last executing test programs: 1m9.429540235s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x2d, 0x1}, 0x18}}, 0x0) 1m9.117483803s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) 1m6.056021037s ago: executing program 0: ioperm(0x0, 0x87, 0x3ff) mincore(&(0x7f0000ffa000/0x6000)=nil, 0x6000, &(0x7f0000001fc0)=""/4096) 1m5.624668345s ago: executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000001500)=""/4092, 0xffc) 1m4.891094221s ago: executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="699e261c097dc3", 0x7}], 0x1, 0x0, 0xe0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0xfdef) 1m4.332845249s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r3 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x5450, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r5 = dup2(r1, r0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = dup3(r8, r7, 0x0) r10 = accept(r9, 0x0, 0x0) dup3(r6, r10, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, 0x0, 0x0) r11 = accept4$inet(r5, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0xe1, 0x8, 0xe, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7, 0xcc, 0xffffffff}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@local, r12}, 0x14) setsockopt$inet_mreqn(r11, 0x0, 0x23, 0x0, 0xfffffffffffffece) 1m3.23110072s ago: executing program 2: r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 1m1.889391704s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58c04"]) 1m1.414855121s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) sync_file_range(r3, 0x9, 0xaf, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006fc0)=[{{&(0x7f0000003200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) pwrite64(r4, &(0x7f0000000000)='+', 0xc0014, 0x7003f00) open(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) 54.863365985s ago: executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f00000001c0)={'dummy0\x00', 0x0}) 53.924244607s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x80000) creat(0x0, 0x0) userfaultfd(0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x2, 0x0, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 45.868177998s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x2d, 0x1}, 0x18}}, 0x0) 45.38034003s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000008c0)={[{@nls={'nls', 0x3d, 'maccyrillic'}}, {@nobarrier}, {@umask={'umask', 0x3d, 0x8}}, {@type={'type', 0x3d, "dafd7c7f"}}, {@force}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2904828, &(0x7f0000000e40)={[{@adinicb}, {@session}, {@umask}, {@anchor={'anchor', 0x3d, 0xffffffe000000000}}, {@gid}, {@noadinicb}, {}, {@partition={'partition', 0x3d, 0x1}}, {@unhide}]}, 0x0, 0xc43, &(0x7f00000001c0)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 44.643317545s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 44.171557705s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 41.009978001s ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x208e24b) 38.180323963s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 36.557472446s ago: executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x22) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r2 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) 35.554195963s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf3d, &(0x7f00000000c0), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x4ac6, 0x0, 0x0, 0x0, 0x0) 34.102432297s ago: executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast1, @local, 0x0, 0x2, [@remote, @loopback]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x7) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x1, 0x2}, "0a790cc55a8e"}}}}}}}, 0x0) 33.32604542s ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}, @ssrr={0x89, 0x3, 0xe7}]}}}], 0x20}, 0x0) 31.782866641s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001680)={'erspan0\x00', &(0x7f0000001600)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x0, 0xbd9, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0x7, 0xa1, [@local]}, @timestamp={0x44, 0xc, 0xc3, 0x0, 0x3, [0x0, 0x0]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001800)={'syztnl2\x00', &(0x7f0000001780)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x0, 0x8, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0x3, 0x8000}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001940)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x3c, r5, 0x277f826df11ec41b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}}, 0x10800) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) 30.525862306s ago: executing program 1: iopl(0x3) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 30.4150198s ago: executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, 0x0, 0x0) 30.280289675s ago: executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = io_uring_setup(0x766, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) 30.063491801s ago: executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="699e261c097dc3", 0x7}], 0x1, 0x0, 0xe0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0xfdef) 24.79140969s ago: executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000000006041b0ca00c03a002001000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000fe880000000000000000000000000001840300000000000001040000000005024f87040104c2040052"], 0xf2) 14.13502587s ago: executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffff034}]}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) 4.054584515s ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f000000ad00)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 0s ago: executing program 1: io_setup(0x3, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_destroy(r0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x5e) kernel console output (not intermixed with test programs): 58773][ T5980] team0: Port device team_slave_1 added [ 190.900484][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.126291][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.222890][ T5122] Bluetooth: hci1: command tx timeout [ 191.370957][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.453585][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.460792][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.508209][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.533683][ T5941] hsr_slave_0: entered promiscuous mode [ 191.543519][ T5941] hsr_slave_1: entered promiscuous mode [ 191.550479][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.558447][ T5941] Cannot create hsr debugfs directory [ 191.571555][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.625417][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.632416][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.658965][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.790894][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.816582][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.836151][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 191.863311][ T5122] Bluetooth: hci0: command tx timeout [ 191.959816][ T6034] Zero length message leads to an empty skb [ 191.971923][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.296014][ T5980] hsr_slave_0: entered promiscuous mode [ 192.303630][ T5980] hsr_slave_1: entered promiscuous mode [ 192.334475][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.342111][ T5980] Cannot create hsr debugfs directory [ 192.358034][ T6040] loop2: detected capacity change from 0 to 47 [ 192.779438][ T29] audit: type=1400 audit(1717864543.988:329): avc: denied { mounton } for pid=6039 comm="syz-executor.2" path="/root/syzkaller-testdir3746217200/syzkaller.vLIkHB/65/file1/file0" dev="loop2" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.864077][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.233495][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.311926][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.323704][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.331253][ T6011] bridge_slave_0: entered allmulticast mode [ 193.363193][ T6011] bridge_slave_0: entered promiscuous mode [ 193.499953][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.531833][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.553796][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.561884][ T6011] bridge_slave_1: entered allmulticast mode [ 193.583948][ T6011] bridge_slave_1: entered promiscuous mode [ 193.776575][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.857484][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.942787][ T5122] Bluetooth: hci0: command tx timeout [ 194.023723][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.237642][ T6011] team0: Port device team_slave_0 added [ 194.284321][ T6011] team0: Port device team_slave_1 added [ 194.458786][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.469103][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.496720][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.519113][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.530152][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.558620][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.580910][ T12] bridge_slave_1: left allmulticast mode [ 194.592668][ T12] bridge_slave_1: left promiscuous mode [ 194.598731][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.620848][ T12] bridge_slave_0: left allmulticast mode [ 194.626917][ T12] bridge_slave_0: left promiscuous mode [ 194.634349][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.663769][ T12] bridge_slave_1: left allmulticast mode [ 194.682802][ T12] bridge_slave_1: left promiscuous mode [ 194.690223][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.718752][ T12] bridge_slave_0: left allmulticast mode [ 194.725032][ T12] bridge_slave_0: left promiscuous mode [ 194.738560][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.770465][ T12] bridge_slave_1: left allmulticast mode [ 194.777871][ T12] bridge_slave_1: left promiscuous mode [ 194.784557][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.810776][ T12] bridge_slave_0: left allmulticast mode [ 194.819960][ T12] bridge_slave_0: left promiscuous mode [ 194.826457][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.283411][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.318302][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.328216][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.341323][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.357209][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 195.365552][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.026358][ T5122] Bluetooth: hci0: command tx timeout [ 196.398817][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.413086][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.426199][ T12] bond0 (unregistering): Released all slaves [ 196.577305][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.590281][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.609135][ T12] bond0 (unregistering): Released all slaves [ 196.765961][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.782181][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.799291][ T12] bond0 (unregistering): Released all slaves [ 197.075374][ T6011] hsr_slave_0: entered promiscuous mode [ 197.100365][ T6011] hsr_slave_1: entered promiscuous mode [ 197.109125][ T6011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.120252][ T6011] Cannot create hsr debugfs directory [ 197.179686][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.383525][ T5122] Bluetooth: hci3: command tx timeout [ 197.570786][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.796888][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.804252][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.976265][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.983527][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.379029][ T6046] chnl_net:caif_netlink_parms(): no params data found [ 198.596381][ T12] hsr_slave_0: left promiscuous mode [ 198.615887][ T12] hsr_slave_1: left promiscuous mode [ 198.622260][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.630413][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.638713][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.647809][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.666241][ T12] hsr_slave_0: left promiscuous mode [ 198.672424][ T12] hsr_slave_1: left promiscuous mode [ 198.679490][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.687032][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.695837][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.703438][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.720031][ T12] hsr_slave_0: left promiscuous mode [ 198.727157][ T12] hsr_slave_1: left promiscuous mode [ 198.735450][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.743758][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.752246][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.761820][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.836436][ T12] veth1_macvtap: left promiscuous mode [ 198.842081][ T12] veth0_macvtap: left promiscuous mode [ 198.848069][ T12] veth1_vlan: left promiscuous mode [ 198.853939][ T12] veth0_vlan: left promiscuous mode [ 198.861021][ T12] veth1_macvtap: left promiscuous mode [ 198.869386][ T12] veth0_macvtap: left promiscuous mode [ 198.877582][ T12] veth1_vlan: left promiscuous mode [ 198.883284][ T12] veth0_vlan: left promiscuous mode [ 198.892164][ T12] veth1_macvtap: left promiscuous mode [ 198.898667][ T12] veth0_macvtap: left promiscuous mode [ 198.904841][ T12] veth1_vlan: left promiscuous mode [ 198.910223][ T12] veth0_vlan: left promiscuous mode [ 199.464922][ T5122] Bluetooth: hci3: command tx timeout [ 200.030195][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.040933][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.045047][ T12] team0 (unregistering): Port device team_slave_1 removed [ 200.121445][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.253616][ T12] team0 (unregistering): Port device team_slave_1 removed [ 201.307382][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.553171][ T5122] Bluetooth: hci3: command tx timeout [ 202.530738][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.591282][ T12] team0 (unregistering): Port device team_slave_0 removed [ 203.424767][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.456621][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.478103][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.495234][ T6046] bridge_slave_0: entered allmulticast mode [ 203.505213][ T6046] bridge_slave_0: entered promiscuous mode [ 203.538409][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.563247][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.578484][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.586576][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.594034][ T6046] bridge_slave_1: entered allmulticast mode [ 203.604384][ T6046] bridge_slave_1: entered promiscuous mode [ 203.620677][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.627719][ T5122] Bluetooth: hci3: command tx timeout [ 203.828506][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.849745][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.991031][ T6046] team0: Port device team_slave_0 added [ 204.017310][ T6046] team0: Port device team_slave_1 added [ 204.036034][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.149867][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.161588][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.191964][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.206978][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.214534][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.242042][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.511664][ T6046] hsr_slave_0: entered promiscuous mode [ 204.521103][ T6046] hsr_slave_1: entered promiscuous mode [ 204.540965][ T6046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.549293][ T6046] Cannot create hsr debugfs directory [ 204.727359][ T5980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.810143][ T5980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.823934][ T5980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.908739][ T5980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.937304][ T5876] veth0_vlan: entered promiscuous mode [ 205.100868][ T5876] veth1_vlan: entered promiscuous mode [ 205.131298][ T6011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.180768][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.188597][ T6011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.202200][ T6011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.246874][ T6011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.327347][ T6046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.426642][ T6046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.470252][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.540575][ T6046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.566769][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.574035][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.648630][ T6046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.678832][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.686113][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.735116][ T5876] veth0_macvtap: entered promiscuous mode [ 205.770180][ T5876] veth1_macvtap: entered promiscuous mode [ 205.866133][ T12] bridge_slave_1: left allmulticast mode [ 205.871844][ T12] bridge_slave_1: left promiscuous mode [ 205.884525][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.907779][ T12] bridge_slave_0: left allmulticast mode [ 205.914221][ T12] bridge_slave_0: left promiscuous mode [ 205.920036][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.416906][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.431637][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.444951][ T12] bond0 (unregistering): Released all slaves [ 206.468236][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.478891][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.493666][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.539776][ T5941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.551695][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.585184][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.605053][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.618052][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.847142][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.856570][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.865404][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.874203][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.925392][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.117696][ T6046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.171882][ T12] hsr_slave_0: left promiscuous mode [ 207.181852][ T12] hsr_slave_1: left promiscuous mode [ 207.195560][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.203714][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.215206][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.223858][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.250560][ T12] veth1_macvtap: left promiscuous mode [ 207.256557][ T12] veth0_macvtap: left promiscuous mode [ 207.262262][ T12] veth1_vlan: left promiscuous mode [ 207.268354][ T12] veth0_vlan: left promiscuous mode [ 207.970835][ T12] team0 (unregistering): Port device team_slave_1 removed [ 208.029270][ T12] team0 (unregistering): Port device team_slave_0 removed [ 208.609001][ T6046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.671847][ T6046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.695556][ T6046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.737539][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.782287][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.789578][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.836225][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.843459][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.957282][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.065187][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.140970][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.156627][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.327503][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.425664][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.444620][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.455992][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.463342][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.536917][ T933] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.544353][ T933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.631381][ T5941] veth0_vlan: entered promiscuous mode [ 209.708891][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.721747][ T5941] veth1_vlan: entered promiscuous mode [ 209.890780][ T29] audit: type=1400 audit(1717864561.108:330): avc: denied { mounton } for pid=6068 comm="syz-executor.1" path="/root/syzkaller-testdir1613926540/syzkaller.Ynj1vN/1/file0" dev="sda1" ino=1941 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 209.999347][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.028200][ T5941] veth0_macvtap: entered promiscuous mode [ 210.048399][ T5941] veth1_macvtap: entered promiscuous mode [ 210.111687][ T6072] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 210.208169][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.231209][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.265353][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.325179][ T5980] veth0_vlan: entered promiscuous mode [ 210.348771][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.367683][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.396596][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.410087][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.450098][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.473220][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.486658][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.508338][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.548710][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.556042][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.573338][ T5980] veth1_vlan: entered promiscuous mode [ 210.648603][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.656856][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.757021][ T5980] veth0_macvtap: entered promiscuous mode [ 210.776344][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.917130][ T5980] veth1_macvtap: entered promiscuous mode [ 211.078788][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.114890][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.125398][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.147335][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.177328][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.220128][ T6088] loop1: detected capacity change from 0 to 1024 [ 211.230317][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.249992][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.270234][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.281438][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.304946][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.348148][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.360304][ T29] audit: type=1800 audit(1717864562.568:331): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 211.373156][ T5980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.393794][ T6088] hfsplus: bad catalog entry type [ 211.399264][ T5980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.412266][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.435728][ T5980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.451932][ T5980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.474017][ T12] hfsplus: b-tree write err: -5, ino 4 [ 211.681782][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.695739][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.700672][ T6100] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 212.762904][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.868729][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.940584][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.990837][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.052284][ T6011] veth0_vlan: entered promiscuous mode [ 213.192129][ T6011] veth1_vlan: entered promiscuous mode [ 213.597426][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.261145][ T6118] ptrace attach of "/root/syz-executor.1 exec"[5876] was attempted by "/root/syz-executor.1 exec"[6118] [ 218.042126][ T29] audit: type=1400 audit(1717864565.458:332): avc: denied { mounton } for pid=6109 comm="syz-executor.1" path="/proc/6109/task" dev="proc" ino=13850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 218.533158][ T29] audit: type=1400 audit(1717864565.458:333): avc: denied { mount } for pid=6109 comm="syz-executor.1" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 218.818306][ T6011] veth0_macvtap: entered promiscuous mode [ 218.860779][ T6011] veth1_macvtap: entered promiscuous mode [ 218.948292][ T6130] loop3: detected capacity change from 0 to 1024 [ 219.044347][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.072351][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.104893][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.134457][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.173307][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.207771][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.235545][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.281519][ T6046] veth0_vlan: entered promiscuous mode [ 219.347515][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.381955][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.397929][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.426619][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.453487][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.488373][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.549235][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.564111][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.574795][ T29] audit: type=1400 audit(1717864570.778:334): avc: denied { ioctl } for pid=6140 comm="syz-executor.1" path="socket:[14581]" dev="sockfs" ino=14581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.613427][ T6046] veth1_vlan: entered promiscuous mode [ 219.633539][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 219.738124][ T6011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.767849][ T6011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.797182][ T6011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.832163][ T6011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.072130][ T29] audit: type=1400 audit(1717864571.268:335): avc: denied { name_bind } for pid=6140 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 220.318607][ T6046] veth0_macvtap: entered promiscuous mode [ 220.430773][ T6046] veth1_macvtap: entered promiscuous mode [ 220.522047][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.523023][ T29] audit: type=1400 audit(1717864571.728:336): avc: denied { map } for pid=6144 comm=252E2F01 path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.586007][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.655651][ T29] audit: type=1400 audit(1717864571.728:337): avc: denied { read write } for pid=6144 comm=252E2F01 path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.710497][ T29] audit: type=1400 audit(1717864571.778:338): avc: denied { read } for pid=6144 comm="syz-executor.0" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 220.747761][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.770259][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.782552][ T29] audit: type=1400 audit(1717864571.778:339): avc: denied { open } for pid=6144 comm="syz-executor.0" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 220.806931][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.821569][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.832461][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.845259][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.855443][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.866265][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.055746][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.188750][ T5104] libceph: connect (1)[c::]:6789 error -101 [ 221.195964][ T5104] libceph: mon0 (1)[c::]:6789 connect error [ 221.306194][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.379038][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.397393][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.409663][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.421084][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.436147][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.446517][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.457291][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.469497][ T5104] libceph: connect (1)[c::]:6789 error -101 [ 221.504639][ T6153] ceph: No mds server is up or the cluster is laggy [ 221.514655][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.523562][ T5104] libceph: mon0 (1)[c::]:6789 connect error [ 221.534355][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.552430][ T6046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.574542][ T6046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.583501][ T6046] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.597502][ T6046] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.629436][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.107138][ T6167] loop1: detected capacity change from 0 to 1024 [ 222.299007][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.321938][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.507864][ T6169] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 222.819415][ T6169] syzkaller0: entered promiscuous mode [ 222.896358][ T6169] syzkaller0: entered allmulticast mode [ 223.130439][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.165731][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.033457][ T29] audit: type=1400 audit(1717864577.258:340): avc: denied { read } for pid=6192 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.088650][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 226.656039][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 227.634436][ T9] usb 3-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 227.653295][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.692791][ T9] usb 3-1: Product: syz [ 227.732830][ T9] usb 3-1: Manufacturer: syz [ 227.760193][ T9] usb 3-1: SerialNumber: syz [ 227.940901][ T9] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 228.088904][ T29] audit: type=1400 audit(1717864579.308:341): avc: denied { read } for pid=6206 comm="syz-executor.1" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 228.182904][ T29] audit: type=1400 audit(1717864579.308:342): avc: denied { open } for pid=6206 comm="syz-executor.1" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 228.215076][ T9] usb 3-1: USB disconnect, device number 2 [ 228.315733][ T6208] Bluetooth: MGMT ver 1.22 [ 231.318381][ T6222] loop0: detected capacity change from 0 to 1024 [ 231.339672][ T6222] journal_path: Lookup failure for './bus' [ 231.346170][ T6222] EXT4-fs: error: could not find journal device path [ 231.543396][ T5122] Bluetooth: hci1: command tx timeout [ 235.847762][ T29] audit: type=1400 audit(1717864587.068:343): avc: denied { create } for pid=6231 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.918461][ T29] audit: type=1400 audit(1717864587.078:344): avc: denied { setopt } for pid=6231 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.391231][ T29] audit: type=1400 audit(1717864587.608:345): avc: denied { create } for pid=6236 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 241.570858][ T29] audit: type=1400 audit(1717864589.018:346): avc: denied { bind } for pid=6233 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 241.972751][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 242.034016][ T6248] loop1: detected capacity change from 0 to 4096 [ 242.053785][ T6248] ntfs3: Bad value for 'gid' [ 242.243628][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.346715][ T6257] loop0: detected capacity change from 0 to 1764 [ 242.400191][ T8] usb 4-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 242.502996][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.578710][ T8] usb 4-1: Product: syz [ 242.638603][ T8] usb 4-1: Manufacturer: syz [ 242.665001][ T6248] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 242.700867][ T8] usb 4-1: SerialNumber: syz [ 242.721208][ T6248] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.871775][ T8] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 244.045750][ T45] usb 4-1: USB disconnect, device number 2 [ 244.247340][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.730205][ T6270] loop1: detected capacity change from 0 to 512 [ 244.902067][ T6271] ptrace attach of "/root/syz-executor.2 exec"[6046] was attempted by "/root/syz-executor.2 exec"[6271] [ 245.504860][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.565364][ T6270] ext4 filesystem being mounted at /root/syzkaller-testdir1613926540/syzkaller.Ynj1vN/23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.820882][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.861834][ T29] audit: type=1400 audit(1717864600.078:347): avc: denied { create } for pid=6299 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.904377][ T29] audit: type=1400 audit(1717864600.118:348): avc: denied { bind } for pid=6299 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.931979][ T29] audit: type=1400 audit(1717864600.118:349): avc: denied { node_bind } for pid=6299 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 248.983856][ T29] audit: type=1400 audit(1717864600.118:350): avc: denied { connect } for pid=6299 comm="syz-executor.2" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.167835][ T29] audit: type=1400 audit(1717864600.388:351): avc: denied { read } for pid=6307 comm="syz-executor.3" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.219717][ T6276] loop0: detected capacity change from 0 to 1024 [ 249.226277][ T29] audit: type=1400 audit(1717864600.388:352): avc: denied { open } for pid=6307 comm="syz-executor.3" path="/sys/kernel/config" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.266904][ T6276] journal_path: Lookup failure for './bus' [ 249.284958][ T6276] EXT4-fs: error: could not find journal device path [ 249.377629][ T29] audit: type=1400 audit(1717864600.598:353): avc: denied { write } for pid=6312 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.440923][ T6310] loop2: detected capacity change from 0 to 1764 [ 250.030380][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.963140][ T6328] binder: 6326:6328 ioctl c0306201 200001c0 returned -14 [ 251.364716][ T6332] ptrace attach of "/root/syz-executor.0 exec"[5980] was attempted by "/root/syz-executor.0 exec"[6332] [ 252.625560][ T6349] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 252.659168][ T6341] loop4: detected capacity change from 0 to 4096 [ 253.053756][ T6341] ntfs3: Bad value for 'gid' [ 253.612248][ T6341] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 253.639503][ T6341] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.880408][ T6353] loop1: detected capacity change from 0 to 1024 [ 253.905065][ T6353] journal_path: Lookup failure for './bus' [ 253.916872][ T6353] EXT4-fs: error: could not find journal device path [ 254.094631][ T6365] binder: 6363:6365 ioctl c0306201 200001c0 returned -14 [ 254.110194][ T6367] loop0: detected capacity change from 0 to 512 [ 254.132353][ T6367] ext4: Unknown parameter 'delalloc.nouid32' [ 254.237578][ T6367] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 254.260042][ T29] audit: type=1400 audit(1717864605.478:354): avc: denied { create } for pid=6368 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 254.327166][ T29] audit: type=1400 audit(1717864605.548:355): avc: denied { bind } for pid=6368 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 254.416568][ T29] audit: type=1400 audit(1717864605.598:356): avc: denied { write } for pid=6368 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 254.461321][ T29] audit: type=1326 audit(1717864605.678:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fa07cf69 code=0x7ffc0000 [ 254.507583][ T29] audit: type=1326 audit(1717864605.678:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fa07cf69 code=0x7ffc0000 [ 254.549270][ T29] audit: type=1326 audit(1717864605.678:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79fa07cf69 code=0x7ffc0000 [ 254.583338][ T29] audit: type=1326 audit(1717864605.708:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fa07cf69 code=0x7ffc0000 [ 254.665217][ T29] audit: type=1326 audit(1717864605.718:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fa07cf69 code=0x7ffc0000 [ 254.734382][ T29] audit: type=1326 audit(1717864605.718:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79fa07cf69 code=0x7ffc0000 [ 254.779681][ T29] audit: type=1326 audit(1717864605.718:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fa07cf69 code=0x7ffc0000 [ 255.168353][ T6388] loop2: detected capacity change from 0 to 256 [ 255.788388][ T6394] binder: 6393:6394 ioctl c0306201 200001c0 returned -14 [ 256.356764][ T6390] loop0: detected capacity change from 0 to 4096 [ 256.380376][ T6390] ntfs3: Bad value for 'gid' [ 256.754030][ T6390] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 256.762478][ T6390] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.968073][ T6400] loop1: detected capacity change from 0 to 1024 [ 256.993300][ T6400] journal_path: Lookup failure for './bus' [ 257.011826][ T6400] EXT4-fs: error: could not find journal device path [ 257.380461][ T2440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.536330][ T6416] binder: 6415:6416 ioctl c0306201 200001c0 returned -14 [ 257.828247][ T2440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.109584][ T2440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.346710][ T2440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.853962][ T6430] loop0: detected capacity change from 0 to 1764 [ 260.294563][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 260.294589][ T29] audit: type=1400 audit(1717864611.518:397): avc: denied { listen } for pid=6439 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 260.325582][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.489175][ T2440] bridge_slave_1: left allmulticast mode [ 260.532583][ T2440] bridge_slave_1: left promiscuous mode [ 260.538535][ T2440] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.608861][ T2440] bridge_slave_0: left allmulticast mode [ 260.651503][ T2440] bridge_slave_0: left promiscuous mode [ 260.676191][ T2440] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.854124][ T6445] binder: 6442:6445 ioctl c0306201 200001c0 returned -14 [ 261.485717][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.711249][ T6455] ptrace attach of "/root/syz-executor.3 exec"[5941] was attempted by "/root/syz-executor.3 exec"[6455] [ 261.751983][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.786056][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.803890][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.043558][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.076444][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.092782][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.197311][ T6446] loop2: detected capacity change from 0 to 1024 [ 262.255710][ T6446] journal_path: Lookup failure for './bus' [ 262.291948][ T6446] EXT4-fs: error: could not find journal device path [ 264.182825][ T5120] Bluetooth: hci0: command tx timeout [ 264.218482][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.540068][ T6478] loop3: detected capacity change from 0 to 512 [ 264.574894][ T6478] EXT4-fs (loop3): orphan cleanup on readonly fs [ 264.682419][ T6478] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz-executor.3: bg 0: block 248: padding at end of block bitmap is not set [ 264.753416][ T2440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.768843][ T6478] Quota error (device loop3): write_blk: dquota write failed [ 264.786125][ T6478] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 264.812901][ T6478] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz-executor.3: Failed to acquire dquot type 1 [ 264.831407][ T2440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.868224][ T2440] bond0 (unregistering): Released all slaves [ 264.913943][ T6478] EXT4-fs (loop3): 1 truncate cleaned up [ 264.943802][ T6478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.959749][ T6483] loop0: detected capacity change from 0 to 256 [ 264.972800][ T6483] exfat: Deprecated parameter 'utf8' [ 264.999804][ T6483] exfat: Deprecated parameter 'namecase' [ 265.025864][ T6483] exfat: Deprecated parameter 'utf8' [ 265.086449][ T6478] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 265.093144][ T6483] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 265.228051][ T6478] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 265.275423][ T29] audit: type=1400 audit(1717864616.488:398): avc: denied { getopt } for pid=6475 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.355495][ T6484] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 268.733179][ T29] audit: type=1400 audit(1717864619.468:399): avc: denied { write } for pid=6491 comm="syz-executor.0" path="socket:[16118]" dev="sockfs" ino=16118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 268.771429][ T5120] Bluetooth: hci0: command tx timeout [ 268.876822][ T29] audit: type=1400 audit(1717864619.568:400): avc: denied { ioctl } for pid=6491 comm="syz-executor.0" path="socket:[16118]" dev="sockfs" ino=16118 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 269.205010][ T5941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.824008][ T5120] Bluetooth: hci0: command tx timeout [ 270.841184][ T2440] hsr_slave_0: left promiscuous mode [ 271.422989][ T6509] loop3: detected capacity change from 0 to 1024 [ 271.695435][ T6509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.782605][ T2440] hsr_slave_1: left promiscuous mode [ 271.799665][ T2440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.807223][ T2440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.824293][ T2440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.831986][ T2440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.917933][ T2440] veth1_macvtap: left promiscuous mode [ 271.937926][ T2440] veth0_macvtap: left promiscuous mode [ 272.104521][ T2440] veth1_vlan: left promiscuous mode [ 272.128582][ T2440] veth0_vlan: left promiscuous mode [ 272.954005][ T5120] Bluetooth: hci0: command tx timeout [ 273.267560][ T5941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.358222][ T6516] loop0: detected capacity change from 0 to 256 [ 273.415457][ T6516] exfat: Deprecated parameter 'utf8' [ 273.523150][ T6516] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 273.660527][ T29] audit: type=1400 audit(1717864624.878:401): avc: denied { create } for pid=6527 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.744460][ T29] audit: type=1400 audit(1717864624.908:402): avc: denied { setopt } for pid=6527 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.886653][ T29] audit: type=1400 audit(1717864625.108:403): avc: denied { map } for pid=6508 comm="syz-executor.0" path="/root/syzkaller-testdir2069437658/syzkaller.GcXiCC/37/file0/memory.events" dev="loop0" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.971551][ T6531] loop3: detected capacity change from 0 to 256 [ 274.001351][ T6531] exfat: Deprecated parameter 'utf8' [ 274.022151][ T6531] exfat: Deprecated parameter 'namecase' [ 274.041572][ T6531] exfat: Deprecated parameter 'utf8' [ 274.140565][ T6531] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 274.312728][ T29] audit: type=1400 audit(1717864625.528:404): avc: denied { getopt } for pid=6535 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 276.132617][ T29] audit: type=1400 audit(1717864627.338:405): avc: denied { read } for pid=6543 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.261789][ T2440] team0 (unregistering): Port device team_slave_1 removed [ 276.370648][ T2440] team0 (unregistering): Port device team_slave_0 removed [ 276.378657][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.491528][ T29] audit: type=1400 audit(1717864627.708:406): avc: denied { create } for pid=6547 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.755117][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.978216][ T6454] chnl_net:caif_netlink_parms(): no params data found [ 279.167974][ T6571] loop1: detected capacity change from 0 to 256 [ 279.217284][ T6571] exfat: Deprecated parameter 'utf8' [ 279.370657][ T29] audit: type=1400 audit(1717864630.578:407): avc: denied { read write } for pid=6578 comm="syz-executor.0" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 279.396244][ T6571] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 279.398973][ T29] audit: type=1400 audit(1717864630.578:408): avc: denied { open } for pid=6578 comm="syz-executor.0" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 279.492067][ T6146] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.569835][ T6146] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 279.799619][ T6454] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.824977][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.839920][ T6454] bridge_slave_0: entered allmulticast mode [ 279.874517][ T6454] bridge_slave_0: entered promiscuous mode [ 279.920129][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.952899][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.976460][ T6454] bridge_slave_1: entered allmulticast mode [ 280.003987][ T6454] bridge_slave_1: entered promiscuous mode [ 280.249020][ T6454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.295904][ T6454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.530889][ T6454] team0: Port device team_slave_0 added [ 280.570044][ T6454] team0: Port device team_slave_1 added [ 280.764995][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.772098][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.864822][ T6454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.890265][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.904252][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.961704][ T6454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.979385][ T6574] loop2: detected capacity change from 0 to 32768 [ 281.031535][ T6574] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 281.309567][ T6454] hsr_slave_0: entered promiscuous mode [ 281.355620][ T6454] hsr_slave_1: entered promiscuous mode [ 281.371728][ T6454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.395522][ T6454] Cannot create hsr debugfs directory [ 281.604687][ T6574] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 281.669075][ T6574] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 281.954767][ T6598] loop1: detected capacity change from 0 to 40427 [ 281.970485][ T6574] bcachefs (loop2): alloc_read... done [ 281.986312][ T6598] F2FS-fs (loop1): invalid crc value [ 282.004976][ T6574] bcachefs (loop2): stripes_read... done [ 282.025561][ T6574] bcachefs (loop2): snapshots_read... done [ 282.044725][ T6598] F2FS-fs (loop1): Found nat_bits in checkpoint [ 282.052031][ T6604] loop0: detected capacity change from 0 to 256 [ 282.093368][ T6574] bcachefs (loop2): journal_replay... done [ 282.112990][ T6574] bcachefs (loop2): resume_logged_ops... done [ 282.133332][ T6598] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 282.164087][ T6574] bcachefs (loop2): going read-write [ 282.211044][ T6574] bcachefs (loop2): bch2_copygc_start(): error creating copygc thread EINTR [ 282.260969][ T6574] bcachefs (loop2): error starting copygc thread [ 282.307259][ T6574] bcachefs (loop2): going read-only [ 282.343059][ T6574] bcachefs (loop2): finished waiting for writes to stop [ 282.396289][ T6574] bcachefs (loop2): flushing journal and stopping allocators, journal seq 7 [ 282.458343][ T6574] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 7 [ 282.552852][ T29] audit: type=1400 audit(1717864633.698:409): avc: denied { bind } for pid=6597 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 282.737656][ T6610] syz-executor.1: attempt to access beyond end of device [ 282.737656][ T6610] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 282.778468][ T6610] syz-executor.1: attempt to access beyond end of device [ 282.778468][ T6610] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 287.382526][ C0] sched: RT throttling activated [ 287.600720][ T6574] bcachefs (loop2): shutdown complete, journal seq 8 [ 287.613701][ T29] audit: type=1400 audit(1717864633.698:410): avc: denied { setopt } for pid=6597 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 287.676942][ T5876] syz-executor.1: attempt to access beyond end of device [ 287.676942][ T5876] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 287.705879][ T6574] bcachefs (loop2): marking filesystem clean [ 287.733919][ T5876] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 287.743923][ T29] audit: type=1800 audit(1717864633.918:411): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 287.797182][ T6574] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 287.820755][ T6574] bcachefs (loop2): shutting down [ 287.862815][ T29] audit: type=1804 audit(1717864634.038:412): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1613926540/syzkaller.Ynj1vN/46/file0/file2" dev="loop1" ino=10 res=1 errno=0 [ 287.892709][ T29] audit: type=1800 audit(1717864638.628:413): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 288.024804][ T6574] bcachefs (loop2): shutdown complete [ 288.784091][ T6616] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 288.792256][ T6616] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.137353][ T6454] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.201041][ T6454] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.258468][ T6454] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.262268][ T6620] loop0: detected capacity change from 0 to 512 [ 289.331491][ T6454] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.379716][ T6620] EXT4-fs (loop0): orphan cleanup on readonly fs [ 289.457980][ T6620] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 289.557899][ T6620] Quota error (device loop0): write_blk: dquota write failed [ 289.595492][ T6620] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 289.639505][ T6620] EXT4-fs error (device loop0): ext4_acquire_dquot:6858: comm syz-executor.0: Failed to acquire dquot type 1 [ 289.737276][ T6620] EXT4-fs (loop0): 1 truncate cleaned up [ 289.777750][ T6620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.895488][ T6620] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 289.971548][ T6620] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 289.976485][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.035461][ T6622] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 290.110949][ T6454] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.170110][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.177451][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.190851][ T29] audit: type=1400 audit(1717864641.388:414): avc: denied { getopt } for pid=6626 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.295797][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.303193][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.827698][ T5980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.874572][ T6618] loop3: detected capacity change from 0 to 32768 [ 291.609875][ T6454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.687338][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 292.791042][ T45] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 293.002436][ T6454] veth0_vlan: entered promiscuous mode [ 293.084414][ T6454] veth1_vlan: entered promiscuous mode [ 293.243906][ T6454] veth0_macvtap: entered promiscuous mode [ 293.297627][ T6454] veth1_macvtap: entered promiscuous mode [ 293.448028][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.460391][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.491749][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.514790][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.545147][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.561280][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.572950][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.593943][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.617205][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.685188][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.725165][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.750788][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.778936][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.810458][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.835611][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.877877][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.922596][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.964145][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.022438][ T6454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.352064][ T6667] loop2: detected capacity change from 0 to 32768 [ 294.362979][ T6667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6667) [ 294.395338][ T6454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.408152][ T6454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.423073][ T6454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.446329][ T6667] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.456664][ T6667] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 294.465819][ T6667] BTRFS info (device loop2): using free-space-tree [ 294.968805][ T6682] loop0: detected capacity change from 0 to 32768 [ 295.409059][ T6682] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 296.628234][ T6682] XFS (loop0): Ending clean mount [ 296.652647][ T6682] XFS (loop0): Quotacheck needed: Please wait. [ 296.732652][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.758262][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.800963][ T6682] XFS (loop0): Quotacheck: Done. [ 296.839998][ T2841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.874741][ T2841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.878974][ T6046] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.960347][ T5980] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 297.521578][ T6698] loop1: detected capacity change from 0 to 4096 [ 297.597198][ T6698] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 297.952724][ T29] audit: type=1400 audit(1717864649.168:415): avc: denied { write } for pid=6706 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 298.010916][ T6698] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 298.203792][ T29] audit: type=1400 audit(1717864649.408:416): avc: denied { link } for pid=6696 comm="syz-executor.1" name="file0" dev="loop1" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.266256][ T5104] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 298.302116][ T29] audit: type=1800 audit(1717864649.448:417): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 298.334425][ T6716] ntfs3: loop1: mft corrupted [ 298.370649][ T2841] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.462836][ T5104] usb 3-1: Using ep0 maxpacket: 32 [ 298.465604][ T5104] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.465727][ T5104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.465763][ T5104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.465791][ T5104] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 298.465845][ T5104] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 298.465875][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.477881][ T5104] usb 3-1: config 0 descriptor?? [ 298.730164][ T2841] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.916544][ T2841] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.995895][ T5104] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0 [ 298.996060][ T5104] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0 [ 298.996101][ T5104] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0 [ 298.996141][ T5104] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0 [ 298.996184][ T5104] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0 [ 299.038171][ T5104] hid-generic 0003:1B96:9F0A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.2-1/input0 [ 299.250127][ T2841] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.277408][ T933] usb 3-1: USB disconnect, device number 3 [ 299.383897][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 299.841843][ T6724] loop1: detected capacity change from 0 to 32768 [ 299.980067][ T6724] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 300.238732][ T6724] XFS (loop1): Ending clean mount [ 300.276173][ T6724] XFS (loop1): Quotacheck needed: Please wait. [ 300.324772][ T6734] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 300.366895][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.457092][ T6724] XFS (loop1): Quotacheck: Done. [ 300.491562][ T2841] bridge_slave_1: left allmulticast mode [ 300.497552][ T2841] bridge_slave_1: left promiscuous mode [ 300.510171][ T2841] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.538780][ T2841] bridge_slave_0: left allmulticast mode [ 300.544975][ T2841] bridge_slave_0: left promiscuous mode [ 300.565867][ T2841] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.740458][ T5876] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 301.038331][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.056683][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.087982][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.097915][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.133077][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 301.150572][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.592244][ T6743] vcan0: tx address claim with dest, not broadcast [ 301.893297][ T6747] loop0: detected capacity change from 0 to 1024 [ 301.939281][ T6747] hfsplus: bad catalog entry used to create inode [ 301.961792][ T6747] hfsplus: failed to load root directory [ 302.060569][ T29] audit: type=1400 audit(1717864653.278:418): avc: denied { create } for pid=6751 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.095166][ T6752] loop1: detected capacity change from 0 to 256 [ 302.135642][ T29] audit: type=1400 audit(1717864653.308:419): avc: denied { ioctl } for pid=6751 comm="syz-executor.2" path="socket:[18443]" dev="sockfs" ino=18443 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.199562][ T6752] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 302.315559][ T6759] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 302.350183][ T6759] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.850812][ T29] audit: type=1400 audit(1717864654.028:420): avc: denied { getopt } for pid=6760 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 303.270413][ T5120] Bluetooth: hci0: command tx timeout [ 303.631878][ T2841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.656556][ T2841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.679860][ T2841] bond0 (unregistering): Released all slaves [ 304.113912][ T29] audit: type=1400 audit(1717864655.338:421): avc: denied { ioctl } for pid=6785 comm="syz-executor.1" path="socket:[17927]" dev="sockfs" ino=17927 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.192034][ T6782] loop3: detected capacity change from 0 to 4096 [ 304.230631][ T6782] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 304.348063][ T29] audit: type=1400 audit(1717864655.568:422): avc: denied { create } for pid=6791 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.421717][ T29] audit: type=1400 audit(1717864655.598:423): avc: denied { setopt } for pid=6791 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.506463][ T5120] Bluetooth: hci4: command 0x0406 tx timeout [ 304.553283][ T6782] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 304.676995][ T6795] loop2: detected capacity change from 0 to 256 [ 304.711685][ T6795] exfat: Deprecated parameter 'utf8' [ 304.732650][ T29] audit: type=1800 audit(1717864655.948:424): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=0 res=0 errno=0 [ 304.788427][ T6800] loop0: detected capacity change from 0 to 256 [ 304.829738][ T6795] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 304.845869][ T6801] ntfs3: loop3: mft corrupted [ 304.867244][ T6797] loop1: detected capacity change from 0 to 4096 [ 304.891865][ T6797] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 304.906561][ T6800] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 305.001310][ T2841] hsr_slave_0: left promiscuous mode [ 305.030799][ T2841] hsr_slave_1: left promiscuous mode [ 305.086617][ T2841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.107551][ T2841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.152902][ T2841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.180620][ T2841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.303074][ T5122] Bluetooth: hci0: command tx timeout [ 305.660918][ T6804] loop3: detected capacity change from 0 to 32768 [ 305.693455][ T6804] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6804) [ 305.701927][ T2841] veth1_macvtap: left promiscuous mode [ 305.748891][ T6804] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 305.759382][ T6804] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 305.769790][ T6804] BTRFS info (device loop3): using free-space-tree [ 305.802763][ T2841] veth0_macvtap: left promiscuous mode [ 305.821887][ T2841] veth1_vlan: left promiscuous mode [ 305.843450][ T2841] veth0_vlan: left promiscuous mode [ 307.381019][ T5941] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 307.395814][ T5122] Bluetooth: hci0: command tx timeout [ 307.603150][ T29] audit: type=1400 audit(1717864658.828:425): avc: denied { getopt } for pid=6829 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 307.836032][ T6835] loop0: detected capacity change from 0 to 2048 [ 307.950714][ T6835] loop0: p1 < > p4 [ 307.958982][ T6835] loop0: p4 size 8388608 extends beyond EOD, truncated [ 308.104670][ T6840] loop2: detected capacity change from 0 to 2048 [ 308.217980][ T6840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.274799][ T29] audit: type=1400 audit(1717864659.498:426): avc: denied { map } for pid=6839 comm="syz-executor.2" path="/root/syzkaller-testdir1480154546/syzkaller.v4boaZ/42/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 308.394223][ T29] audit: type=1400 audit(1717864659.498:427): avc: denied { execute } for pid=6839 comm="syz-executor.2" path="/root/syzkaller-testdir1480154546/syzkaller.v4boaZ/42/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 308.468704][ T29] audit: type=1400 audit(1717864659.588:428): avc: denied { ioctl } for pid=6839 comm="syz-executor.2" path="/root/syzkaller-testdir1480154546/syzkaller.v4boaZ/42/file1/bus" dev="loop2" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 308.550577][ T6046] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.648641][ T6852] loop0: detected capacity change from 0 to 256 [ 308.695510][ T6852] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 308.789647][ T6848] loop1: detected capacity change from 0 to 4096 [ 308.825530][ T6848] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 309.442237][ T6855] loop2: detected capacity change from 0 to 4096 [ 309.462613][ T5122] Bluetooth: hci0: command tx timeout [ 309.473433][ T6855] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 309.634470][ T5122] Bluetooth: hci1: command 0x0406 tx timeout [ 310.452721][ T6848] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 310.603815][ T29] audit: type=1800 audit(1717864661.808:429): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 310.682428][ T6848] ntfs3: loop1: mft corrupted [ 310.806219][ T2841] team0 (unregistering): Port device team_slave_1 removed [ 311.125693][ T2841] team0 (unregistering): Port device team_slave_0 removed [ 311.522668][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 311.552745][ T5104] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 311.741020][ T45] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 311.764402][ T5104] usb 2-1: Using ep0 maxpacket: 32 [ 311.772253][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.783903][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.796659][ T5104] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.816456][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 311.829806][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.847891][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 311.859529][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.882419][ T45] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 311.890878][ T45] usb 3-1: Manufacturer: syz [ 311.895900][ T5104] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 311.911600][ T5104] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 311.924945][ T45] usb 3-1: config 0 descriptor?? [ 311.939316][ T5104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.976579][ T5104] usb 2-1: config 0 descriptor?? [ 312.152620][ C1] hrtimer: interrupt took 149678 ns [ 312.393272][ T45] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 312.408372][ T45] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 312.488770][ T5104] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 312.506194][ T5104] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 312.515805][ T5104] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 312.525101][ T5104] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 312.550859][ T45] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 312.563321][ T5104] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0 [ 312.605473][ T5104] hid-generic 0003:1B96:9F0A.0005: hidraw1: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0 [ 312.670253][ T8] usb 2-1: USB disconnect, device number 2 [ 312.697800][ T9] usb 3-1: USB disconnect, device number 4 [ 312.916223][ T6740] chnl_net:caif_netlink_parms(): no params data found [ 313.069962][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.079848][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.088091][ T6740] bridge_slave_0: entered allmulticast mode [ 313.096529][ T6740] bridge_slave_0: entered promiscuous mode [ 313.115234][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.123889][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.131223][ T6740] bridge_slave_1: entered allmulticast mode [ 313.139337][ T6740] bridge_slave_1: entered promiscuous mode [ 313.216177][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.250523][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.327072][ T6740] team0: Port device team_slave_0 added [ 313.340771][ T6740] team0: Port device team_slave_1 added [ 313.387071][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.402328][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.431010][ T6740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.448520][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.457424][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.485414][ T6740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.556363][ T6740] hsr_slave_0: entered promiscuous mode [ 313.565866][ T6740] hsr_slave_1: entered promiscuous mode [ 313.572358][ T6740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.580413][ T6740] Cannot create hsr debugfs directory [ 314.200709][ T6740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.213019][ T6740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.225300][ T6740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.239235][ T6740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.393135][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.438537][ T6740] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.497359][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.504798][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.599318][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.606759][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.620323][ T6887] loop1: detected capacity change from 0 to 2048 [ 314.744489][ T6887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.977376][ T6895] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.369025][ T6899] loop2: detected capacity change from 0 to 1024 [ 315.706194][ T6899] tc_dump_action: action bad kind [ 315.747520][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.002169][ T6902] loop1: detected capacity change from 0 to 4096 [ 316.082990][ T6902] NILFS (loop1): invalid segment: Checksum error in segment payload [ 316.109941][ T6902] NILFS (loop1): trying rollback from an earlier position [ 316.230327][ T6902] NILFS (loop1): recovery complete [ 316.255355][ T6907] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.513753][ T6885] loop0: detected capacity change from 0 to 32768 [ 316.740991][ T29] audit: type=1400 audit(1717864667.928:430): avc: denied { create } for pid=6901 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 316.754962][ T6885] read_mapping_page failed! [ 316.799577][ T6885] ERROR: (device loop0): txAbort: [ 316.799577][ T6885] [ 316.809255][ T29] audit: type=1400 audit(1717864667.958:431): avc: denied { rename } for pid=6882 comm="syz-executor.0" name="file0" dev="loop0" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.951595][ T29] audit: type=1400 audit(1717864668.148:432): avc: denied { write } for pid=6901 comm="syz-executor.1" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 317.274250][ T6740] veth0_vlan: entered promiscuous mode [ 317.311801][ T6740] veth1_vlan: entered promiscuous mode [ 317.481698][ T6740] veth0_macvtap: entered promiscuous mode [ 317.537144][ T6740] veth1_macvtap: entered promiscuous mode [ 317.576716][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.602039][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.638472][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.676042][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.705738][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.723840][ T6920] loop3: detected capacity change from 0 to 256 [ 317.739047][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.770373][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.806131][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.818896][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.841587][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.854845][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.868500][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.879105][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.889400][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.900266][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.911485][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.922359][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.945586][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.988197][ T6740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.997721][ T6740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.008541][ T6740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.039053][ T6740] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.355604][ T29] audit: type=1400 audit(1717864669.578:433): avc: denied { setopt } for pid=6901 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 318.532983][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.556810][ T6918] loop3: detected capacity change from 0 to 512 [ 318.597090][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.607564][ T6918] EXT4-fs: Ignoring removed i_version option [ 318.623062][ T6918] journal_path: Lookup failure for './file0' [ 318.652755][ T6918] EXT4-fs: error: could not find journal device path [ 318.765481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.778667][ T29] audit: type=1400 audit(1717864669.998:434): avc: denied { unlink } for pid=6921 comm="syz-executor.0" name="#1" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 318.824165][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.619058][ T6933] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 319.687391][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.874693][ T5120] Bluetooth: hci3: command 0x0406 tx timeout [ 320.093964][ T6943] loop3: detected capacity change from 0 to 256 [ 320.329960][ T29] audit: type=1400 audit(1717864671.548:435): avc: denied { read } for pid=6945 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.378356][ T6943] FAT-fs (loop3): Directory bread(block 64) failed [ 320.397630][ T6943] FAT-fs (loop3): Directory bread(block 65) failed [ 320.406738][ T6943] FAT-fs (loop3): Directory bread(block 66) failed [ 320.406940][ T29] audit: type=1400 audit(1717864671.548:436): avc: denied { open } for pid=6945 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.441686][ T6943] FAT-fs (loop3): Directory bread(block 67) failed [ 320.449908][ T6943] FAT-fs (loop3): Directory bread(block 68) failed [ 320.458334][ T6943] FAT-fs (loop3): Directory bread(block 69) failed [ 320.465439][ T6943] FAT-fs (loop3): Directory bread(block 70) failed [ 320.478782][ T6943] FAT-fs (loop3): Directory bread(block 71) failed [ 320.479857][ T29] audit: type=1400 audit(1717864671.688:437): avc: denied { ioctl } for pid=6945 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=695 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.512182][ T6943] FAT-fs (loop3): Directory bread(block 72) failed [ 320.545347][ T6943] FAT-fs (loop3): Directory bread(block 73) failed [ 320.894543][ T6954] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 320.932638][ T6954] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.265557][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.282725][ T6961] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 321.295477][ T6961] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 321.899423][ T6974] loop3: detected capacity change from 0 to 512 [ 323.114503][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.157614][ T6974] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 323.219700][ T6974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 323.426985][ T6974] EXT4-fs (loop3): 1 truncate cleaned up [ 323.460055][ T6974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.614621][ T6985] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.899946][ T29] audit: type=1400 audit(1717864675.008:438): avc: denied { view } for pid=6986 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 324.177296][ T29] audit: type=1326 audit(1717864675.298:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aa187cf69 code=0x0 [ 324.383412][ T29] audit: type=1804 audit(1717864675.398:440): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1956239820/syzkaller.G88Gc4/66/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 324.837152][ T5941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.847826][ T6993] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 324.897667][ T6993] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.156331][ T6997] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.471667][ T7008] input: syz0 as /devices/virtual/input/input9 [ 325.578839][ T7009] loop4: detected capacity change from 0 to 256 [ 325.608631][ T29] audit: type=1400 audit(1717864676.828:441): avc: denied { bind } for pid=7011 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.691390][ T29] audit: type=1400 audit(1717864676.868:442): avc: denied { name_bind } for pid=7011 comm="syz-executor.2" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 325.793000][ T29] audit: type=1400 audit(1717864676.878:443): avc: denied { node_bind } for pid=7011 comm="syz-executor.2" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 325.870888][ T29] audit: type=1400 audit(1717864676.888:444): avc: denied { name_connect } for pid=7011 comm="syz-executor.2" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 325.911289][ T7009] FAT-fs (loop4): Directory bread(block 64) failed [ 325.918165][ T7009] FAT-fs (loop4): Directory bread(block 65) failed [ 325.937692][ T7009] FAT-fs (loop4): Directory bread(block 66) failed [ 325.953745][ T7009] FAT-fs (loop4): Directory bread(block 67) failed [ 325.961301][ T7009] FAT-fs (loop4): Directory bread(block 68) failed [ 325.962749][ T29] audit: type=1400 audit(1717864676.968:445): avc: denied { read } for pid=7011 comm="syz-executor.2" laddr=172.20.20.170 lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.990447][ T7009] FAT-fs (loop4): Directory bread(block 69) failed [ 325.997557][ T7009] FAT-fs (loop4): Directory bread(block 70) failed [ 326.011503][ T7009] FAT-fs (loop4): Directory bread(block 71) failed [ 326.023010][ T7009] FAT-fs (loop4): Directory bread(block 72) failed [ 326.038677][ T7009] FAT-fs (loop4): Directory bread(block 73) failed [ 326.749777][ T29] audit: type=1326 audit(1717864677.858:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7014 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf1267cf69 code=0x0 [ 326.888887][ T29] audit: type=1800 audit(1717864678.108:447): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 327.317803][ T7036] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 327.338291][ T7036] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.009622][ T7041] loop1: detected capacity change from 0 to 32768 [ 328.020502][ T7041] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7041) [ 328.060637][ T7041] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.071773][ T7041] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 328.080664][ T7041] BTRFS info (device loop1): using free-space-tree [ 328.489020][ T7068] loop2: detected capacity change from 0 to 4096 [ 328.642331][ T7068] NILFS (loop2): invalid segment: Checksum error in segment payload [ 329.081416][ T7068] NILFS (loop2): trying rollback from an earlier position [ 329.532773][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 329.532799][ T29] audit: type=1800 audit(1717864680.708:450): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 329.665659][ T7068] NILFS (loop2): recovery complete [ 329.708159][ T7081] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.898155][ T5876] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.187249][ T7089] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.273604][ T29] audit: type=1326 audit(1717864681.498:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa187cf69 code=0x7ffc0000 [ 330.366320][ T29] audit: type=1326 audit(1717864681.538:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa187cf69 code=0x7ffc0000 [ 330.481740][ T29] audit: type=1326 audit(1717864681.548:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aa187cf69 code=0x7ffc0000 [ 330.597957][ T29] audit: type=1326 audit(1717864681.588:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa187cf69 code=0x7ffc0000 [ 330.722675][ T29] audit: type=1326 audit(1717864681.618:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa187cf69 code=0x7ffc0000 [ 330.819678][ T29] audit: type=1326 audit(1717864681.628:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aa187cf69 code=0x7ffc0000 [ 330.924725][ T29] audit: type=1326 audit(1717864681.628:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa187cf69 code=0x7ffc0000 [ 331.069974][ T29] audit: type=1326 audit(1717864681.628:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3aa187a6e7 code=0x7ffc0000 [ 331.107662][ T7108] loop0: detected capacity change from 0 to 256 [ 331.163485][ T29] audit: type=1326 audit(1717864681.628:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3aa18403b9 code=0x7ffc0000 [ 331.611336][ T7112] loop4: detected capacity change from 0 to 32768 [ 331.682072][ T7112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7112) [ 331.708692][ T7112] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.720104][ T7112] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 331.730063][ T7112] BTRFS info (device loop4): using free-space-tree [ 332.939405][ T7108] loop0: detected capacity change from 0 to 512 [ 333.268349][ T7108] EXT4-fs: Ignoring removed i_version option [ 333.274771][ T7108] journal_path: Lookup failure for './file0' [ 333.280932][ T7108] EXT4-fs: error: could not find journal device path [ 333.365208][ T6740] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 333.380982][ T7143] input: syz1 as /devices/virtual/input/input10 [ 334.399650][ T7157] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.339928][ T7153] loop0: detected capacity change from 0 to 1024 [ 335.385350][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 335.385418][ T29] audit: type=1400 audit(1717864686.608:479): avc: denied { mounton } for pid=7152 comm="syz-executor.0" path="/root/syzkaller-testdir2069437658/syzkaller.GcXiCC/89/file0/file0" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 335.419114][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.516078][ T7153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.535219][ T29] audit: type=1326 audit(1717864686.758:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832a7cf69 code=0x7ffc0000 [ 335.559609][ T29] audit: type=1326 audit(1717864686.758:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832a7cf69 code=0x7ffc0000 [ 335.615905][ T29] audit: type=1326 audit(1717864686.838:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc832a7cf69 code=0x7ffc0000 [ 335.697709][ T29] audit: type=1326 audit(1717864686.918:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832a7cf69 code=0x7ffc0000 [ 335.749916][ T29] audit: type=1326 audit(1717864686.938:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832a7cf69 code=0x7ffc0000 [ 335.795800][ T29] audit: type=1326 audit(1717864686.968:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc832a7cf69 code=0x7ffc0000 [ 335.821429][ T29] audit: type=1326 audit(1717864686.968:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832a7cf69 code=0x7ffc0000 [ 335.885765][ T7172] loop1: detected capacity change from 0 to 4096 [ 335.896254][ T5980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.903837][ T5980] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 335.948651][ T5980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.010253][ T7172] NILFS (loop1): invalid segment: Checksum error in segment payload [ 336.039643][ T7172] NILFS (loop1): trying rollback from an earlier position [ 336.108197][ T7172] NILFS (loop1): recovery complete [ 336.138905][ T7177] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.174567][ T7178] input: syz1 as /devices/virtual/input/input11 [ 336.232430][ T7180] Bluetooth: MGMT ver 1.22 [ 337.521717][ T7186] sctp: failed to load transform for md5: -2 [ 338.397502][ T7214] loop0: detected capacity change from 0 to 1024 [ 340.253141][ T7287] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.604856][ T7214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.297494][ T5980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.272161][ T7331] hub 9-0:1.0: USB hub found [ 342.283300][ T7331] hub 9-0:1.0: 8 ports detected [ 342.934907][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 342.934934][ T29] audit: type=1400 audit(1717864693.218:555): avc: denied { append } for pid=7316 comm="syz-executor.3" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.508422][ T7327] Cannot find del_set index 0 as target [ 345.352837][ T29] audit: type=1400 audit(1717864696.528:556): avc: denied { bind } for pid=7394 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.558058][ T29] audit: type=1400 audit(1717864696.548:557): avc: denied { write } for pid=7394 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.136320][ T29] audit: type=1400 audit(1717864697.358:558): avc: denied { ioctl } for pid=7405 comm="syz-executor.3" path="socket:[20547]" dev="sockfs" ino=20547 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.213585][ T7403] loop0: detected capacity change from 0 to 1024 [ 346.303233][ T7403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.368471][ T29] audit: type=1400 audit(1717864697.588:559): avc: denied { append } for pid=7405 comm="syz-executor.3" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 346.465522][ T7409] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.303452][ T7423] hub 9-0:1.0: USB hub found [ 347.308904][ T7423] hub 9-0:1.0: 8 ports detected [ 349.700564][ T7426] loop2: detected capacity change from 0 to 256 [ 349.711519][ T7426] exfat: Deprecated parameter 'utf8' [ 349.717953][ T7426] exfat: Deprecated parameter 'namecase' [ 349.826451][ T7426] exfat: Deprecated parameter 'namecase' [ 349.832359][ T7426] exfat: Deprecated parameter 'utf8' [ 349.838397][ T7426] exfat: Deprecated parameter 'utf8' [ 351.510569][ T7426] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 351.788098][ T5980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.318493][ T7434] loop3: detected capacity change from 0 to 256 [ 352.560705][ T7434] FAT-fs (loop3): Directory bread(block 64) failed [ 352.587533][ T7434] FAT-fs (loop3): Directory bread(block 65) failed [ 352.610084][ T7434] FAT-fs (loop3): Directory bread(block 66) failed [ 352.633467][ T7434] FAT-fs (loop3): Directory bread(block 67) failed [ 352.648596][ T7434] FAT-fs (loop3): Directory bread(block 68) failed [ 352.659299][ T7434] FAT-fs (loop3): Directory bread(block 69) failed [ 352.692906][ T7434] FAT-fs (loop3): Directory bread(block 70) failed [ 352.711544][ T7434] FAT-fs (loop3): Directory bread(block 71) failed [ 352.721249][ T7434] FAT-fs (loop3): Directory bread(block 72) failed [ 352.729274][ T7434] FAT-fs (loop3): Directory bread(block 73) failed [ 352.753832][ T7447] Cannot find del_set index 0 as target [ 353.219511][ T7462] loop1: detected capacity change from 0 to 256 [ 353.226913][ T7462] exfat: Deprecated parameter 'utf8' [ 353.232328][ T7462] exfat: Deprecated parameter 'namecase' [ 353.238864][ T7462] exfat: Deprecated parameter 'namecase' [ 353.244628][ T7462] exfat: Deprecated parameter 'utf8' [ 353.249959][ T7462] exfat: Deprecated parameter 'utf8' [ 355.415481][ T7462] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 356.054514][ T7463] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.978025][ T7502] loop3: detected capacity change from 0 to 735 [ 358.259463][ T7507] Cannot find del_set index 0 as target [ 358.459199][ T7502] FAT-fs (loop3): Directory bread(block 183) failed [ 358.495464][ T7502] FAT-fs (loop3): Directory bread(block 184) failed [ 358.513942][ T7502] FAT-fs (loop3): Directory bread(block 185) failed [ 358.532696][ T7502] FAT-fs (loop3): Directory bread(block 186) failed [ 358.556500][ T7502] FAT-fs (loop3): Directory bread(block 187) failed [ 358.565860][ T7502] FAT-fs (loop3): Directory bread(block 188) failed [ 358.574743][ T7502] FAT-fs (loop3): Directory bread(block 189) failed [ 358.583382][ T7502] FAT-fs (loop3): Directory bread(block 190) failed [ 358.592282][ T7502] FAT-fs (loop3): Directory bread(block 191) failed [ 358.617300][ T7502] FAT-fs (loop3): Directory bread(block 192) failed [ 358.674710][ T7502] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.851078][ T7527] loop2: detected capacity change from 0 to 40427 [ 360.893347][ T7527] F2FS-fs (loop2): invalid crc value [ 360.926064][ T7527] F2FS-fs (loop2): Found nat_bits in checkpoint [ 361.012674][ T7527] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 361.510005][ T7535] syz-executor.2: attempt to access beyond end of device [ 361.510005][ T7535] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 361.562853][ T7535] syz-executor.2: attempt to access beyond end of device [ 361.562853][ T7535] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 366.691751][ T7535] syz-executor.2: attempt to access beyond end of device [ 366.691751][ T7535] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 366.862063][ T29] audit: type=1800 audit(1717864712.658:560): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 366.923885][ T6046] syz-executor.2: attempt to access beyond end of device [ 366.923885][ T6046] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 366.992587][ T29] audit: type=1804 audit(1717864712.858:561): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1480154546/syzkaller.v4boaZ/76/file0/file2" dev="loop2" ino=10 res=1 errno=0 [ 367.074801][ T6046] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 367.082302][ T29] audit: type=1800 audit(1717864717.938:562): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 367.172721][ T29] audit: type=1400 audit(1717864718.348:563): avc: denied { setopt } for pid=7537 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.278463][ T29] audit: type=1400 audit(1717864718.488:564): avc: denied { bind } for pid=7537 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.815206][ T29] audit: type=1400 audit(1717864719.028:565): avc: denied { name_bind } for pid=7550 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 368.380529][ T7556] loop4: detected capacity change from 0 to 256 [ 368.557517][ T7556] FAT-fs (loop4): Directory bread(block 64) failed [ 368.590631][ T7556] FAT-fs (loop4): Directory bread(block 65) failed [ 368.662921][ T7556] FAT-fs (loop4): Directory bread(block 66) failed [ 368.685177][ T7556] FAT-fs (loop4): Directory bread(block 67) failed [ 368.700519][ T7556] FAT-fs (loop4): Directory bread(block 68) failed [ 368.708623][ T7556] FAT-fs (loop4): Directory bread(block 69) failed [ 368.738601][ T7556] FAT-fs (loop4): Directory bread(block 70) failed [ 368.751594][ T7556] FAT-fs (loop4): Directory bread(block 71) failed [ 368.759691][ T7556] FAT-fs (loop4): Directory bread(block 72) failed [ 368.770256][ T7556] FAT-fs (loop4): Directory bread(block 73) failed [ 369.158996][ T7564] loop1: detected capacity change from 0 to 40427 [ 369.202694][ T7564] F2FS-fs (loop1): invalid crc value [ 369.248204][ T7564] F2FS-fs (loop1): Found nat_bits in checkpoint [ 369.364409][ T7564] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 369.909992][ T7570] syz-executor.1: attempt to access beyond end of device [ 369.909992][ T7570] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 370.012875][ T7570] syz-executor.1: attempt to access beyond end of device [ 370.012875][ T7570] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 375.028814][ T7570] syz-executor.1: attempt to access beyond end of device [ 375.028814][ T7570] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 375.173273][ T7556] fat__get_entry: 134 callbacks suppressed [ 375.173302][ T7556] FAT-fs (loop4): Directory bread(block 208) failed [ 375.212744][ T7556] FAT-fs (loop4): Directory bread(block 209) failed [ 375.255508][ T29] audit: type=1800 audit(1717864721.018:566): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 375.278927][ T7556] FAT-fs (loop4): Directory bread(block 210) failed [ 375.322991][ T7556] FAT-fs (loop4): Directory bread(block 211) failed [ 375.334548][ T5876] syz-executor.1: attempt to access beyond end of device [ 375.334548][ T5876] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 375.352838][ T5876] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 375.378358][ T29] audit: type=1804 audit(1717864721.278:567): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1613926540/syzkaller.Ynj1vN/101/file0/file2" dev="loop1" ino=10 res=1 errno=0 [ 375.409609][ T7556] FAT-fs (loop4): Directory bread(block 212) failed [ 375.464393][ T7556] FAT-fs (loop4): Directory bread(block 213) failed [ 375.471155][ T29] audit: type=1800 audit(1717864726.268:568): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 375.577664][ T7556] FAT-fs (loop4): Directory bread(block 214) failed [ 375.603179][ T7556] FAT-fs (loop4): Directory bread(block 215) failed [ 375.624277][ T7556] FAT-fs (loop4): Directory bread(block 216) failed [ 375.635715][ T7556] FAT-fs (loop4): Directory bread(block 217) failed [ 376.568604][ T7574] loop4: detected capacity change from 0 to 1024 [ 376.901556][ T7576] loop3: detected capacity change from 0 to 128 [ 376.960349][ T7576] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.004797][ T7576] ext4 filesystem being mounted at /root/syzkaller-testdir1956239820/syzkaller.G88Gc4/100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 377.159300][ T7305] hfsplus: b-tree write err: -5, ino 4 [ 377.634990][ T7576] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.251104][ T7591] loop3: detected capacity change from 0 to 1024 [ 378.760626][ T29] audit: type=1400 audit(1717864729.978:569): avc: denied { module_load } for pid=7590 comm="syz-executor.3" path="/sys/kernel/notes" dev="sysfs" ino=1374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 378.764621][ T7592] Invalid ELF header magic: != ELF [ 379.161589][ T29] audit: type=1400 audit(1717864730.378:570): avc: denied { ioctl } for pid=7593 comm="syz-executor.2" path="socket:[20196]" dev="sockfs" ino=20196 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 379.195339][ T1105] hfsplus: b-tree write err: -5, ino 8 [ 379.824074][ T29] audit: type=1400 audit(1717864731.048:571): avc: denied { getopt } for pid=7599 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.212346][ T7607] loop1: detected capacity change from 0 to 1024 [ 380.278734][ T7607] hfsplus: failed to load root directory [ 380.464214][ T7607] Cannot find del_set index 0 as target [ 380.568661][ T7610] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.582442][ T7610] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.789911][ T7613] loop3: detected capacity change from 0 to 128 [ 384.357641][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.266072][ T5122] Bluetooth: hci4: unexpected event 0x04 length: 31 > 10 [ 385.301000][ T29] audit: type=1400 audit(1717864736.488:572): avc: denied { connect } for pid=7629 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 385.584032][ T7637] sock: sock_set_timeout: `syz-executor.1' (pid 7637) tries to set negative timeout [ 385.610447][ T29] audit: type=1400 audit(1717864736.828:573): avc: denied { read } for pid=7636 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 386.090469][ T7643] loop1: detected capacity change from 0 to 128 [ 386.128769][ T7643] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.147428][ T7643] ext4 filesystem being mounted at /root/syzkaller-testdir1613926540/syzkaller.Ynj1vN/111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 387.302926][ T5122] Bluetooth: hci4: command 0x0406 tx timeout [ 387.324984][ T7643] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 387.533730][ T7643] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.954890][ T29] audit: type=1400 audit(1717864739.178:574): avc: denied { connect } for pid=7657 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 388.338804][ T7669] input: syz1 as /devices/virtual/input/input12 [ 388.700848][ T7674] sock: sock_set_timeout: `syz-executor.1' (pid 7674) tries to set negative timeout [ 389.177634][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.191692][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.201362][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.212852][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.223622][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 389.240327][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.464844][ T7685] loop1: detected capacity change from 0 to 128 [ 389.517035][ T7685] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.554554][ T7685] ext4 filesystem being mounted at /root/syzkaller-testdir1613926540/syzkaller.Ynj1vN/121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 389.796757][ T7685] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 389.864935][ T7685] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.313216][ T5122] Bluetooth: hci1: command tx timeout [ 393.382932][ T5122] Bluetooth: hci1: command tx timeout [ 395.462852][ T5122] Bluetooth: hci1: command tx timeout [ 397.507324][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.527845][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.542703][ T5116] Bluetooth: hci1: command tx timeout [ 397.548816][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.565069][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.575246][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 397.585214][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.622903][ T5116] Bluetooth: hci5: command tx timeout [ 401.702926][ T5116] Bluetooth: hci5: command tx timeout [ 403.782712][ T5116] Bluetooth: hci5: command tx timeout [ 405.862799][ T5116] Bluetooth: hci5: command tx timeout [ 408.316219][ T5122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 408.328005][ T5122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 408.337010][ T5122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 408.348430][ T5122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 408.356890][ T5122] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 408.366773][ T5122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.433055][ T5116] Bluetooth: hci6: command tx timeout [ 412.502926][ T5116] Bluetooth: hci6: command tx timeout [ 414.582597][ T5116] Bluetooth: hci6: command tx timeout [ 416.662862][ T5116] Bluetooth: hci6: command tx timeout [ 418.392878][ T5122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 418.422164][ T5122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 418.433995][ T5122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 418.446073][ T5122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 418.464239][ T5122] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 418.474540][ T5122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 420.502868][ T5122] Bluetooth: hci7: command tx timeout [ 422.332036][ T5116] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 422.352707][ T5116] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 422.370813][ T5116] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 422.391076][ T5116] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 422.405587][ T5116] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 422.415517][ T5116] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 422.589379][ T5122] Bluetooth: hci7: command tx timeout [ 424.512815][ T5122] Bluetooth: hci8: command tx timeout [ 424.662909][ T5116] Bluetooth: hci7: command tx timeout [ 426.583178][ T5122] Bluetooth: hci8: command tx timeout [ 426.748236][ T5122] Bluetooth: hci7: command tx timeout [ 427.382779][ T5122] Bluetooth: hci0: command 0x0405 tx timeout [ 428.662737][ T5116] Bluetooth: hci8: command tx timeout [ 430.759013][ T5116] Bluetooth: hci8: command tx timeout [ 445.789151][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.574830][ T5122] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 454.595714][ T5122] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 454.605550][ T5122] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 454.616430][ T5122] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 454.624912][ T5122] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 454.632592][ T5122] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 456.742986][ T5122] Bluetooth: hci9: command tx timeout [ 458.832593][ T5122] Bluetooth: hci9: command tx timeout [ 460.912548][ T5122] Bluetooth: hci9: command tx timeout [ 462.651042][ T5116] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 462.673250][ T5116] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 462.684883][ T5116] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 462.696099][ T5116] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 462.709381][ T5116] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 462.717181][ T5116] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 462.982697][ T5122] Bluetooth: hci9: command tx timeout [ 464.832885][ T5122] Bluetooth: hci10: command tx timeout [ 466.922615][ T5122] Bluetooth: hci10: command tx timeout [ 468.992586][ T5122] Bluetooth: hci10: command tx timeout [ 471.063004][ T5122] Bluetooth: hci10: command tx timeout [ 473.473276][ T5116] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 473.492822][ T5116] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 473.507006][ T5116] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 473.517527][ T5116] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 473.527443][ T5116] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 473.535333][ T5116] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 475.622779][ T5116] Bluetooth: hci11: command tx timeout [ 477.708162][ T5116] Bluetooth: hci11: command tx timeout [ 479.782566][ T5116] Bluetooth: hci11: command tx timeout [ 481.864494][ T5116] Bluetooth: hci11: command tx timeout [ 483.498577][ T5122] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 483.511420][ T5122] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 483.521337][ T5122] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 483.531485][ T5122] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 483.546114][ T5122] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 483.553941][ T5122] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 485.632687][ T5116] Bluetooth: hci12: command tx timeout [ 487.441889][ T5122] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 487.464949][ T5122] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 487.475350][ T5122] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 487.499598][ T5122] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 487.513533][ T5122] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 487.521247][ T5122] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 487.702749][ T5116] Bluetooth: hci12: command tx timeout [ 489.622940][ T5116] Bluetooth: hci13: command tx timeout [ 489.784188][ T5116] Bluetooth: hci12: command tx timeout [ 491.703208][ T5116] Bluetooth: hci13: command tx timeout [ 491.869765][ T5116] Bluetooth: hci12: command tx timeout [ 493.783028][ T5116] Bluetooth: hci13: command tx timeout [ 495.865486][ T5116] Bluetooth: hci13: command tx timeout [ 507.230469][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.423270][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 520.217239][ T5116] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 520.229955][ T5116] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 520.239417][ T5116] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 520.257102][ T5116] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 520.270643][ T5116] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 520.278608][ T5116] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 522.342832][ T5116] Bluetooth: hci14: command tx timeout [ 524.422727][ T5116] Bluetooth: hci14: command tx timeout [ 524.671979][ T5116] Bluetooth: hci5: command 0x0406 tx timeout [ 526.513194][ T5122] Bluetooth: hci14: command tx timeout [ 527.927241][ T5116] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 527.940732][ T5116] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 527.960592][ T5116] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 527.974257][ T5116] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 527.993219][ T5116] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 528.003176][ T5116] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 528.594271][ T5122] Bluetooth: hci14: command tx timeout [ 530.102844][ T5122] Bluetooth: hci15: command tx timeout [ 532.183195][ T5122] Bluetooth: hci15: command tx timeout [ 534.262889][ T5122] Bluetooth: hci15: command tx timeout [ 534.912112][ T5122] Bluetooth: hci6: command 0x0406 tx timeout [ 536.342655][ T5116] Bluetooth: hci15: command tx timeout [ 536.669090][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 536.684857][ T30] Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 536.696225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/08 16:41:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 536.711644][ T30] task:kworker/0:0 state:D stack:25216 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 536.746549][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 536.774220][ T30] Call Trace: [ 536.777564][ T30] [ 536.780533][ T30] __schedule+0xf15/0x5d00 [ 536.794654][ T30] ? __pfx_mark_lock+0x10/0x10 [ 536.799542][ T30] ? __pfx___schedule+0x10/0x10 [ 536.808199][ T30] ? schedule+0x298/0x350 [ 536.812960][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.818058][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.824440][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.829703][ T30] schedule+0xe7/0x350 [ 536.834025][ T30] schedule_preempt_disabled+0x13/0x30 [ 536.839554][ T30] __mutex_lock+0x5b8/0x9c0 [ 536.844189][ T30] ? reg_check_chans_work+0x7d/0x10e0 [ 536.849624][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 536.862451][ T30] ? debug_object_deactivate+0x1f0/0x370 [ 536.868158][ T30] ? find_held_lock+0x2d/0x110 [ 536.882439][ T30] ? reg_check_chans_work+0x7d/0x10e0 [ 536.902740][ T30] reg_check_chans_work+0x7d/0x10e0 [ 536.908045][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 536.931203][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 536.942729][ T30] process_one_work+0x9fb/0x1b60 [ 536.947736][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 536.962496][ T30] ? __pfx_process_one_work+0x10/0x10 [ 536.968029][ T30] ? assign_work+0x1a0/0x250 [ 536.992440][ T30] worker_thread+0x6c8/0xf70 [ 536.997114][ T30] ? __pfx_worker_thread+0x10/0x10 [ 537.002271][ T30] kthread+0x2c1/0x3a0 [ 537.022506][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.027816][ T30] ? __pfx_kthread+0x10/0x10 [ 537.042529][ T30] ret_from_fork+0x45/0x80 [ 537.047136][ T30] ? __pfx_kthread+0x10/0x10 [ 537.051789][ T30] ret_from_fork_asm+0x1a/0x30 [ 537.072484][ T30] [ 537.075707][ T30] INFO: task kworker/u8:8:2440 blocked for more than 143 seconds. [ 537.092489][ T30] Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 537.100180][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.142448][ T30] task:kworker/u8:8 state:D stack:23312 pid:2440 tgid:2440 ppid:2 flags:0x00004000 [ 537.162658][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 537.169293][ T30] Call Trace: [ 537.182441][ T30] [ 537.185425][ T30] __schedule+0xf15/0x5d00 [ 537.189929][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 537.212632][ T30] ? preempt_schedule_notrace+0x62/0xe0 [ 537.218337][ T30] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 537.232435][ T30] ? __pfx___schedule+0x10/0x10 [ 537.237380][ T30] ? schedule+0x298/0x350 [ 537.241776][ T30] ? __pfx_lock_release+0x10/0x10 [ 537.262464][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 537.267234][ T30] ? __mutex_trylock_common+0x78/0x250 [ 537.282436][ T30] schedule+0xe7/0x350 [ 537.286599][ T30] schedule_preempt_disabled+0x13/0x30 [ 537.292134][ T30] __mutex_lock+0x5b8/0x9c0 [ 537.312459][ T30] ? addrconf_verify_work+0x12/0x30 [ 537.317855][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 537.332790][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 537.337929][ T30] ? addrconf_verify_work+0x12/0x30 [ 537.352435][ T30] addrconf_verify_work+0x12/0x30 [ 537.357553][ T30] process_one_work+0x9fb/0x1b60 [ 537.372470][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 537.377586][ T30] ? __pfx_process_one_work+0x10/0x10 [ 537.402509][ T30] ? assign_work+0x1a0/0x250 [ 537.407201][ T30] worker_thread+0x6c8/0xf70 [ 537.411845][ T30] ? __pfx_worker_thread+0x10/0x10 [ 537.432455][ T30] kthread+0x2c1/0x3a0 [ 537.436625][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.441891][ T30] ? __pfx_kthread+0x10/0x10 [ 537.473405][ T30] ret_from_fork+0x45/0x80 [ 537.477924][ T30] ? __pfx_kthread+0x10/0x10 [ 537.492469][ T30] ret_from_fork_asm+0x1a/0x30 [ 537.497325][ T30] [ 537.501907][ T30] INFO: task syz-executor.0:7482 blocked for more than 144 seconds. [ 537.522442][ T30] Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 537.530161][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.562436][ T30] task:syz-executor.0 state:D stack:27168 pid:7482 tgid:7482 ppid:5980 flags:0x00004006 [ 537.584035][ T30] Call Trace: [ 537.587370][ T30] [ 537.590337][ T30] __schedule+0xf15/0x5d00 [ 537.596976][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 537.612454][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 537.617761][ T30] ? __pfx___schedule+0x10/0x10 [ 537.642441][ T30] ? schedule+0x298/0x350 [ 537.646879][ T30] ? __pfx_lock_release+0x10/0x10 [ 537.651973][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 537.662459][ T30] ? __mutex_trylock_common+0x78/0x250 [ 537.668007][ T30] schedule+0xe7/0x350 [ 537.672260][ T30] schedule_preempt_disabled+0x13/0x30 [ 537.692499][ T30] __mutex_lock+0x5b8/0x9c0 [ 537.697088][ T30] ? tun_chr_close+0x3e/0x250 [ 537.701828][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 537.732486][ T30] ? locks_remove_file+0x399/0x5a0 [ 537.737741][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 537.752433][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 537.757627][ T30] ? tun_chr_close+0x3e/0x250 [ 537.762364][ T30] ? rtnl_lock+0x9/0x20 [ 537.776620][ T30] tun_chr_close+0x3e/0x250 [ 537.781270][ T30] __fput+0x408/0xbb0 [ 537.792434][ T30] task_work_run+0x14e/0x250 [ 537.797092][ T30] ? __pfx_task_work_run+0x10/0x10 [ 537.802245][ T30] ? switch_task_namespaces+0xe0/0x110 [ 537.842469][ T30] do_exit+0xa9b/0x2ba0 [ 537.846747][ T30] ? get_signal+0x8f2/0x2710 [ 537.851409][ T30] ? __pfx_do_exit+0x10/0x10 [ 537.862435][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 537.867625][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.878218][ T30] do_group_exit+0xd3/0x2a0 [ 537.892448][ T30] get_signal+0x2616/0x2710 [ 537.897133][ T30] ? __pfx_get_signal+0x10/0x10 [ 537.902045][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 537.922483][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 537.928750][ T30] ? kmem_cache_free+0x12f/0x3a0 [ 537.