Starting Permit User Sessions... [ OK ] Started Daily apt upgrade and clean activities. [ OK ] Reached target Timers. [ OK ] Started Permit User Sessions. [ OK ] Started System Logging Service. [ OK ] Found device /dev/ttyS0. [ *** ] (1 of 2) A start job is running for…Shell server (1min 27s / 2min 46s)[ *** ] (2 of 2) A start job is running for…ot available (1min 28s / no limit)[ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Warning: Permanently added '10.128.0.153' (ECDSA) to the list of known hosts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/10/06 23:21:58 fuzzer started 2020/10/06 23:21:59 dialing manager at 10.128.0.26:35941 2020/10/06 23:22:00 syscalls: 3414 2020/10/06 23:22:00 code coverage: enabled 2020/10/06 23:22:00 comparison tracing: enabled 2020/10/06 23:22:00 extra coverage: enabled 2020/10/06 23:22:00 setuid sandbox: enabled 2020/10/06 23:22:00 namespace sandbox: enabled 2020/10/06 23:22:00 Android sandbox: enabled 2020/10/06 23:22:00 fault injection: enabled 2020/10/06 23:22:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/06 23:22:00 net packet injection: enabled 2020/10/06 23:22:00 net device setup: enabled 2020/10/06 23:22:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/06 23:22:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/06 23:22:00 USB emulation: enabled 2020/10/06 23:22:00 hci packet injection: enabled 2020/10/06 23:22:00 wifi device emulation: enabled 23:25:09 executing program 0: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) syzkaller login: [ 358.885039][ T28] audit: type=1400 audit(1602026709.332:8): avc: denied { execmem } for pid=8520 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 360.378747][ T8521] IPVS: ftp: loaded support on port[0] = 21 [ 360.966383][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 361.269027][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.277323][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.286999][ T8521] device bridge_slave_0 entered promiscuous mode [ 361.302591][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.310615][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.320186][ T8521] device bridge_slave_1 entered promiscuous mode [ 361.378159][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.396978][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.475145][ T8521] team0: Port device team_slave_0 added [ 361.490375][ T8521] team0: Port device team_slave_1 added [ 361.541951][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.549455][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.576577][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.593868][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.601641][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.627828][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.718390][ T8521] device hsr_slave_0 entered promiscuous mode [ 361.732721][ T8521] device hsr_slave_1 entered promiscuous mode [ 362.046091][ T8521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.082770][ T8521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.124614][ T8521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.163150][ T8521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.316395][ T8696] Bluetooth: hci0: command 0x0409 tx timeout [ 362.500074][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.534216][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.543989][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.567349][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.591803][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.601777][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.611101][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.618440][ T8696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.666847][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.676136][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.686439][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.695834][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.703061][ T8696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.712177][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.723153][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.750366][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.760045][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.797407][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.807275][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.817582][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.860209][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.869554][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.879145][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.888677][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.908590][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.969656][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.977762][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.016443][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.087914][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.098268][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.162266][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.171990][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.201074][ T8521] device veth0_vlan entered promiscuous mode [ 363.209726][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.218629][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.267306][ T8521] device veth1_vlan entered promiscuous mode [ 363.346363][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.355840][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.365150][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.374993][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.406208][ T8521] device veth0_macvtap entered promiscuous mode [ 363.428995][ T8521] device veth1_macvtap entered promiscuous mode [ 363.493048][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.500877][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.510821][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.520171][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.533208][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.569351][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.580075][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.590226][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.618798][ T8521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.627766][ T8521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.636898][ T8521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.645853][ T8521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.033033][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.041483][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.050591][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 364.167859][ T8656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.176514][ T8656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.184592][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:25:14 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) r2 = dup(r1) write$P9_RGETLOCK(r2, 0x0, 0x0) [ 364.397704][ T8744] Bluetooth: hci0: command 0x041b tx timeout 23:25:15 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = ioctl$NS_GET_PARENT(r0, 0x541b, 0x73b000) fcntl$setstatus(r1, 0x4, 0x0) 23:25:15 executing program 0: r0 = epoll_create(0x4) close(r0) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RGETATTR(r0, 0x0, 0x0) 23:25:15 executing program 0: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) utimes(&(0x7f0000000200)='./bus\x00', 0x0) 23:25:16 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0x0, 0xee01) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) 23:25:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth0\x00', {0x3}, 0x20}) bind$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 366.414831][ C1] hrtimer: interrupt took 128146 ns [ 366.476084][ T8744] Bluetooth: hci0: command 0x040f tx timeout [ 366.593557][ T28] audit: type=1800 audit(1602026717.042:9): pid=8790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15722 res=0 errno=0 23:25:17 executing program 0: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9}}, 0x18) socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, r0, {0x6}}, 0x18) socket$inet6(0xa, 0x2, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x2) openat$fuse(0xffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="e75205001310b5e369b312800c0001006d616376746170000400028008000500b5176498961629ded7709d2007000000f1d59d7b84226f7fc071a7bf55620b060000000000000000dd7c6afee8c96cc0d5de2e1d6d832ae739b22cb68e0318701aa49e880d50388c6dd3aa1baa08760fa32f67a6d85611b4dcc90600880079cf8538b9bbfeddde548b", @ANYRESOCT=r3, @ANYBLOB="0000f9fffdd2d1e16c70e251c4c1b964e355d320b8a89e16058e00616ac42f2d2903f5a32df8dc956f925c126b46500ea2ca4d20d559cad4cdea06b0e414ebf902cb094015c8de12382bdb20f99a639868b5b0bd285d46f92761598dae3b87a0d7444a47f4", @ANYRES32=r3, @ANYRES16], 0x44}}, 0x884) 23:25:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xd003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x7f, 0x4, 0x6, 0x32d5, 0x1, 0xb719, 0x1, 0xb91, 0x80], 0x9, 0x0, 0x0, 0xffffffffffffffff}) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x3a, r1, &(0x7f0000000040)="fb6e505733cfe3e2b4ad8693cb171d994ae2e5dd3a1188f2988688d1bf4e413def48b4dbb9f45469234762962060209fe7303b532e6926977794a2", 0x3b}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x1014}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 23:25:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="492af1af2b11974067300000001800e031c794585b881400001c140000fe00d2480d5bd72127b300010000000014001a00020036deef998709"], 0x30}}, 0x0) 23:25:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$sock(r0, &(0x7f0000000680)=[{{&(0x7f0000001200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}, {{&(0x7f0000000200)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@timestamping={{0x10, 0x1, 0x25, 0x800}}], 0x10}}], 0x2, 0x0) r1 = accept4(r0, &(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000640)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={0x0, 0x4}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) syz_mount_image$zonefs(&(0x7f0000000000)='zonefs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000000080)="0cb33f0cbe79cf6d2ffe15c9fcdb89ee0065d763f9d208f76713e955b6b940cd7d60851e490fdcc4080a0749eabb9f4e2758c325abab86054d620e75d091a604", 0x40, 0x2}, {&(0x7f00000000c0)="4689eb99da299c52b8d975e552bff5c5753b73ec1041306fc6fecdd03d3e58da665a5d8dab598eefab806190964b773682d565eb25c593791d45193c222c369708fe7b2282ec5878baf553deaeb1069b884d79c94f3e0c72c122c8c4db", 0x5d, 0x1}, {&(0x7f0000000140)="c1971ee521187170cc59", 0xa, 0xd5a8}], 0x108045, &(0x7f0000000280)={[{@errors_zone_ro='errors=zone-ro'}, {@explicit_open='explicit-open'}, {@errors_zone_ro='errors=zone-ro'}, {@errors_repair='errors=repair'}, {@errors_repair='errors=repair'}, {@errors_repair='errors=repair'}, {@errors_zone_ro='errors=zone-ro'}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', r3}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, '\\'}}]}) 23:25:18 executing program 0: openat$pidfd(0xffffff9c, &(0x7f0000000340)='/proc/self\x00', 0x80, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000380)={@local, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="4a5a6ac0849c57de206ab87622c36e99e17df7aa0657e7542c75e8851eaa665c0c4f7f847dfe4c9328d3786353da98ad5d0278f9caae60f2811f62c75be27e3480bf49ea87da7d50a41fce8c22ee27687bf0feddb2db72e175733f25f728d846c08557395f89a5aa1e185972", 0x6c}, {&(0x7f0000000140)="dbb1d0de249da0b3375f6a853a7d67c4abe77afb9fc579ac068782d6abae777ccc820e9520ed0e3511c86b5b8691ebc3a3441512b8a3093aac308f796cc843d99db0f220558e393a96d5adb6833e875325030fa460e1b9910819465024b1fed79cf145fcd22d3600e7696830112daa2f920c4e764df8beec43d68e9b975d494187a73b5476a24359bbd1166a09ccb7891c305b432873809479e31c0d587bf76b9e68b4fe5bf31df8575251cbf2be35164c1afb0cce8ba8054f1c70ab70e464a48f2f61933f88481079a7417720def51c9c8dcaff", 0xd4}, {&(0x7f0000000240)="ac0beaba2a1fd85403f400c6e52cd60000f15afad57e73f03ff6cf81cccaa4bd6ee808496745423624aab9454083d81f3a7edaf0ec9a37fa1acd45c687824cd2365f3abd4ae27336ab46de962d068826fedf67f11a19efbac0f3ebb80c17536bef76575e2568afdb67d269e710dbe9f55292d2504ffac4b0499417e5c5fb89c4295690354652f114bf007abf0ced834fe058198b92fce02ca548665cbd2df19a5b7f80d6c24f479fb319940f58cb58f2e4e13ba2f1", 0xb5}], 0x3) [ 368.055952][ T8812] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 368.089782][ T8813] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 23:25:18 executing program 0: openat$pidfd(0xffffff9c, &(0x7f0000000340)='/proc/self\x00', 0x80, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000380)={@local, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="4a5a6ac0849c57de206ab87622c36e99e17df7aa0657e7542c75e8851eaa665c0c4f7f847dfe4c9328d3786353da98ad5d0278f9caae60f2811f62c75be27e3480bf49ea87da7d50a41fce8c22ee27687bf0feddb2db72e175733f25f728d846c08557395f89a5aa1e185972", 0x6c}, {&(0x7f0000000140)="dbb1d0de249da0b3375f6a853a7d67c4abe77afb9fc579ac068782d6abae777ccc820e9520ed0e3511c86b5b8691ebc3a3441512b8a3093aac308f796cc843d99db0f220558e393a96d5adb6833e875325030fa460e1b9910819465024b1fed79cf145fcd22d3600e7696830112daa2f920c4e764df8beec43d68e9b975d494187a73b5476a24359bbd1166a09ccb7891c305b432873809479e31c0d587bf76b9e68b4fe5bf31df8575251cbf2be35164c1afb0cce8ba8054f1c70ab70e464a48f2f61933f88481079a7417720def51c9c8dcaff", 0xd4}, {&(0x7f0000000240)="ac0beaba2a1fd85403f400c6e52cd60000f15afad57e73f03ff6cf81cccaa4bd6ee808496745423624aab9454083d81f3a7edaf0ec9a37fa1acd45c687824cd2365f3abd4ae27336ab46de962d068826fedf67f11a19efbac0f3ebb80c17536bef76575e2568afdb67d269e710dbe9f55292d2504ffac4b0499417e5c5fb89c4295690354652f114bf007abf0ced834fe058198b92fce02ca548665cbd2df19a5b7f80d6c24f479fb319940f58cb58f2e4e13ba2f1", 0xb5}], 0x3) [ 368.267222][ T8815] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 23:25:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x408b7cf3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x49d0, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0c0583b, &(0x7f0000000000)) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xde}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x38}}, 0x4000801) r2 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000200)={0x5, 0x80, 0x9}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) [ 368.556554][ T8744] Bluetooth: hci0: command 0x0419 tx timeout 23:25:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040000", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 369.876526][ T8825] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.886407][ T8825] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.490629][ T8825] team0: Port device veth3 added [ 370.577992][ T8825] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.588072][ T8825] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.616723][ T8825] team0: Port device veth5 added 23:25:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2b2bde9d40319696b905711068b27da6fff0744d4d2176644649a1f5319f68d2b13651a643ba1d864dc423db53c56eb2b04361972eba624cd488693441e33eb8392d76d9b57a78d0d77e9080000000000000064516012857d445602af835297c84c211911e5fadece87db5a8894f36a19f7ba231dacc61ef4b8524330461a0db46abb795fdcd89a50852f130a289058c679d9b7b4a8d431960180e4c751345f328c02a8ba6c2a1c5abae6236640f24d66b2bac1ea2841bf05e27b070ae04215191da2c74f1009884213b7b892f1eaecdb2f0876f6aa57e8aad13bc68d030d0cf6a77d7e4fd93d6ccdb3d1236c43b2240b186b6e500d645d8a414660d69ea490f0da113ea4591886052e7d9afee1b13f95da27b3fae4181195ad22d7a6706d01184db1709a04a1faa8c201dc69e3180412e0186f35fd6530132de8d8b7325f90fe3b68ece007ef368386f8534cb4be18802c86831804e7e4857b651f3909334a958cfda9e5b191d349f301545d39026d369fe51850a76440a2165c742df872bcbd1f37512d444678e5b7c6b12c4638b27cf6de9e"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 23:25:21 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x31c, r0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x31c}}, 0x20008000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000480)={0x6, 0x1, 0x7, 0xe6, 0x3ff}, 0xc) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000004c0)="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") r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000005c0)) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000640)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @random="6008211af47e", {0x5, 0x80}}, 0x27, @void}, 0x1a) clone3(&(0x7f00000008c0)={0x2000000, &(0x7f0000000680)=0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x0, {0x19}, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/244, &(0x7f0000000880)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r1, &(0x7f0000000940)={0xffffffffffffffff, r1, 0x3}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xb0f}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x44851) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000a80)={0x32, @rand_addr=0x64010101, 0x4e22, 0x1, 'wrr\x00', 0x2, 0x8, 0x51}, 0x2c) r4 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000ac0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x7f, 0x2}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x310, 0x5, 0x3, 0x2, 0x20, 0x20}, 0x52, &(0x7f0000000b40)={0x5, 0xf, 0x52, 0x6, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x1f, 0x1f, 0x2, 0x5}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x2, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x0, 0x0, 0x0, [0xff5fc0]}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x7, 0xf00f, 0x3, [0x30, 0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1d, "8beeb2eb4388f6d4edbc210de3ac30ff"}]}, 0x4, [{0x7b, &(0x7f0000000bc0)=@string={0x7b, 0x3, "d8db5c2c32240d320a2337aac489a87acc1a5bd66f4dc484385ad45a616dd07d5e29c0ab7fd0937b167d81d778d3da30c2a68606a847163e99f6b6c4b0da984099679087998bef4b0f5cafa9abf742bbd2baf6e4f42ec3ce686f5ed7d458c60f819dc1a2cc4565053c41246f27fa6171efd6861e35c44ea3d5"}}, {0x9f, &(0x7f0000000c40)=@string={0x9f, 0x3, "ff518a112ebced282aa729a4d251d8c809dbc4cc47ced210f23d6289478f3caab5f33404d9bdb3a764603a564e54d7aec98009bebd85a53ec33a6427b6252e3cbbeaa11ecbb8939496a35bf4f0e90a57671ac9cf8e191ff635bc86dbef6d98ac21b8681d29baaa4fc7882bace060941e6c7ac23fbe08dc545ec6e43b0f74afd8935816564f19b0f9c338a208b520c0d0bc0e6ab8928d12bdaa52bbcc9e"}}, {0x75, &(0x7f0000000d00)=@string={0x75, 0x3, "3f553c074157a21a6da63035a8706fcce3df1b45b32ff7267faa23ff8821ff8fa735d1573b99943d203fefef6912b4935e85afdd886454c111b997910b58cdb8fdecbbf6a4b7eebd9aa1b6d72828fd40b8a11ace098ba562d9079e11138d13fa5cc199d9a698d343282d6b166000f848ba85eb"}}, {0x8a, &(0x7f0000000d80)=@string={0x8a, 0x3, "3a50828849383f9e368a4e82c78b155abdc5a7de911201db159a774ac86198101528100667837569f29b1899e8cf94ce0c29ec3d4b317ce255f329231a5f0c7a8691c842aecd02a26d1df9d54148209f733f66365844ccb64941cb76089d4cafc7d8aa19ac932e47b145a71c5b96ee4c9765080633a07313d86f04c61b034f01b4e5ee3546355787"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000f80)={0xc, &(0x7f0000000e80)={0x40, 0x30, 0xa4, {0xa4, 0x23, "f04807c41c5c8245d602ecf4869886309af7a6b00445af0b98d6eacba9f56495f2f2641e45c53db70f6b8e7ed78c6ebab2e20195975ee448645b1ab4d29ad258c22a43683c26176ffb1844f9a55b69784c9a9f9d07bce05bde16e4eebed6a1e2c84221bdd76d3adff11cf0f94192af4a0d85bab683427de9fa2d808bf311582c6f42b08b597ec91c9c7b3657228378d73c44902e67d45139973800c8f4644079ba4d"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000001200)={0x1c, &(0x7f0000000fc0)={0x0, 0x15, 0x5e, "351f58e3a10ab8a8c66fb4eccce633868329bacea2e10e3801ba23fe7e1e6cfe8606162d81c8751337056fcb4d5b1fd052744e8a3642ef8a1431a327975bb2a6abf6a4cef98cae5020573ea52b59c1d5c2201ac582d36dbc31f6aa3d9a97"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000010c0)={0x20, 0x0, 0x86, {0x84, "0577e980be8048ae7d24bf4cb4afa3ec2857e7cef3d8cf3c4a8d42440047c49face7532b83d23c3f64e912f00f5f0482e683a9cd47a4a488b4c6893b85be00c996c38666045a6737e37d660c733a03dcb5fbf7ac2ace5b2fa58c9f185f2795ea0e7895fc147a05864e43f0fd132313fa9f48f31f7ff4c5a43498da2493a546cf369041dc"}}, &(0x7f0000001180)={0x20, 0x1, 0x1}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001280)={0x0, 0x1, 0x6, @local}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001300)={0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000001340)) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000001380)={0xcdf, "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"}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000002080)) [ 370.925413][ T8842] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.936097][ T8842] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.965444][ T8842] team0: Port device veth7 added 23:25:21 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfe}]}}}]}, 0x48}}, 0x0) 23:25:22 executing program 0: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 23:25:22 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000026c0)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004000000320010b49b7a599b92debe286791e998b335d89e525a4f85e774984ca1a808bd9632", 0x6a, 0x1600}], 0x81, &(0x7f00000002c0)=ANY=[]) [ 371.963499][ T8862] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 372.022332][ T8862] EXT4-fs (loop0): orphan cleanup on readonly fs [ 372.028900][ T8862] EXT4-fs error (device loop0): ext4_quota_enable:6123: inode #3: comm syz-executor.0: iget: bad extended attribute block 12950 [ 372.080646][ T8862] EXT4-fs error (device loop0): ext4_quota_enable:6125: comm syz-executor.0: Bad quota inode # 3 [ 372.116913][ T8862] EXT4-fs warning (device loop0): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 372.131121][ T8862] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 372.138526][ T8862] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 23:25:22 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x4}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRESOCT=0x0, @ANYBLOB="8000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) read$hiddev(r0, &(0x7f0000000240)=""/148, 0x94) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 372.661166][ T8850] IPVS: ftp: loaded support on port[0] = 21 23:25:23 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="7374617466735f70657263656e8281ab9d98290d6cb79ecb742c307830303030303030"]) [ 373.491936][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 373.689507][ T9012] gfs2: Unknown parameter 'statfs_percen)lt' [ 373.697862][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.705815][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.714489][ T8850] device bridge_slave_0 entered promiscuous mode [ 373.744724][ T9015] gfs2: Unknown parameter 'statfs_percen)lt' [ 373.788789][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.796156][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.805880][ T8850] device bridge_slave_1 entered promiscuous mode 23:25:24 executing program 0: r0 = socket(0x22, 0x800, 0x4) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x14001, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x40000) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a1565b) [ 373.936006][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.994518][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.096489][ T8850] team0: Port device team_slave_0 added [ 374.137522][ T8850] team0: Port device team_slave_1 added 23:25:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18002081729e3902d41c00"/20], 0x18}}], 0x2, 0x0) [ 374.259890][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.267494][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.293680][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.330650][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.337961][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.364244][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.556848][ T8744] Bluetooth: hci1: command 0x0409 tx timeout [ 374.579099][ T8850] device hsr_slave_0 entered promiscuous mode 23:25:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x81, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) get_thread_area(&(0x7f0000000300)={0xf204, 0x0, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, &(0x7f00000002c0)=0x8) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = dup2(r3, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x10203, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r6 = openat(r2, &(0x7f00000005c0)='./file0\x00', 0x400000, 0xb1) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0xbc, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x30, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a972e2dae3e3dcceb66574854e"}, @NL80211_KEY_SEQ={0x10, 0x4, "3369db8aed215390c94002e7"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf56afcc8c54847333b83be856"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc0d0}, 0x40081) [ 374.616279][ T8850] device hsr_slave_1 entered promiscuous mode [ 374.647218][ T8850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.654852][ T8850] Cannot create hsr debugfs directory [ 374.867173][ T9071] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 375.327865][ T8850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.372183][ T8850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.400345][ T8850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 375.420395][ T8850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 375.790398][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.862692][ T3243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.871872][ T3243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.899237][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 23:25:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0095fb6c2a9d29886b17bbd8f903fb8779741c31"]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x10a401, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = clone3(&(0x7f0000001440)={0x20020000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x32}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/23, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r0}}, 0x58) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, 0x3e9, 0x100, 0x70bd2d, 0x25dfdbfb, {0x2, 0x1, 0x2, r1, 0x9, 0x3, 0x3f, 0x0, 0x0, 0xf544}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000140)={"5666c9aa8cd8d3e2d997935dbae3b0aa42272c74d061f514d39f55bcb359", 0x4, 0x2, 0x1, 0x2, 0x9, 0x0, 0x5, 0x3, [0x2, 0xff, 0x0, 0x0, 0x200, 0xfffffff9, 0x1, 0x7, 0x3, 0x6, 0xfff, 0x100, 0x1, 0x8000, 0x4, 0x7f, 0x7, 0xd611, 0x8]}) [ 375.975244][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.985243][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.994435][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.001809][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.088410][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.097865][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.107693][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.117204][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.124422][ T8744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.133542][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.144325][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.182542][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.193776][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.226527][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.236804][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.247844][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.306024][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.315881][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.357969][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.368023][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.388419][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.584318][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.592083][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 376.636660][ T8744] Bluetooth: hci1: command 0x041b tx timeout [ 376.683949][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.812672][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.823110][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.982615][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.992289][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.032232][ T8850] device veth0_vlan entered promiscuous mode [ 377.042640][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.051683][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.095633][ T8850] device veth1_vlan entered promiscuous mode 23:25:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100088ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200088ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200088ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200088ea70325132510000ea703251070064000000", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0095fb6c2a9d29886b17bbd8f903fb8779741c31"]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x10a401, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = clone3(&(0x7f0000001440)={0x20020000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x32}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/23, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r0}}, 0x58) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, 0x3e9, 0x100, 0x70bd2d, 0x25dfdbfb, {0x2, 0x1, 0x2, r1, 0x9, 0x3, 0x3f, 0x0, 0x0, 0xf544}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000140)={"5666c9aa8cd8d3e2d997935dbae3b0aa42272c74d061f514d39f55bcb359", 0x4, 0x2, 0x1, 0x2, 0x9, 0x0, 0x5, 0x3, [0x2, 0xff, 0x0, 0x0, 0x200, 0xfffffff9, 0x1, 0x7, 0x3, 0x6, 0xfff, 0x100, 0x1, 0x8000, 0x4, 0x7f, 0x7, 0xd611, 0x8]}) [ 377.179592][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 377.189304][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 377.199195][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.208990][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.259723][ T8850] device veth0_macvtap entered promiscuous mode [ 377.311512][ T8850] device veth1_macvtap entered promiscuous mode [ 377.431278][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 377.445177][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.460338][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.473306][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.482837][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.492214][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.502124][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.591486][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 377.602201][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.617394][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.629886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.640120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.735947][ T8850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.744823][ T8850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.753810][ T8850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.762750][ T8850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 23:25:28 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04030001fa1b04"], 0x7) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x8) openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x8000, 0x0) [ 378.187511][ T8764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.195666][ T8764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.205817][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 378.391306][ T8527] ===================================================== [ 378.398391][ T8527] BUG: KMSAN: uninit-value in hci_event_packet+0x1438/0x39e30 [ 378.405857][ T8527] CPU: 1 PID: 8527 Comm: kworker/u5:2 Not tainted 5.9.0-rc4-syzkaller #0 [ 378.414265][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.424333][ T8527] Workqueue: hci0 hci_rx_work [ 378.429104][ T8527] Call Trace: [ 378.432441][ T8527] dump_stack+0x21c/0x280 [ 378.436825][ T8527] kmsan_report+0xf7/0x1e0 [ 378.441254][ T8527] __msan_warning+0x58/0xa0 [ 378.445767][ T8527] hci_event_packet+0x1438/0x39e30 [ 378.450883][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.456087][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.461303][ T8527] ? kmsan_set_origin_checked+0x95/0xf0 [ 378.465921][ T8764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.466880][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.474682][ T8764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.479857][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.479881][ T8527] hci_rx_work+0x745/0xd20 [ 378.479911][ T8527] ? hci_alloc_dev+0x2820/0x2820 [ 378.480006][ T8527] process_one_work+0x1688/0x2140 [ 378.480043][ T8527] worker_thread+0x10bc/0x2730 [ 378.480065][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.480087][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.480143][ T8527] kthread+0x551/0x590 [ 378.490648][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.492609][ T8527] ? process_one_work+0x2140/0x2140 [ 378.538536][ T8527] ? kthread_blkcg+0x110/0x110 [ 378.543331][ T8527] ret_from_fork+0x1f/0x30 [ 378.547747][ T8527] [ 378.550066][ T8527] Uninit was created at: [ 378.554313][ T8527] kmsan_internal_poison_shadow+0x66/0xd0 [ 378.560036][ T8527] kmsan_slab_alloc+0x8a/0xe0 [ 378.564716][ T8527] __kmalloc_node_track_caller+0x9aa/0x12f0 [ 378.570685][ T8527] __alloc_skb+0x35f/0xb30 [ 378.575131][ T8527] vhci_write+0x18a/0x890 [ 378.579491][ T8527] vfs_write+0xfa8/0x1860 [ 378.583815][ T8527] ksys_write+0x275/0x500 [ 378.588135][ T8527] __se_sys_write+0x92/0xb0 [ 378.592661][ T8527] __ia32_sys_write+0x4a/0x70 [ 378.597340][ T8527] __do_fast_syscall_32+0x129/0x180 [ 378.602632][ T8527] do_fast_syscall_32+0x6a/0xc0 [ 378.607473][ T8527] do_SYSENTER_32+0x73/0x90 [ 378.612027][ T8527] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 378.618349][ T8527] ===================================================== [ 378.625262][ T8527] Disabling lock debugging due to kernel taint [ 378.631395][ T8527] Kernel panic - not syncing: panic_on_warn set ... [ 378.637986][ T8527] CPU: 1 PID: 8527 Comm: kworker/u5:2 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 378.647766][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.657818][ T8527] Workqueue: hci0 hci_rx_work [ 378.662479][ T8527] Call Trace: [ 378.665763][ T8527] dump_stack+0x21c/0x280 [ 378.670109][ T8527] panic+0x4d7/0xef7 [ 378.674009][ T8527] ? add_taint+0x17c/0x210 [ 378.678428][ T8527] kmsan_report+0x1df/0x1e0 [ 378.682929][ T8527] __msan_warning+0x58/0xa0 [ 378.687430][ T8527] hci_event_packet+0x1438/0x39e30 [ 378.692535][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.697728][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.702923][ T8527] ? kmsan_set_origin_checked+0x95/0xf0 [ 378.708462][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.713667][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.718865][ T8527] hci_rx_work+0x745/0xd20 [ 378.723290][ T8527] ? hci_alloc_dev+0x2820/0x2820 [ 378.728222][ T8527] process_one_work+0x1688/0x2140 [ 378.733263][ T8527] worker_thread+0x10bc/0x2730 [ 378.738022][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.743215][ T8527] ? kmsan_get_metadata+0x116/0x180 [ 378.748418][ T8527] kthread+0x551/0x590 [ 378.752479][ T8527] ? process_one_work+0x2140/0x2140 [ 378.757668][ T8527] ? kthread_blkcg+0x110/0x110 [ 378.762421][ T8527] ret_from_fork+0x1f/0x30 [ 378.768272][ T8527] Kernel Offset: disabled [ 378.772592][ T8527] Rebooting in 86400 seconds..