1_macvtap: left promiscuous mode [ 731.056839][ T49] veth0_macvtap: left promiscuous mode [ 731.063011][ T49] veth1_vlan: left promiscuous mode [ 731.068634][ T49] veth0_vlan: left promiscuous mode [ 731.452780][ T5078] Bluetooth: hci0: command tx timeout [ 732.267093][ T49] team0 (unregistering): Port device team_slave_1 removed [ 732.360638][ T49] team0 (unregistering): Port device team_slave_0 removed [ 732.662260][ T49] team0 (unregistering): Port device dummy0 removed [ 733.497641][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.509057][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.583024][ T5078] Bluetooth: hci0: command tx timeout [ 734.160295][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.168594][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.264230][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 735.161620][ T8557] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 735.193260][ T29] audit: type=1800 audit(1718297238.996:164): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 735.389247][ T8557] team0: Port device dummy0 added [ 735.455081][ T5071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 735.469013][ T5071] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 735.486295][ T5071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 735.515735][ T5071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 735.533225][ T5071] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 735.543694][ T5071] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 735.604276][ T5071] Bluetooth: hci0: command tx timeout [ 736.447319][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.455670][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.463876][ T8529] bridge_slave_0: entered allmulticast mode [ 736.495118][ T8529] bridge_slave_0: entered promiscuous mode [ 736.562463][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.574451][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.592644][ T8529] bridge_slave_1: entered allmulticast mode [ 736.602913][ T8529] bridge_slave_1: entered promiscuous mode [ 737.008512][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.115550][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.291441][ T8529] team0: Port device team_slave_0 added [ 737.441432][ T8529] team0: Port device team_slave_1 added [ 737.607841][ T5071] Bluetooth: hci4: command tx timeout [ 737.682075][ T5071] Bluetooth: hci0: command tx timeout [ 737.854561][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.861860][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.888407][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.912544][ T8561] chnl_net:caif_netlink_parms(): no params data found [ 738.061618][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.068968][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.095538][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.714657][ T8529] hsr_slave_0: entered promiscuous mode [ 738.776356][ T8529] hsr_slave_1: entered promiscuous mode [ 738.814525][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.822512][ T8529] Cannot create hsr debugfs directory [ 739.063011][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.073273][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.685881][ T5071] Bluetooth: hci4: command tx timeout [ 740.307587][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.317369][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.325403][ T8561] bridge_slave_0: entered allmulticast mode [ 740.334736][ T8561] bridge_slave_0: entered promiscuous mode [ 740.444793][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.452719][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.460491][ T8561] bridge_slave_1: entered allmulticast mode [ 740.477223][ T8561] bridge_slave_1: entered promiscuous mode [ 740.903215][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.063856][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.121513][ T8561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.273388][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.420642][ T8561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.460683][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.762033][ T5071] Bluetooth: hci4: command tx timeout [ 741.981567][ T8561] team0: Port device team_slave_0 added [ 742.219159][ T8561] team0: Port device team_slave_1 added [ 742.274545][ T8594] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 742.288092][ T49] bridge_slave_1: left allmulticast mode [ 742.294314][ T49] bridge_slave_1: left promiscuous mode [ 742.301049][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.388655][ T49] bridge_slave_0: left allmulticast mode [ 742.394729][ T49] bridge_slave_0: left promiscuous mode [ 742.401083][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.932938][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.968171][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.007804][ T49] bond0 (unregistering): Released all slaves [ 743.444482][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.453593][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.482064][ T8561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.525266][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.532598][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.563301][ T8561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.792084][ T8529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 743.830344][ T8529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 743.842929][ T5071] Bluetooth: hci4: command tx timeout [ 744.024227][ T8529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 744.420814][ T8561] hsr_slave_0: entered promiscuous mode [ 744.480064][ T8561] hsr_slave_1: entered promiscuous mode [ 744.512284][ T8561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.520274][ T8561] Cannot create hsr debugfs directory [ 744.532180][ T8529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 744.787242][ T49] hsr_slave_0: left promiscuous mode [ 744.825880][ T49] hsr_slave_1: left promiscuous mode [ 744.845234][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.853949][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.925981][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.934070][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.013040][ T49] veth1_macvtap: left promiscuous mode [ 745.018734][ T49] veth0_macvtap: left promiscuous mode [ 745.024901][ T49] veth1_vlan: left promiscuous mode [ 745.030408][ T49] veth0_vlan: left promiscuous mode [ 745.931566][ T49] team0 (unregistering): Port device team_slave_1 removed [ 745.993805][ T49] team0 (unregistering): Port device team_slave_0 removed [ 746.260724][ T49] team0 (unregistering): Port device dummy0 removed [ 748.052457][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.100190][ T8561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 748.199855][ T8561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 748.267413][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.296670][ T8561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 748.399093][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.406767][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.424141][ T8561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 748.601392][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.609039][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.086008][ T8529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 750.365809][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.584427][ T8561] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.740745][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.748426][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.909452][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.917343][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.641600][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.209159][ T8529] veth0_vlan: entered promiscuous mode [ 753.358363][ T8529] veth1_vlan: entered promiscuous mode [ 753.711910][ T8529] veth0_macvtap: entered promiscuous mode [ 753.769236][ T8529] veth1_macvtap: entered promiscuous mode [ 753.961394][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.975141][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.991247][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.003337][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.013755][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.028763][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.042103][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.061638][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.072090][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.085221][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.109618][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.186520][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.202022][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.214257][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.225198][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.235368][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.246088][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.256222][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.267010][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.277117][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.287760][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.307405][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.489451][ T8529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.504275][ T8529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.514536][ T8529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.523556][ T8529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.594676][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.433104][ T8561] veth0_vlan: entered promiscuous mode [ 757.556428][ T8561] veth1_vlan: entered promiscuous mode [ 757.852934][ T8561] veth0_macvtap: entered promiscuous mode [ 757.944393][ T8561] veth1_macvtap: entered promiscuous mode [ 758.168122][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.179037][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.194452][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.206261][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.216377][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.227116][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.237193][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.247912][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.257970][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.268648][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.278681][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.294139][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.309478][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.438751][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.451327][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.461440][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.472427][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.484147][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.499256][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.510491][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.521237][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.531305][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.542020][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.552227][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.563100][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.577550][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.651145][ T8561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.663375][ T8561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.672653][ T8561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.681562][ T8561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.261995][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.270030][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.477774][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.486497][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.516344][ T8662] overlay: Unknown parameter '2VCý1seté•“Œ8' [ 765.409663][ T5078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 765.419512][ T5078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 765.438510][ T5078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 765.499460][ T5078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 765.569828][ T5078] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 765.586026][ T5078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 769.184724][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.394535][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.713836][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.429637][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.910967][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.919328][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.062110][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.070235][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.325054][ T59] bridge_slave_1: left allmulticast mode [ 771.330994][ T59] bridge_slave_1: left promiscuous mode [ 771.337942][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.408019][ T59] bridge_slave_0: left allmulticast mode [ 771.414119][ T59] bridge_slave_0: left promiscuous mode [ 771.420925][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.445156][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 771.773654][ T5078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 771.784248][ T5078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 771.824211][ T5078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 771.838717][ T5078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 771.961516][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 771.992719][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 771.998415][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 772.015560][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 772.047745][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 772.058070][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 772.092675][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 772.118481][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 772.145247][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.156028][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.167430][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.177887][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 772.191218][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 772.194371][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 772.200608][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.273886][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.305499][ T25] usb 3-1: config 0 descriptor?? [ 772.371620][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.445940][ T59] bond0 (unregistering): Released all slaves [ 773.192753][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 773.199550][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 773.290728][ T25] usb 3-1: USB disconnect, device number 11 [ 773.705990][ T59] hsr_slave_0: left promiscuous mode [ 773.760862][ T59] hsr_slave_1: left promiscuous mode [ 773.791316][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.799402][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.846239][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.860536][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.932658][ T59] veth1_macvtap: left promiscuous mode [ 773.938472][ T59] veth0_macvtap: left promiscuous mode [ 773.944733][ T59] veth1_vlan: left promiscuous mode [ 773.950332][ T59] veth0_vlan: left promiscuous mode [ 774.226054][ T51] Bluetooth: hci1: command tx timeout [ 774.372933][ T51] Bluetooth: hci2: command tx timeout [ 774.997913][ T59] team0 (unregistering): Port device team_slave_1 removed [ 775.096902][ T59] team0 (unregistering): Port device team_slave_0 removed [ 775.401490][ T59] team0 (unregistering): Port device dummy0 removed [ 776.242215][ T51] Bluetooth: hci1: command tx timeout [ 776.402073][ T51] Bluetooth: hci2: command tx timeout [ 776.658923][ T8707] chnl_net:caif_netlink_parms(): no params data found [ 777.085403][ T8709] chnl_net:caif_netlink_parms(): no params data found [ 777.175067][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.183723][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 778.001944][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.009903][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.018280][ T8707] bridge_slave_0: entered allmulticast mode [ 778.028129][ T8707] bridge_slave_0: entered promiscuous mode [ 778.214568][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.222995][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.230976][ T8707] bridge_slave_1: entered allmulticast mode [ 778.240921][ T8707] bridge_slave_1: entered promiscuous mode [ 778.322058][ T51] Bluetooth: hci1: command tx timeout [ 778.496827][ T51] Bluetooth: hci2: command tx timeout [ 778.530278][ T8707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.557181][ T8707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.739858][ T8707] team0: Port device team_slave_0 added [ 778.840653][ T8707] team0: Port device team_slave_1 added [ 779.116983][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.127185][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.154175][ T8707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.457875][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.465934][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.473957][ T8709] bridge_slave_0: entered allmulticast mode [ 779.490774][ T8709] bridge_slave_0: entered promiscuous mode [ 779.504582][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.512089][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.540122][ T8707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.630299][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.638329][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.646263][ T8709] bridge_slave_1: entered allmulticast mode [ 779.655027][ T8709] bridge_slave_1: entered promiscuous mode [ 779.938558][ T8709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.070689][ T8709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.398238][ T8776] vlan0: entered promiscuous mode [ 780.435943][ T8776] team0: Port device vlan0 added [ 780.444391][ T51] Bluetooth: hci1: command tx timeout [ 780.562020][ T51] Bluetooth: hci2: command tx timeout [ 780.770168][ T8707] hsr_slave_0: entered promiscuous mode [ 780.874536][ T8707] hsr_slave_1: entered promiscuous mode [ 780.928889][ T8709] team0: Port device team_slave_0 added [ 781.209788][ T8709] team0: Port device team_slave_1 added [ 781.536134][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.545733][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.573085][ T8709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.794961][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.802693][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.829249][ T8709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.506871][ T8709] hsr_slave_0: entered promiscuous mode [ 782.549075][ T8709] hsr_slave_1: entered promiscuous mode [ 782.602412][ T8709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.610336][ T8709] Cannot create hsr debugfs directory [ 782.724184][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.009768][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.288762][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.487389][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.233239][ T8707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 784.330483][ T59] bridge_slave_1: left allmulticast mode [ 784.336645][ T59] bridge_slave_1: left promiscuous mode [ 784.343513][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.427196][ T59] bridge_slave_0: left allmulticast mode [ 784.433351][ T59] bridge_slave_0: left promiscuous mode [ 784.440121][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.010367][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.066494][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.084873][ T59] bond0 (unregistering): Released all slaves [ 785.133399][ T6233] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 785.148044][ T8707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 785.254085][ T8707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.370407][ T8707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 785.410944][ T6233] usb 5-1: Using ep0 maxpacket: 32 [ 785.543411][ T6233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.553960][ T6233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.565154][ T6233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.575192][ T6233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 785.588344][ T6233] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 785.597773][ T6233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.680647][ T6233] usb 5-1: config 0 descriptor?? [ 785.851385][ T59] hsr_slave_0: left promiscuous mode [ 785.881441][ T59] hsr_slave_1: left promiscuous mode [ 785.942245][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.950194][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.993260][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.001185][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.029055][ T59] veth1_macvtap: left promiscuous mode [ 786.043207][ T59] veth0_macvtap: left promiscuous mode [ 786.049409][ T59] veth1_vlan: left promiscuous mode [ 786.055662][ T59] veth0_vlan: left promiscuous mode [ 786.470276][ T6233] usbhid 5-1:0.0: can't add hid device: -71 [ 786.476886][ T6233] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 786.489990][ T6233] usb 5-1: USB disconnect, device number 9 [ 786.921224][ T59] team0 (unregistering): Port device team_slave_1 removed [ 787.050160][ T59] team0 (unregistering): Port device team_slave_0 removed [ 787.202089][ T59] team0 (unregistering): Port device dummy0 removed [ 788.361498][ T8709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.490343][ T8709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.582410][ T8709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.708136][ T8709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.954689][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.281625][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.466163][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.474207][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.622983][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.630665][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.918513][ T51] Bluetooth: hci3: unexpected cc 0x042d length: 63 > 7 [ 789.929246][ T51] Bluetooth: hci3: unexpected event for opcode 0x042d [ 790.790838][ T8709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.882341][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 791.080910][ T8709] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.209349][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.217289][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.262394][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 791.275553][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 791.290726][ T10] usb 5-1: New USB device found, idVendor=75d3, idProduct=317c, bcdDevice= 4.5e [ 791.300379][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.384855][ T10] usb 5-1: config 0 descriptor?? [ 791.395652][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.403572][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.502877][ T10] usb 5-1: bad CDC descriptors [ 791.680430][ T8696] usb 5-1: USB disconnect, device number 10 [ 792.392323][ T8707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.445956][ T8707] veth0_vlan: entered promiscuous mode [ 793.617328][ T8707] veth1_vlan: entered promiscuous mode [ 794.005623][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 794.016286][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 794.032685][ T51] Bluetooth: hci3: hardware error 0x00 [ 794.176174][ T8839] random: crng reseeded on system resumption [ 794.450598][ T8707] veth0_macvtap: entered promiscuous mode [ 794.589546][ T8707] veth1_macvtap: entered promiscuous mode [ 794.759936][ T8709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.852918][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.863856][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.874051][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.886765][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.898022][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.908863][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.919168][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.930032][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.940201][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.959493][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.978679][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.089528][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.101083][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.111308][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.123094][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.133854][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.144816][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.163355][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.173379][ T8841] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 795.176408][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.182484][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 795.203390][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.214204][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.230337][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.274494][ T59] bridge_slave_1: left allmulticast mode [ 795.280532][ T59] bridge_slave_1: left promiscuous mode [ 795.294311][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.342971][ T59] bridge_slave_0: left allmulticast mode [ 795.349011][ T59] bridge_slave_0: left promiscuous mode [ 795.366896][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.082250][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 796.217264][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.260838][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.318776][ T59] bond0 (unregistering): Released all slaves [ 796.393253][ T8707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.405406][ T8707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.414995][ T8707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.424048][ T8707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.232916][ T8709] veth0_vlan: entered promiscuous mode [ 797.364997][ T59] hsr_slave_0: left promiscuous mode [ 797.404969][ T59] hsr_slave_1: left promiscuous mode [ 797.434034][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.444416][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.525815][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.534387][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.634150][ T59] veth1_macvtap: left promiscuous mode [ 797.640054][ T59] veth0_macvtap: left promiscuous mode [ 797.646388][ T59] veth1_vlan: left promiscuous mode [ 797.653763][ T59] veth0_vlan: left promiscuous mode [ 798.740717][ T59] team0 (unregistering): Port device team_slave_1 removed [ 798.769882][ T59] team0 (unregistering): Port device team_slave_0 removed [ 799.124923][ T59] team0 (unregistering): Port device dummy0 removed [ 799.212982][ T8849] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 799.221383][ T8849] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 799.771572][ T8709] veth1_vlan: entered promiscuous mode [ 800.209223][ T8854] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 800.247635][ T8709] veth0_macvtap: entered promiscuous mode [ 800.276948][ T29] audit: type=1800 audit(1718297304.066:165): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1941 res=0 errno=0 [ 800.379547][ T8709] veth1_macvtap: entered promiscuous mode [ 800.627933][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.639813][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.652445][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.666028][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.676678][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.689927][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.701255][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.712368][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.722990][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.733964][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.750010][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.101401][ T5078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.120809][ T5078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.150695][ T5078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.159703][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.171157][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.181491][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.199818][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.212983][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.224630][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.234896][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.245819][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.256136][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.266931][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.282919][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.317828][ T5078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.328602][ T5078] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 801.357121][ T5078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 801.494544][ T8709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.506620][ T8709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.516542][ T8709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.527549][ T8709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.982694][ T8858] chnl_net:caif_netlink_parms(): no params data found [ 803.447642][ T5078] Bluetooth: hci4: command tx timeout [ 804.920233][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.928210][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.936423][ T8858] bridge_slave_0: entered allmulticast mode [ 804.946409][ T8858] bridge_slave_0: entered promiscuous mode [ 805.059405][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.067824][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.075947][ T8858] bridge_slave_1: entered allmulticast mode [ 805.094949][ T8858] bridge_slave_1: entered promiscuous mode [ 805.411584][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.524806][ T5078] Bluetooth: hci4: command tx timeout [ 805.526313][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.952549][ T8858] team0: Port device team_slave_0 added [ 805.992304][ T8858] team0: Port device team_slave_1 added [ 806.270718][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.278124][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.304677][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.489314][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.496931][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.525394][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.379054][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.518362][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.607091][ T5078] Bluetooth: hci4: command tx timeout [ 807.859864][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.969283][ T8858] hsr_slave_0: entered promiscuous mode [ 808.061915][ T8858] hsr_slave_1: entered promiscuous mode [ 808.083124][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.093468][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.113288][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 808.138560][ T8858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.146547][ T8858] Cannot create hsr debugfs directory [ 808.191445][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 808.224636][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 808.243111][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.261837][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.492257][ T8913] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 808.500830][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 808.749918][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.758253][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.156299][ T59] bridge_slave_1: left allmulticast mode [ 809.162441][ T59] bridge_slave_1: left promiscuous mode [ 809.169190][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.218023][ T59] bridge_slave_0: left allmulticast mode [ 809.224122][ T59] bridge_slave_0: left promiscuous mode [ 809.230845][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.278438][ T29] audit: type=1800 audit(1718297313.166:166): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1941 res=0 errno=0 [ 809.682156][ T51] Bluetooth: hci4: command tx timeout [ 809.791131][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.831493][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.853058][ T59] bond0 (unregistering): Released all slaves [ 809.872427][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.880616][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.961287][ T8917] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 810.408677][ T51] Bluetooth: hci5: command tx timeout [ 810.874241][ T59] hsr_slave_0: left promiscuous mode [ 810.903813][ T59] hsr_slave_1: left promiscuous mode [ 810.913661][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.927773][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.966759][ T8924] loop0: detected capacity change from 0 to 2048 [ 810.991547][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.999808][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.051366][ T59] veth1_macvtap: left promiscuous mode [ 811.061243][ T59] veth0_macvtap: left promiscuous mode [ 811.067374][ T59] veth1_vlan: left promiscuous mode [ 811.073914][ T59] veth0_vlan: left promiscuous mode [ 811.130937][ T8924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.508280][ T8707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.002201][ T59] team0 (unregistering): Port device vlan0 removed [ 812.288846][ T59] team0 (unregistering): Port device team_slave_1 removed [ 812.407366][ T59] team0 (unregistering): Port device team_slave_0 removed [ 812.482466][ T51] Bluetooth: hci5: command tx timeout [ 813.102933][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.111081][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.563662][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.572785][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.210540][ T8858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 814.305577][ T8858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 814.368861][ T8909] chnl_net:caif_netlink_parms(): no params data found [ 814.393310][ T8858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 814.480676][ T8858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 814.610944][ T51] Bluetooth: hci5: command tx timeout [ 815.701602][ T8962] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 815.710350][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 816.114672][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.123455][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.131375][ T8909] bridge_slave_0: entered allmulticast mode [ 816.140252][ T8909] bridge_slave_0: entered promiscuous mode [ 816.343346][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.358867][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.367147][ T8909] bridge_slave_1: entered allmulticast mode [ 816.376869][ T8909] bridge_slave_1: entered promiscuous mode [ 816.492550][ T8964] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 816.519016][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.534225][ T29] audit: type=1800 audit(1718297320.356:167): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 816.642684][ T51] Bluetooth: hci5: command tx timeout [ 816.781372][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.833452][ T51] Bluetooth: hci2: Invalid handle: 0x8003 > 0x0eff [ 816.893817][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.075506][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.118109][ T8909] team0: Port device team_slave_0 added [ 817.208794][ T8909] team0: Port device team_slave_1 added [ 817.344506][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.352459][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.430632][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.438717][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.793041][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.800377][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.826898][ T8909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.034604][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.042077][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.068603][ T8909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.597710][ T8909] hsr_slave_0: entered promiscuous mode [ 818.676025][ T8909] hsr_slave_1: entered promiscuous mode [ 818.688202][ T8909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.696781][ T8909] Cannot create hsr debugfs directory [ 819.263833][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.472396][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.693207][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.867320][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.455710][ T59] bridge_slave_1: left allmulticast mode [ 820.462100][ T59] bridge_slave_1: left promiscuous mode [ 820.468873][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.563549][ T59] bridge_slave_0: left allmulticast mode [ 820.569593][ T59] bridge_slave_0: left promiscuous mode [ 820.576788][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.239669][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.281359][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.373359][ T59] bond0 (unregistering): Released all slaves [ 822.353590][ T59] hsr_slave_0: left promiscuous mode [ 822.374815][ T59] hsr_slave_1: left promiscuous mode [ 822.414393][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.422663][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.443322][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.451016][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.498690][ T59] veth1_macvtap: left promiscuous mode [ 822.504801][ T59] veth0_macvtap: left promiscuous mode [ 822.510648][ T59] veth1_vlan: left promiscuous mode [ 822.516589][ T59] veth0_vlan: left promiscuous mode [ 822.612101][ T8999] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 823.391845][ T59] team0 (unregistering): Port device team_slave_1 removed [ 823.520683][ T29] audit: type=1800 audit(1718297327.396:168): pid=9002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 823.548055][ T59] team0 (unregistering): Port device team_slave_0 removed [ 823.910803][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.957846][ T9002] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 824.109780][ T9002] team0: Port device dummy0 added [ 824.516364][ T8909] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 824.604058][ T8909] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 824.726683][ T8909] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 824.808222][ T8909] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 826.225662][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.576132][ T8909] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.730324][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.738297][ T6422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.832687][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.840446][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.457500][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.468477][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.987844][ T8858] veth0_vlan: entered promiscuous mode [ 828.210268][ T8858] veth1_vlan: entered promiscuous mode [ 828.793465][ T8858] veth0_macvtap: entered promiscuous mode [ 828.907964][ T8858] veth1_macvtap: entered promiscuous mode [ 829.223294][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.234294][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.244851][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.262151][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.273462][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.284394][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.294817][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.305888][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.323654][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.502616][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.513472][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.523624][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.534300][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.544494][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.558869][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.569663][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.580404][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.594759][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.751579][ T8858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.770631][ T8858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.781612][ T8858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.790821][ T8858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.116033][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.881002][ T8909] veth0_vlan: entered promiscuous mode [ 831.039499][ T8909] veth1_vlan: entered promiscuous mode [ 831.188346][ T9047] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 831.647117][ T29] audit: type=1800 audit(1718297335.386:169): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 831.675155][ T9050] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 831.833190][ T8909] veth0_macvtap: entered promiscuous mode [ 831.947986][ T8909] veth1_macvtap: entered promiscuous mode [ 832.280415][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.293521][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.303985][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.314660][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.329338][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.341082][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.351176][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.361943][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.372108][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.382871][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.397201][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.467616][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.478386][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.489107][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.500074][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.510153][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.520973][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.534145][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.545924][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.556041][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.566732][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.581090][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.981353][ T8909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.991100][ T8909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.000393][ T8909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.009625][ T8909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.202992][ T780] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 836.472450][ T780] usb 2-1: Using ep0 maxpacket: 32 [ 836.625908][ T780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.636627][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.648022][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.658033][ T780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 836.671505][ T780] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 836.681240][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.766723][ T780] usb 2-1: config 0 descriptor?? [ 836.990369][ T8874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.998980][ T8874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.091476][ T9105] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 837.227192][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.239141][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.358181][ T780] hid-generic 0003:1B96:9F0A.0009: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0 [ 837.817983][ T29] audit: type=1800 audit(1718297341.706:170): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 837.848848][ T9110] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 837.918371][ T9111] ===================================================== [ 837.927451][ T9111] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x366/0x24b0 [ 837.935639][ T9111] _copy_to_iter+0x366/0x24b0 [ 837.940482][ T9111] raw_recvmsg+0x2b8/0x9e0 [ 837.945200][ T9111] sock_recvmsg+0x2c4/0x340 [ 837.949891][ T9111] ____sys_recvmsg+0x18a/0x620 [ 837.959594][ T9111] ___sys_recvmsg+0x223/0x840 [ 837.965548][ T9111] do_recvmmsg+0x627/0xfd0 [ 837.970123][ T9111] __sys_recvmmsg+0x10a/0x430 [ 837.975170][ T9111] __ia32_compat_sys_recvmmsg_time32+0xf5/0x180 [ 837.981613][ T9111] ia32_sys_call+0x2797/0x40a0 [ 837.986757][ T9111] __do_fast_syscall_32+0xb4/0x120 [ 837.992311][ T9111] do_fast_syscall_32+0x38/0x80 [ 837.997306][ T9111] do_SYSENTER_32+0x1f/0x30 [ 838.004115][ T9111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.010729][ T9111] [ 838.013919][ T9111] Uninit was created at: [ 838.018342][ T9111] kmem_cache_alloc_node+0x622/0xc90 [ 838.023850][ T9111] kmalloc_reserve+0x13d/0x4a0 [ 838.028850][ T9111] __alloc_skb+0x35b/0x7a0 [ 838.033527][ T9111] alloc_skb_with_frags+0xc8/0xbf0 [ 838.038788][ T9111] sock_alloc_send_pskb+0xa81/0xbf0 [ 838.044285][ T9111] j1939_sk_sendmsg+0xc0a/0x2730 [ 838.049353][ T9111] __sock_sendmsg+0x30f/0x380 [ 838.059819][ T9111] ____sys_sendmsg+0x877/0xb60 [ 838.065972][ T9111] ___sys_sendmsg+0x28d/0x3c0 [ 838.070805][ T9111] __sys_sendmsg+0x225/0x3c0 [ 838.075642][ T9111] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 838.081232][ T9111] ia32_sys_call+0x209f/0x40a0 [ 838.086331][ T9111] __do_fast_syscall_32+0xb4/0x120 [ 838.091852][ T9111] do_fast_syscall_32+0x38/0x80 [ 838.096908][ T9111] do_SYSENTER_32+0x1f/0x30 [ 838.101566][ T9111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.108259][ T9111] [ 838.110639][ T9111] Bytes 12-15 of 16 are uninitialized [ 838.116295][ T9111] Memory access of size 16 starts at ffff88802fc0f910 [ 838.123307][ T9111] Data copied to user address 00000000200017c0 [ 838.129536][ T9111] [ 838.132043][ T9111] CPU: 0 PID: 9111 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 838.142286][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 838.152615][ T9111] ===================================================== [ 838.164485][ T9111] Disabling lock debugging due to kernel taint [ 838.170768][ T9111] Kernel panic - not syncing: kmsan.panic set ... [ 838.177289][ T9111] CPU: 0 PID: 9111 Comm: syz-executor.4 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 838.188899][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 838.199082][ T9111] Call Trace: [ 838.202465][ T9111] [ 838.205486][ T9111] dump_stack_lvl+0x216/0x2d0 [ 838.210327][ T9111] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 838.216295][ T9111] dump_stack+0x1e/0x30 [ 838.220612][ T9111] panic+0x4e2/0xcd0 [ 838.224705][ T9111] ? kmsan_get_metadata+0xf1/0x1d0 [ 838.229962][ T9111] kmsan_report+0x2d5/0x2e0 [ 838.234590][ T9111] ? finish_task_switch+0x1c8/0x8f0 [ 838.239946][ T9111] ? kmsan_internal_check_memory+0x48c/0x560 [ 838.246093][ T9111] ? kmsan_copy_to_user+0xd5/0xf0 [ 838.251236][ T9111] ? _copy_to_iter+0x366/0x24b0 [ 838.256256][ T9111] ? raw_recvmsg+0x2b8/0x9e0 [ 838.260998][ T9111] ? sock_recvmsg+0x2c4/0x340 [ 838.265881][ T9111] ? ____sys_recvmsg+0x18a/0x620 [ 838.271037][ T9111] ? ___sys_recvmsg+0x223/0x840 [ 838.276030][ T9111] ? do_recvmmsg+0x627/0xfd0 [ 838.280789][ T9111] ? __sys_recvmmsg+0x10a/0x430 [ 838.285809][ T9111] ? __ia32_compat_sys_recvmmsg_time32+0xf5/0x180 [ 838.292379][ T9111] ? ia32_sys_call+0x2797/0x40a0 [ 838.297472][ T9111] ? __do_fast_syscall_32+0xb4/0x120 [ 838.302907][ T9111] ? do_fast_syscall_32+0x38/0x80 [ 838.308094][ T9111] ? do_SYSENTER_32+0x1f/0x30 [ 838.312921][ T9111] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.319590][ T9111] ? kmsan_get_metadata+0x146/0x1d0 [ 838.324927][ T9111] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 838.330486][ T9111] ? kmsan_get_metadata+0x146/0x1d0 [ 838.335805][ T9111] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 838.341755][ T9111] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 838.347260][ T9111] ? filter_irq_stacks+0x60/0x1a0 [ 838.352484][ T9111] ? kmsan_get_metadata+0x146/0x1d0 [ 838.357805][ T9111] ? kmsan_get_metadata+0x146/0x1d0 [ 838.363157][ T9111] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 838.369207][ T9111] kmsan_internal_check_memory+0x48c/0x560 [ 838.375211][ T9111] kmsan_copy_to_user+0xd5/0xf0 [ 838.380206][ T9111] ? should_fail_usercopy+0x2e/0x40 [ 838.385610][ T9111] _copy_to_iter+0x366/0x24b0 [ 838.390436][ T9111] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 838.395943][ T9111] ? kmsan_get_metadata+0xf1/0x1d0 [ 838.401181][ T9111] raw_recvmsg+0x2b8/0x9e0 [ 838.405731][ T9111] ? __pfx_raw_recvmsg+0x10/0x10 [ 838.410788][ T9111] ? __pfx_raw_recvmsg+0x10/0x10 [ 838.416025][ T9111] sock_recvmsg+0x2c4/0x340 [ 838.420658][ T9111] ____sys_recvmsg+0x18a/0x620 [ 838.425560][ T9111] ? import_iovec+0x150/0x180 [ 838.430400][ T9111] ? get_compat_msghdr+0x6a1/0x720 [ 838.435652][ T9111] ? kmsan_get_metadata+0x146/0x1d0 [ 838.440989][ T9111] ___sys_recvmsg+0x223/0x840 [ 838.445830][ T9111] ? __fget_files+0x513/0x5e0 [ 838.450685][ T9111] ? kmsan_get_metadata+0x146/0x1d0 [ 838.456005][ T9111] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 838.461952][ T9111] do_recvmmsg+0x627/0xfd0 [ 838.466637][ T9111] ? stack_depot_save_flags+0x2c/0x6e0 [ 838.472296][ T9111] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 838.478711][ T9111] ? __ia32_compat_sys_recvmmsg_time32+0xf5/0x180 [ 838.485262][ T9111] __sys_recvmmsg+0x10a/0x430 [ 838.490085][ T9111] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 838.496042][ T9111] __ia32_compat_sys_recvmmsg_time32+0xf5/0x180 [ 838.502432][ T9111] ia32_sys_call+0x2797/0x40a0 [ 838.507353][ T9111] __do_fast_syscall_32+0xb4/0x120 [ 838.512615][ T9111] ? irqentry_exit+0x16/0x60 [ 838.517381][ T9111] do_fast_syscall_32+0x38/0x80 [ 838.522389][ T9111] do_SYSENTER_32+0x1f/0x30 [ 838.527063][ T9111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.533572][ T9111] RIP: 0023:0xf73ab579 [ 838.537734][ T9111] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 838.557497][ T9111] RSP: 002b:00000000f5e345ac EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 838.566060][ T9111] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003080 [ 838.574280][ T9111] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 838.582348][ T9111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.590433][ T9111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 838.598496][ T9111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.606688][ T9111] [ 838.610220][ T9111] Kernel Offset: disabled [ 838.614654][ T9111] Rebooting in 86400 seconds..