last executing test programs: 2m46.058628993s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x22}, 0xc) 2m45.174611562s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'erspan0\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="3f030e00f007120306001e0089e9aaa911d7c2290f0086dd1327c9167c64324a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)=""/137, 0x89}], 0x2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x1, 0x0}, 0x8) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x65}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r8}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619}, 0x38) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_BLACKHOLE={0x4}]}, 0x30}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 2m43.835233201s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4018aee2, &(0x7f0000000100)=ANY=[]) 2m43.667412335s ago: executing program 4: syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696465726f636b706572916964652c00add51ea29069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f502634dfa74f42b394b1587068ecfa5acd459ae5a7dce3d2ca29a5d67adb9bfb87ce6ccb85cb98b2b7a0c5bae05ac8cfd1895938b2910b1498c0d61c80000"], 0x0, 0x694, &(0x7f0000001380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0) 2m43.369873081s ago: executing program 4: syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c713a5774613f726573697a652c7533727130303030303030303000303030303030303030342c736d61636b66736861743d6574002678f9edfbac5d6325f9002c00c9cd79b9b92293ea"], 0xfe, 0x61a0, &(0x7f000000a180)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 2m40.768333972s ago: executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x3, [r4], [0x2b8, 0x0, 0xff]}) 1m26.882219672s ago: executing program 3: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000040)={[{@gquota}, {@uquota}]}, 0x1, 0x9856, &(0x7f000001c900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) socket(0x10, 0x2, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x35315241}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r6, 0x0) fallocate(r6, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r7, 0x20, 0x0, 0x10000) 1m24.883484223s ago: executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, r0, 0x2, 0x0, 0x4000}, 0x10) 1m24.004572269s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="000002", @ANYBLOB="6c1e49d5ef80ddab349a40ada56f0a2bff88ebbdb234d56d23b58b4f988968408607a2422c1605b2c6a812de466e73f69e6d42879006599e85b649341f200ef38931a96d0758d2f66baadc44871aff32b67058e6ec86d20cfa6634e883faa46e063a01987f64c6efb1ded5a8674d00f5be6af742e577101ae24249e80052e61c5b6da19ce3eaf7015bf171cdf6293e813841f6f8b5f6e916aeb1519a9d90f0c607baebb58a76e835a7f7d4ad767b724077eac1e24fa35a55446f39ea0e2b", @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="c7647cae81243280fb413c636c242d357104ac6ee023b472137e60c3edd9caee53d4b13c35a4b5ea07058e5957344e589ce2dae130c5b022b74a75264698269221dcd8339aadb60ccf5060f156f8388f938f599d4606771594ad6b3d43b01f7fe4d6cd1b997929396f6161ad98b12a7916a368a62e8780cdb8ad60a880afc2c459fa2fa473e436337340d35f36bad1cca1fcc0d332c582f024bc478d37c098a459942d000437418b2ac0942b35cfef0e69afea019d59f9ff5f855ff756603b138464a97b632bdd0af00d68637f7fa1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x81, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a573da8dd49c0c6d33f0a3898c315943f48") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @const={0x0, {0x0, 0x80}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmsg$sock(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x41, 0x6}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='tegra_dma_isr\x00'}, 0x10) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) 59.270324097s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="000002", @ANYBLOB="6c1e49d5ef80ddab349a40ada56f0a2bff88ebbdb234d56d23b58b4f988968408607a2422c1605b2c6a812de466e73f69e6d42879006599e85b649341f200ef38931a96d0758d2f66baadc44871aff32b67058e6ec86d20cfa6634e883faa46e063a01987f64c6efb1ded5a8674d00f5be6af742e577101ae24249e80052e61c5b6da19ce3eaf7015bf171cdf6293e813841f6f8b5f6e916aeb1519a9d90f0c607baebb58a76e835a7f7d4ad767b724077eac1e24fa35a55446f39ea0e2b", @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="c7647cae81243280fb413c636c242d357104ac6ee023b472137e60c3edd9caee53d4b13c35a4b5ea07058e5957344e589ce2dae130c5b022b74a75264698269221dcd8339aadb60ccf5060f156f8388f938f599d4606771594ad6b3d43b01f7fe4d6cd1b997929396f6161ad98b12a7916a368a62e8780cdb8ad60a880afc2c459fa2fa473e436337340d35f36bad1cca1fcc0d332c582f024bc478d37c098a459942d000437418b2ac0942b35cfef0e69afea019d59f9ff5f855ff756603b138464a97b632bdd0af00d68637f7fa1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x81, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a573da8dd49c0c6d33f0a3898c315943f48") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @const={0x0, {0x0, 0x80}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmsg$sock(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x41, 0x6}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='tegra_dma_isr\x00'}, 0x10) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) 51.098028151s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x6}}], 0x1, 0x0) 50.968759323s ago: executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) 50.847102156s ago: executing program 1: io_setup(0x6, &(0x7f0000000300)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 49.501577717s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) 49.428784362s ago: executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='hrtimer_expire_entry\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) flistxattr(r0, &(0x7f0000003800)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sync() r4 = syz_open_procfs(0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000060000000000000000000000000000000000000000000000000000000000000000000000636c"], 0x34) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sync() 41.754588982s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="000002", @ANYBLOB="6c1e49d5ef80ddab349a40ada56f0a2bff88ebbdb234d56d23b58b4f988968408607a2422c1605b2c6a812de466e73f69e6d42879006599e85b649341f200ef38931a96d0758d2f66baadc44871aff32b67058e6ec86d20cfa6634e883faa46e063a01987f64c6efb1ded5a8674d00f5be6af742e577101ae24249e80052e61c5b6da19ce3eaf7015bf171cdf6293e813841f6f8b5f6e916aeb1519a9d90f0c607baebb58a76e835a7f7d4ad767b724077eac1e24fa35a55446f39ea0e2b", @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="c7647cae81243280fb413c636c242d357104ac6ee023b472137e60c3edd9caee53d4b13c35a4b5ea07058e5957344e589ce2dae130c5b022b74a75264698269221dcd8339aadb60ccf5060f156f8388f938f599d4606771594ad6b3d43b01f7fe4d6cd1b997929396f6161ad98b12a7916a368a62e8780cdb8ad60a880afc2c459fa2fa473e436337340d35f36bad1cca1fcc0d332c582f024bc478d37c098a459942d000437418b2ac0942b35cfef0e69afea019d59f9ff5f855ff756603b138464a97b632bdd0af00d68637f7fa1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x81, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a573da8dd49c0c6d33f0a3898c315943f48") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @const={0x0, {0x0, 0x80}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmsg$sock(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x41, 0x6}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='tegra_dma_isr\x00'}, 0x10) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) 19.398065517s ago: executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x4, 0x1ff]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x1) getsockopt(r4, 0xff, 0x7, 0x0, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xbd}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}}, 0x4005) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='initcall_level\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10) 18.605107114s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="000002", @ANYBLOB="6c1e49d5ef80ddab349a40ada56f0a2bff88ebbdb234d56d23b58b4f988968408607a2422c1605b2c6a812de466e73f69e6d42879006599e85b649341f200ef38931a96d0758d2f66baadc44871aff32b67058e6ec86d20cfa6634e883faa46e063a01987f64c6efb1ded5a8674d00f5be6af742e577101ae24249e80052e61c5b6da19ce3eaf7015bf171cdf6293e813841f6f8b5f6e916aeb1519a9d90f0c607baebb58a76e835a7f7d4ad767b724077eac1e24fa35a55446f39ea0e2b", @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="c7647cae81243280fb413c636c242d357104ac6ee023b472137e60c3edd9caee53d4b13c35a4b5ea07058e5957344e589ce2dae130c5b022b74a75264698269221dcd8339aadb60ccf5060f156f8388f938f599d4606771594ad6b3d43b01f7fe4d6cd1b997929396f6161ad98b12a7916a368a62e8780cdb8ad60a880afc2c459fa2fa473e436337340d35f36bad1cca1fcc0d332c582f024bc478d37c098a459942d000437418b2ac0942b35cfef0e69afea019d59f9ff5f855ff756603b138464a97b632bdd0af00d68637f7fa1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x81, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a573da8dd49c0c6d33f0a3898c315943f48") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @const={0x0, {0x0, 0x80}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmsg$sock(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x41, 0x6}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='tegra_dma_isr\x00'}, 0x10) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) 1.076639942s ago: executing program 2: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000024c0)="90", 0xffffff1f}, {0x0}], 0x2}}], 0x5, 0x0) recvmmsg$unix(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x58}}], 0x7, 0x0, 0x0) 1.043954489s ago: executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/198, 0xc6}], 0x1, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 994.467708ms ago: executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000901000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(r0, &(0x7f0000000200)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10201, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$tmpfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='defcontext=']) 873.559606ms ago: executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000001140)={0x10, 0x0, 0x0, 0x4010021}, 0xc) close(r2) 673.10928ms ago: executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 638.918052ms ago: executing program 2: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00cc5a47ff8ec3e95a1991"], 0x1, 0x1ff, &(0x7f00000002c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000100), 0x0}, 0x20) 552.273492ms ago: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f0000000a80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x0000000000000003,umask=00000000010000000000003,force,nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=iso8859-14,nodecompose,part=0x00000000000004db,\x00'], 0xb, 0x6c4, &(0x7f00000002c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) syz_io_uring_setup(0x7b, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r0 = gettid() sched_getscheduler(r0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) set_mempolicy(0x4005, 0x0, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) close(0xffffffffffffffff) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r6, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x28}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002040), r8) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x3c}}, 0x0) 456.971463ms ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 245.166143ms ago: executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x4b37, 0x0) 128.540545ms ago: executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x0) 81.04858ms ago: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='hrtimer_expire_entry\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) flistxattr(r0, &(0x7f0000003800)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sync() r4 = syz_open_procfs(0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000060000000000000000000000000000000000000000000000000000000000000000000000636c"], 0x34) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sync() 0s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000040), 0x4) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x14a, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0xffc1) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) getgroups(0x0, 0x0) kernel console output (not intermixed with test programs): expected cc 0x1003 length: 249 > 9 [ 436.508980][ T35] bridge_slave_1: left allmulticast mode [ 436.530051][ T35] bridge_slave_1: left promiscuous mode [ 436.536019][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.540115][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.559742][ T35] bridge_slave_0: left allmulticast mode [ 436.567834][ T35] bridge_slave_0: left promiscuous mode [ 436.582279][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.582435][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.605404][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 436.610342][ T9764] loop3: detected capacity change from 0 to 256 [ 436.615535][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.109033][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.127942][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.141714][ T35] bond0 (unregistering): Released all slaves [ 438.185434][ T29] audit: type=1400 audit(1718447200.987:678): avc: denied { write } for pid=9776 comm="syz-executor.3" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 438.185709][ T9777] random: crng reseeded on system resumption [ 438.733874][ T5122] Bluetooth: hci1: command tx timeout [ 438.799074][ T35] hsr_slave_0: left promiscuous mode [ 438.830629][ T35] hsr_slave_1: left promiscuous mode [ 438.838755][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.846457][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.854968][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.862773][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.889146][ T35] veth1_macvtap: left promiscuous mode [ 438.897189][ T35] veth0_macvtap: left promiscuous mode [ 438.903723][ T35] veth1_vlan: left promiscuous mode [ 438.909324][ T35] veth0_vlan: left promiscuous mode [ 439.405723][ T9783] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 439.837508][ T35] team0 (unregistering): Port device team_slave_1 removed [ 439.917408][ T29] audit: type=1326 audit(1718447202.717:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0547cea9 code=0x7ffc0000 [ 439.975472][ T29] audit: type=1326 audit(1718447202.727:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0547cea9 code=0x7ffc0000 [ 440.001238][ T35] team0 (unregistering): Port device team_slave_0 removed [ 440.042800][ T29] audit: type=1326 audit(1718447202.727:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fdb0547cea9 code=0x7ffc0000 [ 440.067334][ T29] audit: type=1326 audit(1718447202.727:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0547cea9 code=0x7ffc0000 [ 440.094116][ T29] audit: type=1326 audit(1718447202.727:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0547cea9 code=0x7ffc0000 [ 440.288413][ T9787] loop3: detected capacity change from 0 to 32768 [ 440.417320][ T29] audit: type=1800 audit(1718447203.217:684): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 440.661668][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.668466][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.810187][ T5122] Bluetooth: hci1: command tx timeout [ 442.048523][ T9800] loop3: detected capacity change from 0 to 256 [ 442.095501][ T9800] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 442.535087][ T9804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9804 comm=syz-executor.2 [ 442.599350][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.844759][ T9760] chnl_net:caif_netlink_parms(): no params data found [ 442.891214][ T5122] Bluetooth: hci1: command tx timeout [ 443.076881][ T9817] loop2: detected capacity change from 0 to 512 [ 443.172106][ T9817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.190510][ T9817] ext4 filesystem being mounted at /root/syzkaller-testdir2074395796/syzkaller.vbAz2c/190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.235987][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.245094][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.252452][ T9760] bridge_slave_0: entered allmulticast mode [ 443.253072][ T35] IPVS: stop unused estimator thread 0... [ 443.260222][ T9760] bridge_slave_0: entered promiscuous mode [ 443.274550][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.281911][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.289107][ T9760] bridge_slave_1: entered allmulticast mode [ 443.298688][ T29] audit: type=1400 audit(1718447206.097:685): avc: denied { link } for pid=9816 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 443.329004][ T9760] bridge_slave_1: entered promiscuous mode [ 443.429743][ T9760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.449685][ T9760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.483756][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.558876][ T9760] team0: Port device team_slave_0 added [ 443.564836][ T29] audit: type=1400 audit(1718447206.357:686): avc: denied { mounton } for pid=9823 comm="syz-executor.3" path="/root/syzkaller-testdir1327739227/syzkaller.MA8V3v/68/file0" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 443.572527][ T9760] team0: Port device team_slave_1 added [ 443.638923][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.646093][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.684746][ T9760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.699112][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.714041][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.743004][ T29] audit: type=1800 audit(1718447206.547:687): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1944 res=0 errno=0 [ 443.745636][ T9760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.854616][ T9760] hsr_slave_0: entered promiscuous mode [ 443.863908][ T9760] hsr_slave_1: entered promiscuous mode [ 443.875766][ T9760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.883588][ T9760] Cannot create hsr debugfs directory [ 444.388413][ T9849] loop3: detected capacity change from 0 to 256 [ 444.417385][ T9849] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 444.568828][ T9760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.581754][ T9760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.598417][ T9760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.628943][ T9760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.813482][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.834091][ T9760] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.855787][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.862987][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.895179][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.902416][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.970185][ T5122] Bluetooth: hci1: command tx timeout [ 445.301401][ T9760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.417212][ T9760] veth0_vlan: entered promiscuous mode [ 445.445675][ T9760] veth1_vlan: entered promiscuous mode [ 445.517601][ T9760] veth0_macvtap: entered promiscuous mode [ 445.531487][ T9760] veth1_macvtap: entered promiscuous mode [ 445.562957][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.580182][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.592765][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.605244][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.615897][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.626671][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.636658][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.647313][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.659635][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.678834][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.689537][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.699641][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.712392][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.722304][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.734128][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.744182][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.755217][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.767958][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.788108][ T9760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.797938][ T9760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.807367][ T9760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.816641][ T9760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.990951][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.998816][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.057521][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.070598][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.133393][ T9862] loop3: detected capacity change from 0 to 16 [ 446.143469][ T9862] erofs: (device loop3): mounted with root inode @ nid 36. [ 447.304838][ T9878] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 447.651268][ T9878] loop3: detected capacity change from 0 to 2048 [ 447.673415][ T9878] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 447.708720][ T9887] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 447.724678][ T9878] syz-executor.3: attempt to access beyond end of device [ 447.724678][ T9878] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 447.777358][ T9878] syz-executor.3: attempt to access beyond end of device [ 447.777358][ T9878] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 447.793081][ T9878] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 448.807932][ T9902] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 448.823852][ T9902] veth0_vlan: left promiscuous mode [ 448.829256][ T9902] veth0_vlan: entered allmulticast mode [ 448.836384][ T9902] veth0_vlan: entered promiscuous mode [ 449.493561][ T9912] loop3: detected capacity change from 0 to 764 [ 449.702789][ T29] audit: type=1400 audit(1718447212.507:688): avc: denied { create } for pid=9918 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 449.984107][ T9921] loop1: detected capacity change from 0 to 256 [ 450.180010][ T29] audit: type=1400 audit(1718447212.957:689): avc: denied { execute } for pid=9920 comm="syz-executor.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 450.365330][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 450.582780][ T9930] loop3: detected capacity change from 0 to 256 [ 450.602148][ T9930] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 450.664891][ T29] audit: type=1400 audit(1718447213.457:690): avc: denied { associate } for pid=9929 comm="syz-executor.3" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 450.708915][ T29] audit: type=1400 audit(1718447213.507:691): avc: denied { read append open } for pid=9929 comm="syz-executor.3" path="/root/syzkaller-testdir1327739227/syzkaller.MA8V3v/89/file0/bus/blkio.bfq.idle_time" dev="loop3" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 450.740563][ T29] audit: type=1400 audit(1718447213.507:692): avc: denied { write } for pid=9929 comm="syz-executor.3" name="blkio.bfq.idle_time" dev="loop3" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 451.983227][ T29] audit: type=1400 audit(1718447214.787:693): avc: denied { read } for pid=9943 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 452.115331][ T9948] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 453.863993][ T29] audit: type=1400 audit(1718447216.667:694): avc: denied { setopt } for pid=9966 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 454.051022][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.065453][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.079049][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.092958][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.103129][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 454.110851][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.112744][ T9977] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 454.709814][ T9974] chnl_net:caif_netlink_parms(): no params data found [ 454.922941][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.934946][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.948686][ T9974] bridge_slave_0: entered allmulticast mode [ 454.958089][ T9974] bridge_slave_0: entered promiscuous mode [ 454.968700][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.976691][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.984180][ T9974] bridge_slave_1: entered allmulticast mode [ 454.992277][ T9974] bridge_slave_1: entered promiscuous mode [ 455.059492][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.076187][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.173033][ T9974] team0: Port device team_slave_0 added [ 455.193902][ T9974] team0: Port device team_slave_1 added [ 455.264410][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.271789][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.310233][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.328469][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.350097][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.355178][T10009] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 455.416457][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.552098][ T9974] hsr_slave_0: entered promiscuous mode [ 455.559487][ T9974] hsr_slave_1: entered promiscuous mode [ 455.566876][ T9974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.575905][ T9974] Cannot create hsr debugfs directory [ 455.808863][T10025] loop3: detected capacity change from 0 to 256 [ 455.915031][ T9974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.068849][ T9974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.178477][ T5113] Bluetooth: hci5: command tx timeout [ 456.203531][ T9974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.355516][ T9974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.687338][ T9974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 456.703278][ T9974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 456.747305][ T9974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 456.767788][ T9974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.977483][ T9974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.048156][ T9974] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.085253][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.092443][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.164734][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.172021][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.593673][ T9974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.673177][ T9974] veth0_vlan: entered promiscuous mode [ 457.724383][ T9974] veth1_vlan: entered promiscuous mode [ 457.834471][ T9974] veth0_macvtap: entered promiscuous mode [ 457.855261][ T9974] veth1_macvtap: entered promiscuous mode [ 457.916642][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.929218][ T29] audit: type=1400 audit(1718447220.717:695): avc: denied { read } for pid=10050 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.983035][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.003413][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.028305][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.049642][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.070874][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.090236][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.101089][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.111303][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.122238][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.138067][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.195772][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.216792][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.238555][T10056] loop3: detected capacity change from 0 to 128 [ 458.246296][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.259578][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.260669][ T5113] Bluetooth: hci5: command tx timeout [ 458.275010][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.285948][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.297728][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.298086][T10056] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 458.311683][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.331013][T10056] ext4 filesystem being mounted at /root/syzkaller-testdir1327739227/syzkaller.MA8V3v/117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 458.332404][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.383753][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.395796][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.418521][ T9974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.432382][ T9974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.442444][ T9974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.451699][ T9974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.564129][ T29] audit: type=1400 audit(1718447221.367:696): avc: denied { create } for pid=10061 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 458.612033][ T29] audit: type=1400 audit(1718447221.397:697): avc: denied { write } for pid=10061 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 458.662750][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.696043][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.836156][ T8163] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.938562][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.957085][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.330456][ T5113] Bluetooth: hci5: command tx timeout [ 460.340220][T10083] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 460.689404][ T29] audit: type=1400 audit(1718447223.487:698): avc: denied { ioctl } for pid=10085 comm="syz-executor.3" path="socket:[30674]" dev="sockfs" ino=30674 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.715178][T10086] syzkaller0: entered promiscuous mode [ 460.740915][T10081] loop0: detected capacity change from 0 to 764 [ 460.749784][T10086] syzkaller0: entered allmulticast mode [ 460.765199][T10087] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 461.111756][T10089] xt_CT: No such helper "pptp" [ 461.651772][T10110] loop0: detected capacity change from 0 to 16 [ 461.675529][T10110] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 463.199855][ T5113] Bluetooth: hci5: command tx timeout [ 463.946132][T10122] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.278151][T10122] loop3: detected capacity change from 0 to 2048 [ 464.347518][T10122] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 464.401259][T10131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.407604][T10122] syz-executor.3: attempt to access beyond end of device [ 464.407604][T10122] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 464.548257][T10122] syz-executor.3: attempt to access beyond end of device [ 464.548257][T10122] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 464.562869][T10122] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 464.625901][T10133] loop0: detected capacity change from 0 to 764 [ 466.905485][T10157] 9pnet_fd: Insufficient options for proto=fd [ 467.017661][T10161] loop0: detected capacity change from 0 to 512 [ 467.527845][T10174] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 468.817126][T10174] loop0: detected capacity change from 0 to 2048 [ 468.833231][T10174] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 468.846149][T10186] loop3: detected capacity change from 0 to 256 [ 468.887403][T10174] syz-executor.0: attempt to access beyond end of device [ 468.887403][T10174] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 468.910734][T10189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.984965][T10186] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 469.035666][T10174] syz-executor.0: attempt to access beyond end of device [ 469.035666][T10174] loop0: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 469.052428][T10174] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 472.330185][T10216] loop0: detected capacity change from 0 to 1764 [ 472.606854][T10216] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 473.610199][T10235] ptrace attach of "/root/syz-executor.3 exec"[8163] was attempted by "/root/syz-executor.3 exec"[10235] [ 474.730026][ T5167] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 474.933696][ T5167] usb 1-1: Using ep0 maxpacket: 32 [ 474.945461][ T5167] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.961194][ T5167] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 475.002068][ T5167] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 475.020150][ T5167] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 475.037569][ T5167] usb 1-1: Product: syz [ 475.046001][ T5167] usb 1-1: Manufacturer: syz [ 475.051211][ T5167] usb 1-1: SerialNumber: syz [ 475.064411][ T5167] appletouch 1-1:1.0: Could not find int-in endpoint [ 475.071525][ T5167] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 475.081771][ T5167] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 477.670370][ T5163] usb 1-1: USB disconnect, device number 10 [ 477.828197][ T29] audit: type=1326 audit(1718447240.627:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34c7cea9 code=0x7ffc0000 [ 477.900011][ T29] audit: type=1326 audit(1718447240.627:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34c7cea9 code=0x7ffc0000 [ 477.944352][ T29] audit: type=1326 audit(1718447240.687:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b34c7cea9 code=0x7ffc0000 [ 477.956089][T10270] loop0: detected capacity change from 0 to 1024 [ 477.995662][ T29] audit: type=1326 audit(1718447240.687:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34c7cea9 code=0x7ffc0000 [ 478.042130][ T29] audit: type=1326 audit(1718447240.687:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34c7cea9 code=0x7ffc0000 [ 478.044902][ T5122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 478.066503][ T29] audit: type=1326 audit(1718447240.697:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b34c7cea9 code=0x7ffc0000 [ 478.066564][ T29] audit: type=1326 audit(1718447240.697:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34c7cea9 code=0x7ffc0000 [ 478.128643][ T29] audit: type=1326 audit(1718447240.697:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2b34c7cea9 code=0x7ffc0000 [ 478.153513][ T5122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 478.177400][ T5122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 478.188416][ T29] audit: type=1326 audit(1718447240.697:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2b34c7cee3 code=0x7ffc0000 [ 478.215715][ T29] audit: type=1326 audit(1718447240.697:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b34c7bbef code=0x7ffc0000 [ 478.243271][ T5122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 478.257021][ T5122] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 478.264841][ T5122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 479.244279][T10277] loop3: detected capacity change from 0 to 40427 [ 479.317504][T10277] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 479.348320][T10277] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 479.367424][T10292] loop0: detected capacity change from 0 to 1024 [ 479.390673][T10277] F2FS-fs (loop3): invalid crc value [ 479.412073][T10277] F2FS-fs (loop3): Found nat_bits in checkpoint [ 479.465219][T10292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.528916][T10275] chnl_net:caif_netlink_parms(): no params data found [ 479.793476][T10277] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 479.819664][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.848218][T10277] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 479.861714][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.906487][T10275] bridge_slave_0: entered allmulticast mode [ 479.914687][T10275] bridge_slave_0: entered promiscuous mode [ 479.936974][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.955173][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.969696][T10275] bridge_slave_1: entered allmulticast mode [ 479.991806][T10275] bridge_slave_1: entered promiscuous mode [ 480.160976][T10277] syz-executor.3: attempt to access beyond end of device [ 480.160976][T10277] loop3: rw=2049, sector=77824, nr_sectors = 512 limit=40427 [ 480.221859][ T9974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.263214][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.327238][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.350472][ T5113] Bluetooth: hci6: command tx timeout [ 480.506373][T10312] PKCS7: Unknown OID: [5] (bad) [ 480.508206][T10275] team0: Port device team_slave_0 added [ 480.513185][T10312] PKCS7: Only support pkcs7_signedData type [ 480.566542][T10275] team0: Port device team_slave_1 added [ 480.711272][ T8163] syz-executor.3: attempt to access beyond end of device [ 480.711272][ T8163] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 480.713732][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.759288][ T8163] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 480.760529][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.830418][T10316] loop0: detected capacity change from 0 to 4096 [ 480.852667][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.872863][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.890040][T10316] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 480.899111][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.964504][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.148474][T10275] hsr_slave_0: entered promiscuous mode [ 481.186919][T10275] hsr_slave_1: entered promiscuous mode [ 481.210057][T10275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.217667][T10275] Cannot create hsr debugfs directory [ 482.464760][ T5113] Bluetooth: hci6: command tx timeout [ 482.992641][T10328] loop3: detected capacity change from 0 to 1764 [ 484.548123][T10330] input: syz1 as /devices/virtual/input/input13 [ 484.709729][ T5113] Bluetooth: hci6: command tx timeout [ 484.954185][T10327] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 485.180833][T10275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.283786][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 485.283806][ T29] audit: type=1800 audit(1718447248.087:915): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 485.505398][T10275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.559979][ T29] audit: type=1800 audit(1718447248.357:916): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz-executor.0" name="/root/syzkaller-testdir1252787531/syzkaller.NxdFGf/19/file0" dev="sda1" ino=1960 res=0 errno=0 [ 485.686127][T10275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.853661][T10275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.155950][T10352] loop0: detected capacity change from 0 to 2048 [ 486.202194][T10352] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 486.275940][T10354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.298364][T10275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.343281][T10347] loop3: detected capacity change from 0 to 1024 [ 486.354612][T10275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.366657][T10275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.437378][T10275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.478905][T10347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.610900][T10349] overlay: ./file0 is not a directory [ 486.724880][T10349] loop0: detected capacity change from 0 to 128 [ 486.771001][T10349] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 486.867497][T10275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.883254][T10349] sysv_free_block: trying to free block not in datazone [ 486.958112][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.971534][ T5113] Bluetooth: hci6: command tx timeout [ 487.012555][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.019811][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.114565][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.121818][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.135586][T10364] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 487.297971][T10275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.316384][ T9974] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 487.405546][ T8163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.829420][T10372] loop0: detected capacity change from 0 to 1764 [ 487.979274][T10372] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 488.607692][T10374] PKCS7: Unknown OID: [5] (bad) [ 488.622621][T10374] PKCS7: Only support pkcs7_signedData type [ 488.751810][T10275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.857153][T10275] veth0_vlan: entered promiscuous mode [ 488.912235][T10275] veth1_vlan: entered promiscuous mode [ 488.976371][T10275] veth0_macvtap: entered promiscuous mode [ 489.001269][T10381] loop3: detected capacity change from 0 to 256 [ 489.004721][T10275] veth1_macvtap: entered promiscuous mode [ 489.043713][T10381] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 489.053472][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.076281][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.107973][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.118612][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.134412][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.150671][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.168581][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.188553][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.203598][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.216130][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.230675][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.253867][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.300675][T10275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.338288][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.364746][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.379937][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.402123][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.877611][T10377] loop0: detected capacity change from 0 to 40427 [ 489.899739][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.923353][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.428691][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.439320][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.610180][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.611707][T10377] F2FS-fs (loop0): invalid crc value [ 490.620762][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.620818][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.620837][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.622910][T10275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.681260][T10275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.723043][T10275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.734365][T10377] F2FS-fs (loop0): Found nat_bits in checkpoint [ 490.754524][T10275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.768899][T10275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.932645][T10377] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 491.250762][ T9974] syz-executor.0: attempt to access beyond end of device [ 491.250762][ T9974] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 491.265319][ T9974] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 492.248575][T10400] overlay: ./file0 is not a directory [ 492.255384][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.282623][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.405873][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.421493][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.608232][T10412] PKCS7: Unknown OID: [5] (bad) [ 492.613791][T10412] PKCS7: Only support pkcs7_signedData type [ 493.111135][T10418] loop3: detected capacity change from 0 to 1764 [ 493.399116][T10418] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 493.983804][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.236392][ T29] audit: type=1800 audit(1718447257.037:917): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 494.543811][T10433] loop3: detected capacity change from 0 to 40427 [ 494.558868][T10433] F2FS-fs (loop3): invalid crc value [ 494.573664][T10433] F2FS-fs (loop3): Found nat_bits in checkpoint [ 494.626751][T10433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 494.896537][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 495.644369][T10442] fuse: Unknown parameter 'fE©Ê^<¢lãoÛ¤Äô1è’BýÛÒ ë" q㵇Œ·O´Aúk‘ç /©5•æ­•Óxu÷Qï`ˆí®®Š]Eàìk +vÈú\D´5×+¾<šý|·ãDˆ¢ê[»à «p³ÎÊFîiþpP$TÊ„7)Ø¥^[m”ïlÓé§Í>›u0xffffffffffffffff00000000000000000000' [ 495.672854][ T29] audit: type=1400 audit(1718447257.937:918): avc: denied { read write } for pid=10432 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 495.820062][ T29] audit: type=1400 audit(1718447257.937:919): avc: denied { open } for pid=10432 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 495.916830][T10449] input: syz0 as /devices/virtual/input/input14 [ 497.420953][T10483] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 497.746748][ T29] audit: type=1800 audit(1718447260.547:920): pid=10488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 498.405172][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.340413][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 499.964685][T10507] input: syz0 as /devices/virtual/input/input15 [ 500.001093][T10505] loop2: detected capacity change from 0 to 4096 [ 500.013668][T10505] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 500.600627][T10518] loop2: detected capacity change from 0 to 4096 [ 500.614611][T10518] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 500.630574][T10521] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 500.920438][ T29] audit: type=1400 audit(1718447263.727:921): avc: denied { lock } for pid=10516 comm="syz-executor.2" path="socket:[32530]" dev="sockfs" ino=32530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 501.028402][T10510] loop3: detected capacity change from 0 to 32768 [ 501.125404][T10510] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 501.253133][ T29] audit: type=1400 audit(1718447264.027:922): avc: denied { unlink } for pid=10516 comm="syz-executor.2" name="file1" dev="loop2" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 501.312513][T10510] XFS (loop3): Ending clean mount [ 501.334271][T10510] XFS (loop3): Quotacheck needed: Please wait. [ 501.418502][T10510] XFS (loop3): Quotacheck: Done. [ 501.701567][T10510] ALSA: seq fatal error: cannot create timer (-22) [ 501.873953][ T29] audit: type=1400 audit(1718447264.677:923): avc: denied { getopt } for pid=10552 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 501.925438][ T8163] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 501.959152][T10551] loop2: detected capacity change from 0 to 128 [ 501.984656][T10551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 502.005714][T10551] UDF-fs: error (device loop2): udf_read_inode: (ino 93) failed !bh [ 502.039553][T10551] UDF-fs: Scanning with blocksize 512 failed [ 502.052524][T10551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 502.059090][T10559] xt_l2tp: invalid flags combination: 0 [ 502.069007][T10551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 502.098091][T10551] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 502.108270][T10551] UDF-fs: Scanning with blocksize 1024 failed [ 502.116221][T10551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 502.122048][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.136630][T10551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 502.140847][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.162830][T10551] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 502.171228][T10551] UDF-fs: Scanning with blocksize 2048 failed [ 502.189536][T10551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 502.232739][T10551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 502.275433][T10551] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 502.290201][T10551] UDF-fs: Scanning with blocksize 4096 failed [ 502.296341][T10551] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 502.891349][T10571] loop2: detected capacity change from 0 to 4096 [ 502.913073][T10571] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 502.949591][T10572] loop0: detected capacity change from 0 to 4096 [ 502.959178][T10572] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 503.013947][T10571] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 503.513394][ T2831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.614867][T10580] veth0_vlan: entered allmulticast mode [ 503.912408][ T2831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.024104][T10582] veth0_vlan: left promiscuous mode [ 504.048251][T10582] veth0_vlan: entered promiscuous mode [ 504.248750][ T2831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.267887][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.284774][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.293443][ T29] audit: type=1400 audit(1718447267.097:924): avc: denied { ioctl } for pid=10584 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=706 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 504.331246][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.340365][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.348979][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 504.365159][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.455779][ T2831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.886901][ T2831] bridge_slave_1: left allmulticast mode [ 504.897608][ T2831] bridge_slave_1: left promiscuous mode [ 504.918730][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.954684][ T2831] bridge_slave_0: left allmulticast mode [ 504.979970][ T2831] bridge_slave_0: left promiscuous mode [ 504.986405][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.410106][ T5113] Bluetooth: hci2: command tx timeout [ 506.425910][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.453277][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.487778][ T2831] bond0 (unregistering): Released all slaves [ 506.614454][T10613] vlan0: entered promiscuous mode [ 506.620736][T10613] vlan0: entered allmulticast mode [ 506.729384][T10613] team0: Port device vlan0 added [ 506.884326][T10618] xt_l2tp: invalid flags combination: 0 [ 508.383856][ T2831] hsr_slave_0: left promiscuous mode [ 508.400245][ T2831] hsr_slave_1: left promiscuous mode [ 508.409729][ T2831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.425698][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.433813][ T2831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.449992][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.491027][ T5113] Bluetooth: hci1: command tx timeout [ 508.491359][ T5122] Bluetooth: hci2: command tx timeout [ 508.510598][ T2831] veth1_macvtap: left promiscuous mode [ 508.516229][ T2831] veth0_macvtap: left promiscuous mode [ 508.522051][ T2831] veth1_vlan: left promiscuous mode [ 508.527438][ T2831] veth0_vlan: left promiscuous mode [ 508.632050][ T2831] infiniband syz2: set down [ 509.868853][ T1254] smc: removing ib device syz2 [ 510.632738][ T5122] Bluetooth: hci2: command tx timeout [ 510.685977][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 510.778787][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 511.664831][T10586] chnl_net:caif_netlink_parms(): no params data found [ 511.695125][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.306964][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.320102][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.328953][T10586] bridge_slave_0: entered allmulticast mode [ 512.393336][T10586] bridge_slave_0: entered promiscuous mode [ 512.445540][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.489600][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.517612][T10586] bridge_slave_1: entered allmulticast mode [ 512.562045][T10586] bridge_slave_1: entered promiscuous mode [ 512.659271][ T5122] Bluetooth: hci2: command tx timeout [ 513.025067][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.113009][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.721506][T10586] team0: Port device team_slave_0 added [ 513.738905][T10649] loop2: detected capacity change from 0 to 32768 [ 513.801320][T10586] team0: Port device team_slave_1 added [ 513.852465][T10649] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 513.912283][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.930483][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.981439][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.993822][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 514.012178][T10649] XFS (loop2): Ending clean mount [ 514.058704][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.068105][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.095578][T10649] XFS (loop2): Quotacheck needed: Please wait. [ 514.096438][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.260909][T10649] XFS (loop2): Quotacheck: Done. [ 514.392235][T10586] hsr_slave_0: entered promiscuous mode [ 514.413514][T10586] hsr_slave_1: entered promiscuous mode [ 514.440217][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.448806][T10586] Cannot create hsr debugfs directory [ 514.736551][T10671] ALSA: seq fatal error: cannot create timer (-22) [ 516.344197][T10275] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 516.730454][T10681] loop2: detected capacity change from 0 to 64 [ 516.968750][T10683] loop2: detected capacity change from 0 to 256 [ 517.018068][T10683] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 517.062740][T10586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 517.092241][T10586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 517.114477][T10586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 517.134876][T10586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 517.522916][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.625116][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.668948][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.676339][ T5255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.771228][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.778523][ T5255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.726825][T10687] loop2: detected capacity change from 0 to 32768 [ 518.760410][T10687] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10687) [ 518.820886][T10687] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 518.850743][T10687] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 518.888400][T10687] BTRFS info (device loop2): using free-space-tree [ 518.996108][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.075072][T10586] veth0_vlan: entered promiscuous mode [ 519.122446][T10586] veth1_vlan: entered promiscuous mode [ 519.235669][T10586] veth0_macvtap: entered promiscuous mode [ 519.298892][T10586] veth1_macvtap: entered promiscuous mode [ 519.402208][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.414360][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.430050][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.440707][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.454114][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.455864][T10275] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 519.467749][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.485544][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.496107][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.506280][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.525749][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.536871][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.547441][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.351207][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.498736][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.512491][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.525958][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.536788][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.547093][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.557797][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.568082][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.578733][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.588601][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.601756][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.649027][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.662239][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.683130][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.771770][T10586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.788856][T10586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.799235][T10586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.813535][T10586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.182675][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.199309][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.289808][ T2831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.326415][ T2831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.985420][ T29] audit: type=1800 audit(1718447285.767:925): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 523.010080][ T29] audit: type=1804 audit(1718447285.767:926): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3544796283/syzkaller.PsYB28/142/bus" dev="sda1" ino=1967 res=1 errno=0 [ 523.053964][ T29] audit: type=1804 audit(1718447285.847:927): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3544796283/syzkaller.PsYB28/142/bus" dev="sda1" ino=1967 res=1 errno=0 [ 523.089785][ T29] audit: type=1804 audit(1718447285.887:928): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3544796283/syzkaller.PsYB28/142/bus" dev="sda1" ino=1967 res=1 errno=0 [ 527.445110][ T29] audit: type=1400 audit(1718447290.237:929): avc: denied { map } for pid=10776 comm="syz-executor.2" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 527.553458][T10778] overlay: filesystem on / not supported [ 527.628735][ T4250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.239544][ T4250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.326021][T10796] xt_l2tp: invalid flags combination: 0 [ 528.347857][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.359209][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.368607][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.379485][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.387459][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 528.413018][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.515272][T10804] loop2: detected capacity change from 0 to 128 [ 528.516230][ T4250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.535671][T10804] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 528.571786][T10804] UDF-fs: error (device loop2): udf_read_inode: (ino 93) failed !bh [ 528.581609][T10804] UDF-fs: Scanning with blocksize 512 failed [ 528.602991][T10804] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 528.632825][T10804] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 528.648013][ T4250] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.650374][T10804] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 528.666299][T10804] UDF-fs: Scanning with blocksize 1024 failed [ 528.693320][T10804] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 528.735506][T10804] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 528.757487][T10804] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 528.770453][T10804] UDF-fs: Scanning with blocksize 2048 failed [ 528.800842][T10804] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 528.829177][T10804] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 528.847037][T10804] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 528.863524][T10804] UDF-fs: Scanning with blocksize 4096 failed [ 528.869771][T10804] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 529.090038][ T4250] bridge_slave_1: left allmulticast mode [ 529.102095][ T4250] bridge_slave_1: left promiscuous mode [ 529.109358][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.122039][ T4250] bridge_slave_0: left allmulticast mode [ 529.127740][ T4250] bridge_slave_0: left promiscuous mode [ 529.146712][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.595177][ T29] audit: type=1400 audit(1718447292.387:930): avc: denied { mount } for pid=10825 comm="syz-executor.2" name="/" dev="hugetlbfs" ino=34852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 529.658604][ T29] audit: type=1400 audit(1718447292.457:931): avc: denied { mounton } for pid=10825 comm="syz-executor.2" path="/root/syzkaller-testdir3642624740/syzkaller.YJZbrJ/36/file1/file0" dev="hugetlbfs" ino=34853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 529.679779][T10826] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 529.699075][T10826] overlayfs: failed to set xattr on upper [ 529.715961][T10826] overlayfs: ...falling back to redirect_dir=nofollow. [ 529.723172][T10826] overlayfs: ...falling back to metacopy=off. [ 529.730573][T10826] overlayfs: ...falling back to index=off. [ 529.736636][T10826] overlayfs: ...falling back to uuid=null. [ 529.753280][T10826] overlayfs: maximum fs stacking depth exceeded [ 529.792329][ T29] audit: type=1400 audit(1718447292.577:932): avc: denied { unmount } for pid=10275 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 530.244786][ T4250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.274374][ T4250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.288716][ T4250] bond0 (unregistering): Released all slaves [ 530.430606][ T29] audit: type=1400 audit(1718447293.227:933): avc: denied { setopt } for pid=10841 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 530.491031][ T5122] Bluetooth: hci2: command tx timeout [ 530.505655][T10797] chnl_net:caif_netlink_parms(): no params data found [ 531.184524][T10850] loop2: detected capacity change from 0 to 1024 [ 531.201189][T10850] EXT4-fs: Ignoring removed nobh option [ 531.292325][T10850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 531.422267][T10850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.909209][T10275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.016956][ T4250] hsr_slave_0: left promiscuous mode [ 532.037106][ T4250] hsr_slave_1: left promiscuous mode [ 532.051938][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.069756][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.079698][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.087427][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.148082][ T4250] veth1_macvtap: left promiscuous mode [ 532.160056][ T4250] veth0_macvtap: left promiscuous mode [ 532.171418][ T4250] veth1_vlan: left promiscuous mode [ 532.180198][ T4250] veth0_vlan: left promiscuous mode [ 532.570240][ T5122] Bluetooth: hci2: command tx timeout [ 532.929625][T10857] loop2: detected capacity change from 0 to 32768 [ 533.665732][ T4250] team0 (unregistering): Port device team_slave_1 removed [ 533.765548][ T4250] team0 (unregistering): Port device team_slave_0 removed [ 534.045574][T10867] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 534.053001][T10867] overlayfs: failed to set xattr on upper [ 534.058884][T10867] overlayfs: ...falling back to redirect_dir=nofollow. [ 534.065835][T10867] overlayfs: ...falling back to metacopy=off. [ 534.072190][T10867] overlayfs: ...falling back to index=off. [ 534.078172][T10867] overlayfs: ...falling back to uuid=null. [ 534.084331][T10867] overlayfs: maximum fs stacking depth exceeded [ 534.652382][ T5122] Bluetooth: hci2: command tx timeout [ 534.887272][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.896151][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.908860][T10797] bridge_slave_0: entered allmulticast mode [ 534.917912][T10797] bridge_slave_0: entered promiscuous mode [ 534.927609][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.937120][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.949204][T10797] bridge_slave_1: entered allmulticast mode [ 534.959473][T10797] bridge_slave_1: entered promiscuous mode [ 535.100592][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.140487][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.328436][T10797] team0: Port device team_slave_0 added [ 535.374178][T10797] team0: Port device team_slave_1 added [ 535.504203][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.518547][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.548317][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.623285][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.641314][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.681955][T10886] loop2: detected capacity change from 0 to 64 [ 535.691959][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.891873][T10797] hsr_slave_0: entered promiscuous mode [ 535.899148][T10797] hsr_slave_1: entered promiscuous mode [ 535.914306][T10797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.952615][T10797] Cannot create hsr debugfs directory [ 535.996177][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 536.023057][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 536.039343][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 536.093917][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 536.102538][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 536.111690][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 536.780763][ T5113] Bluetooth: hci2: command tx timeout [ 537.086877][ T29] audit: type=1326 audit(1718447299.887:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205047cea9 code=0x7fc00000 [ 537.631349][ T29] audit: type=1400 audit(1718447300.417:935): avc: denied { getopt } for pid=10906 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 537.745938][T10891] chnl_net:caif_netlink_parms(): no params data found [ 538.172654][ T5113] Bluetooth: hci7: command tx timeout [ 538.196205][T10797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.229135][T10891] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.259116][T10891] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.308442][T10891] bridge_slave_0: entered allmulticast mode [ 538.318809][T10891] bridge_slave_0: entered promiscuous mode [ 538.350731][T10797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.382050][T10891] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.389397][T10891] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.411162][T10891] bridge_slave_1: entered allmulticast mode [ 538.418506][T10891] bridge_slave_1: entered promiscuous mode [ 538.454323][T10797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 538.478209][T10797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 538.551034][T10891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.569623][T10891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.671531][T10891] team0: Port device team_slave_0 added [ 538.684765][T10891] team0: Port device team_slave_1 added [ 538.746271][T10891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.753707][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.783944][T10891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.797651][T10891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.805533][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.833653][T10891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.914417][T10891] hsr_slave_0: entered promiscuous mode [ 538.922442][T10891] hsr_slave_1: entered promiscuous mode [ 538.929410][T10891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.937605][T10891] Cannot create hsr debugfs directory [ 539.208596][T10891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.262352][T10797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.354558][T10891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.385276][T10797] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.407207][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.414617][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.474024][T10891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.516695][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.523863][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.576077][T10922] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 539.627171][T10923] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 539.648121][T10923] loop2: detected capacity change from 0 to 16 [ 539.694618][T10891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.734518][T10923] erofs: (device loop2): mounted with root inode @ nid 36. [ 539.974856][T10891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.995890][T10891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 540.053893][T10891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 540.078104][T10891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 540.208859][T10797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.239515][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.249323][T10933] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 540.262461][ T5113] Bluetooth: hci7: command tx timeout [ 540.267964][T10933] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 540.436475][T10891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.541336][T10891] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.567461][T10797] veth0_vlan: entered promiscuous mode [ 540.612728][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.620008][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.673642][T10797] veth1_vlan: entered promiscuous mode [ 540.706189][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.713383][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.826050][T10797] veth0_macvtap: entered promiscuous mode [ 540.839749][T10797] veth1_macvtap: entered promiscuous mode [ 540.959580][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.983647][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.995283][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.010117][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.021620][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.052336][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.071257][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.092046][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.102699][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.114514][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.125473][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.137260][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.163246][T10797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.202538][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.247817][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.266040][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.285831][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.322643][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.333432][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.343758][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.356038][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.368022][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.383229][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.395231][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.406466][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.429830][T10797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.480250][T10797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.491126][T10797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.502637][T10797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.511477][T10797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.572909][T10943] GUP no longer grows the stack in syz-executor.2 (10943): 20004000-20005000 (20001000) [ 541.591231][T10943] CPU: 0 PID: 10943 Comm: syz-executor.2 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 541.601798][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 541.611961][T10943] Call Trace: [ 541.615233][T10943] [ 541.618150][T10943] dump_stack_lvl+0x16c/0x1f0 [ 541.622838][T10943] gup_vma_lookup+0x1d2/0x220 [ 541.627516][T10943] __get_user_pages+0x25f/0x1490 [ 541.632717][T10943] ? __pfx___get_user_pages+0x10/0x10 [ 541.638088][T10943] ? __lock_acquire+0x14f4/0x3b30 [ 541.643115][T10943] __gup_longterm_locked+0x243/0x2790 [ 541.648514][T10943] ? __pfx___gup_longterm_locked+0x10/0x10 [ 541.654350][T10943] ? __pfx_lock_acquire+0x10/0x10 [ 541.659436][T10943] ? rwsem_read_trylock+0x12d/0x250 [ 541.664693][T10943] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 541.670328][T10943] pin_user_pages_remote+0xee/0x150 [ 541.675544][T10943] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 541.681350][T10943] ? down_read+0xc9/0x330 [ 541.685803][T10943] process_vm_rw_core.constprop.0+0x439/0xa10 [ 541.691883][T10943] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 541.698490][T10943] ? iovec_from_user.part.0+0x7e/0x130 [ 541.703974][T10943] process_vm_rw+0x301/0x360 [ 541.708608][T10943] ? __pfx_process_vm_rw+0x10/0x10 [ 541.713849][T10943] ? find_held_lock+0x2d/0x110 [ 541.718708][T10943] ? __pfx_lock_release+0x10/0x10 [ 541.723731][T10943] ? rcu_is_watching+0x12/0xc0 [ 541.728493][T10943] ? xfd_validate_state+0x5d/0x180 [ 541.733615][T10943] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 541.739364][T10943] ? do_syscall_64+0x91/0x250 [ 541.744062][T10943] ? lockdep_hardirqs_on+0x7c/0x110 [ 541.749254][T10943] do_syscall_64+0xcd/0x250 [ 541.753782][T10943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.759706][T10943] RIP: 0033:0x7efd9ba7cea9 [ 541.764143][T10943] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 541.783759][T10943] RSP: 002b:00007efd9c8860c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 541.792192][T10943] RAX: ffffffffffffffda RBX: 00007efd9bbb3f80 RCX: 00007efd9ba7cea9 [ 541.800175][T10943] RDX: 000000000000002b RSI: 0000000020c22000 RDI: 0000000000000096 [ 541.808293][T10943] RBP: 00007efd9baebff4 R08: 0000000000000001 R09: 0000000000000000 [ 541.816286][T10943] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000000 [ 541.824267][T10943] R13: 000000000000000b R14: 00007efd9bbb3f80 R15: 00007ffe82d636a8 [ 541.832244][T10943] [ 541.847209][T10891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.037607][ T2831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.065271][ T2831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.127670][T10891] veth0_vlan: entered promiscuous mode [ 542.186380][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.200405][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.218337][T10891] veth1_vlan: entered promiscuous mode [ 542.330026][ T5113] Bluetooth: hci7: command tx timeout [ 542.401499][T10891] veth0_macvtap: entered promiscuous mode [ 542.535701][T10891] veth1_macvtap: entered promiscuous mode [ 543.227286][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.253841][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.264072][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.274877][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.285306][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.298362][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.310847][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.321476][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.332719][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.343734][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.353987][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.370073][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.381239][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.392027][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.412592][T10891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.444941][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.467609][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.484203][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.507556][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.519279][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.546973][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.557078][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.568003][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.577967][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.588697][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.622702][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.635514][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.645683][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.709989][T10953] hub 6-0:1.0: USB hub found [ 543.721519][T10953] hub 6-0:1.0: 1 port detected [ 543.876213][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.973503][T10891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.168646][T10891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.195077][T10891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.214390][T10891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.230082][T10891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.355523][T10957] loop2: detected capacity change from 0 to 256 [ 544.376009][T10957] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009b275e, utbl_chksum : 0x7319d30d) [ 544.411087][ T5113] Bluetooth: hci7: command tx timeout [ 544.487702][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.506982][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.543592][ T2831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.553407][ T2831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.675952][ T29] audit: type=1400 audit(1718447307.477:936): avc: denied { read } for pid=10962 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 544.684795][T10961] loop2: detected capacity change from 0 to 256 [ 544.921647][ T29] audit: type=1400 audit(1718447307.727:937): avc: denied { mounton } for pid=10960 comm="syz-executor.2" path="/root/syzkaller-testdir3642624740/syzkaller.YJZbrJ/61/file0/file1" dev="loop2" ino=1048715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 544.951105][T10965] autofs: Unknown parameter 'ÿÿ0x0000000000000000' [ 544.984843][ T29] audit: type=1326 audit(1718447307.787:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c66e7cea9 code=0x7fc00000 [ 545.229104][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.621458][ T29] audit: type=1326 audit(1718447308.427:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c66e7cea9 code=0x7fc00000 [ 545.805069][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.977674][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.037957][T10973] loop0: detected capacity change from 0 to 128 [ 546.131069][ T29] audit: type=1800 audit(1718447308.937:940): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048716 res=0 errno=0 [ 546.187071][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.202029][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.213509][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.213838][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.248842][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.258443][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 546.266589][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 546.357348][T10973] syz-executor.0: attempt to access beyond end of device [ 546.357348][T10973] loop0: rw=2049, sector=185, nr_sectors = 9 limit=128 [ 546.608090][ T51] bridge_slave_1: left allmulticast mode [ 546.620548][ T51] bridge_slave_1: left promiscuous mode [ 546.626471][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.645650][ T51] bridge_slave_0: left allmulticast mode [ 546.669746][ T51] bridge_slave_0: left promiscuous mode [ 546.675892][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.859971][T10989] nbd2: detected capacity change from 0 to 12 [ 547.898077][T10993] block nbd2: Send control failed (result -89) [ 547.936449][T10993] block nbd2: Request send failed, requeueing [ 548.002789][ T5113] block nbd2: Receive control failed (result -32) [ 548.071629][ T10] block nbd2: Dead connection, failed to find a fallback [ 548.088648][ T10] block nbd2: shutting down sockets [ 548.095530][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.107102][ T10] buffer_io_error: 72 callbacks suppressed [ 548.107121][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.130109][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.167717][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.209707][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.222671][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.238674][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.254981][T10998] loop0: detected capacity change from 0 to 256 [ 548.267356][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.298555][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.309762][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.333480][ T5113] Bluetooth: hci2: command tx timeout [ 548.354715][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.364547][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.372674][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.388505][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.396714][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.406556][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.455238][T10993] ldm_validate_partition_table(): Disk read failed. [ 548.476869][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.490577][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.498705][T10993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.507928][T10993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.525539][T10993] Dev nbd2: unable to read RDB block 0 [ 548.539072][T10993] nbd2: unable to read partition table [ 548.554979][T10993] nbd2: partition table beyond EOD, truncated [ 548.981889][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.005302][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.026985][ T51] bond0 (unregistering): Released all slaves [ 549.076413][T10996] tipc: Failed to obtain node identity [ 549.088021][T10996] tipc: Enabling of bearer rejected, failed to enable media [ 549.555156][T11016] loop0: detected capacity change from 0 to 64 [ 549.586722][T11016] BFS-fs: bfs_fill_super(): Impossible last inode number 18874527 > 513 on loop0 [ 549.606651][T11013] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 549.615961][T11013] netlink: 'syz-executor.2': attribute type 20 has an invalid length. [ 549.625651][T11013] IPv6: NLM_F_CREATE should be specified when creating new route [ 549.638856][T11013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.646163][T11013] IPv6: NLM_F_CREATE should be set when creating new route [ 549.653791][T11013] IPv6: NLM_F_CREATE should be set when creating new route [ 549.661464][T11013] IPv6: NLM_F_CREATE should be set when creating new route [ 549.744905][T10974] chnl_net:caif_netlink_parms(): no params data found [ 549.884554][ T51] hsr_slave_0: left promiscuous mode [ 549.924185][ T51] hsr_slave_1: left promiscuous mode [ 549.962999][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.970924][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.979389][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.988850][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.025601][ T51] veth1_macvtap: left promiscuous mode [ 550.031327][ T51] veth0_macvtap: left promiscuous mode [ 550.037297][ T51] veth1_vlan: left promiscuous mode [ 550.042904][ T51] veth0_vlan: left promiscuous mode [ 550.872526][T11021] loop0: detected capacity change from 0 to 8192 [ 550.876033][ T5113] Bluetooth: hci2: command tx timeout [ 550.893233][T11021] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 551.048701][T11020] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 551.057857][T11020] FAT-fs (loop0): Filesystem has been set read-only [ 551.066299][T11020] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 551.075382][T11020] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 551.629272][T11019] loop2: detected capacity change from 0 to 32768 [ 551.643776][T11019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11019) [ 551.701026][T11019] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.711775][T11019] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 551.727889][T11019] BTRFS info (device loop2): using free-space-tree [ 551.982779][T10275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 552.217329][T11024] loop0: detected capacity change from 0 to 32768 [ 552.595143][T11024] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 552.660473][T11024] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 552.732971][T11024] bcachefs (loop0): alloc_read... done [ 552.740341][T11024] bcachefs (loop0): stripes_read... done [ 552.757986][T11024] bcachefs (loop0): snapshots_read... done [ 552.779453][T11024] bcachefs (loop0): journal_replay... done [ 552.818333][T11024] bcachefs (loop0): resume_logged_ops... done [ 552.824963][T11024] bcachefs (loop0): going read-write [ 552.875725][T11024] bcachefs (loop0): done starting filesystem [ 552.894904][ T5113] Bluetooth: hci2: command tx timeout [ 553.043641][ T29] audit: type=1400 audit(1718447315.847:941): avc: denied { ioctl } for pid=11023 comm="syz-executor.0" path="/root/syzkaller-testdir73253202/syzkaller.UG7dEJ/9/file0/file1" dev="loop0" ino=1610612736 ioctlcmd=0xbc0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 553.200633][T10891] bcachefs (loop0): shutting down [ 553.205759][T10891] bcachefs (loop0): going read-only [ 553.247554][T10891] bcachefs (loop0): finished waiting for writes to stop [ 553.343929][T10891] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 553.406798][T10891] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 553.445280][T10891] bcachefs (loop0): shutdown complete, journal seq 13 [ 553.479316][T10891] bcachefs (loop0): marking filesystem clean [ 553.502229][ T51] team0 (unregistering): Port device team_slave_1 removed [ 553.661205][T10891] bcachefs (loop0): shutdown complete [ 553.729417][ T51] team0 (unregistering): Port device team_slave_0 removed [ 554.324488][T11055] loop2: detected capacity change from 0 to 256 [ 554.890302][T11056] autofs: Unknown parameter 'ÿÿ0x0000000000000000' [ 554.974019][ T5113] Bluetooth: hci2: command tx timeout [ 555.441592][T11062] loop0: detected capacity change from 0 to 2048 [ 555.456056][T11062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.053933][T10974] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.082574][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.096705][T10974] bridge_slave_0: entered allmulticast mode [ 556.106444][T11064] nbd0: detected capacity change from 0 to 12 [ 556.106493][T10974] bridge_slave_0: entered promiscuous mode [ 556.122777][T10974] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.131061][T10974] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.138517][T10974] bridge_slave_1: entered allmulticast mode [ 556.195305][T10974] bridge_slave_1: entered promiscuous mode [ 556.310968][T10974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.337086][T10974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.461353][T10974] team0: Port device team_slave_0 added [ 556.471097][T10974] team0: Port device team_slave_1 added [ 556.505937][T10974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.514544][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.542659][T10974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.559213][T10974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.566298][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.567273][T11067] block nbd0: shutting down sockets [ 556.592626][T10974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.699853][T10974] hsr_slave_0: entered promiscuous mode [ 556.729174][T10974] hsr_slave_1: entered promiscuous mode [ 556.741810][T10974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.757044][T10974] Cannot create hsr debugfs directory [ 556.879016][T11082] loop2: detected capacity change from 0 to 256 [ 558.052598][T11087] loop0: detected capacity change from 0 to 256 [ 558.059780][T11079] tipc: Failed to obtain node identity [ 558.065647][T11079] tipc: Enabling of bearer rejected, failed to enable media [ 558.114407][T11087] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009b275e, utbl_chksum : 0x7319d30d) [ 558.829475][T11100] hub 6-0:1.0: USB hub found [ 558.838226][T11100] hub 6-0:1.0: 1 port detected [ 560.051398][T10974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 560.829593][ T5122] Bluetooth: hci1: command 0x0406 tx timeout [ 561.160474][T10974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 561.199279][T10974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 561.254174][T10974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 561.367856][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 561.533199][T11117] loop2: detected capacity change from 0 to 256 [ 561.578257][T10974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.629499][T10974] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.647896][T11119] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 561.675288][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.682576][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.751649][T11121] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 561.768187][T11120] autofs: Unknown parameter 'ÿÿ0x0000000000000000' [ 561.809808][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.817008][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.821637][T11121] loop0: detected capacity change from 0 to 16 [ 561.972530][T11121] erofs: (device loop0): mounted with root inode @ nid 36. [ 562.404125][T10974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.611866][T10974] veth0_vlan: entered promiscuous mode [ 562.667289][T10974] veth1_vlan: entered promiscuous mode [ 562.754466][T10974] veth0_macvtap: entered promiscuous mode [ 562.812962][T10974] veth1_macvtap: entered promiscuous mode [ 562.871217][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.898581][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.920148][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.947930][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.968405][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.981723][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.994260][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.005646][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.015743][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.026978][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.067593][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.099217][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.111532][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.128309][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.153332][T10974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.174755][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.186852][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.197804][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.248908][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.259047][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.270503][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.281170][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.297147][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.307904][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.318693][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.330086][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.331579][T11129] loop0: detected capacity change from 0 to 32768 [ 563.342492][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.357340][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.368027][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.399744][T10974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.428887][T10974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.438581][T10974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.448103][T10974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.458858][T10974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.555529][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.567676][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.712984][T11129] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 563.742196][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.768374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.768546][T11129] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 563.800884][T11141] loop2: detected capacity change from 0 to 256 [ 563.855175][T11129] bcachefs (loop0): alloc_read... done [ 563.860977][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.873033][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.885233][T11129] bcachefs (loop0): stripes_read... done [ 563.901591][T11129] bcachefs (loop0): snapshots_read... done [ 564.013618][T11129] bcachefs (loop0): journal_replay... done [ 564.030739][T11129] bcachefs (loop0): resume_logged_ops... done [ 564.041419][T11129] bcachefs (loop0): going read-write [ 564.055069][T11129] bcachefs (loop0): done starting filesystem [ 564.066483][T11139] tipc: Failed to obtain node identity [ 564.072430][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 564.227740][T11129] syz-executor.0 (11129) used greatest stack depth: 16640 bytes left [ 564.277688][T10891] bcachefs (loop0): shutting down [ 564.283137][T10891] bcachefs (loop0): going read-only [ 564.288558][T10891] bcachefs (loop0): finished waiting for writes to stop [ 564.300283][T10891] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 564.353835][T10891] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 564.364803][T10891] bcachefs (loop0): shutdown complete, journal seq 15 [ 564.373001][T10891] bcachefs (loop0): marking filesystem clean [ 564.439193][T10891] bcachefs (loop0): shutdown complete [ 564.714311][T11150] loop2: detected capacity change from 0 to 512 [ 564.733701][T11150] EXT4-fs (loop2): Test dummy encryption mode enabled [ 564.746548][T11150] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 564.761527][T11150] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 564.778424][T11150] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.082393][T11154] netlink: 4104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 565.575904][T11154] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 566.006588][T10275] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 566.381620][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 566.783903][ T29] audit: type=1400 audit(1718447329.487:942): avc: denied { read } for pid=11169 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 567.634708][T11185] loop2: detected capacity change from 0 to 256 [ 567.825886][T11183] tipc: Failed to obtain node identity [ 567.831748][T11183] tipc: Enabling of bearer rejected, failed to enable media [ 568.105268][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 568.124618][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 568.134696][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 568.145420][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 568.156859][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 568.164841][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 568.234465][T11181] loop0: detected capacity change from 0 to 32768 [ 568.399286][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.476950][T11181] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 569.502929][T11181] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 569.597983][T11181] bcachefs (loop0): alloc_read... done [ 569.610061][T11181] bcachefs (loop0): stripes_read... done [ 569.619401][T11181] bcachefs (loop0): snapshots_read... done [ 569.651236][T11181] bcachefs (loop0): journal_replay... done [ 569.657594][T11181] bcachefs (loop0): resume_logged_ops... done [ 569.691706][T11181] bcachefs (loop0): going read-write [ 569.723345][T11181] bcachefs (loop0): done starting filesystem [ 570.064942][T11186] chnl_net:caif_netlink_parms(): no params data found [ 570.212024][T10891] bcachefs (loop0): shutting down [ 570.217099][T10891] bcachefs (loop0): going read-only [ 570.240029][T10891] bcachefs (loop0): finished waiting for writes to stop [ 570.285316][ T5113] Bluetooth: hci2: command tx timeout [ 570.445735][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.515397][T10891] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 570.794078][T10891] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 570.832008][ T5122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 570.850384][ T5122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 570.862571][ T5122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 570.876824][ T5122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 570.885667][ T5122] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 570.893743][ T5122] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 570.940938][T10891] bcachefs (loop0): shutdown complete, journal seq 16 [ 570.948783][T10891] bcachefs (loop0): marking filesystem clean [ 571.099442][T10891] bcachefs (loop0): shutdown complete [ 571.254463][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.253579][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.330541][ T5122] Bluetooth: hci2: command tx timeout [ 572.422269][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.429529][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.479172][T11186] bridge_slave_0: entered allmulticast mode [ 572.493975][T11186] bridge_slave_0: entered promiscuous mode [ 572.548846][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.575218][T11186] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.582921][T11186] bridge_slave_1: entered allmulticast mode [ 572.598405][T11186] bridge_slave_1: entered promiscuous mode [ 572.856111][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.926686][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.971244][ T5122] Bluetooth: hci8: command tx timeout [ 572.991828][T11237] loop2: detected capacity change from 0 to 2048 [ 572.992065][ T29] audit: type=1400 audit(1718447335.797:943): avc: denied { watch watch_reads } for pid=11241 comm="syz-executor.0" path="/root/syzkaller-testdir73253202/syzkaller.UG7dEJ/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 573.207419][T11186] team0: Port device team_slave_0 added [ 573.250617][T11217] chnl_net:caif_netlink_parms(): no params data found [ 573.289766][T11186] team0: Port device team_slave_1 added [ 573.380243][ T61] bridge_slave_1: left allmulticast mode [ 573.385947][ T61] bridge_slave_1: left promiscuous mode [ 573.410568][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.441141][ T61] bridge_slave_0: left allmulticast mode [ 573.446836][ T61] bridge_slave_0: left promiscuous mode [ 573.460177][T11245] nbd0: detected capacity change from 0 to 12 [ 573.470329][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.477972][T11251] block nbd0: Send control failed (result -89) [ 573.487876][T11251] block nbd0: Request send failed, requeueing [ 573.496432][ T5122] block nbd0: Receive control failed (result -32) [ 573.512537][ T57] block nbd0: Dead connection, failed to find a fallback [ 573.519646][ T57] block nbd0: shutting down sockets [ 573.525587][ T57] blk_print_req_error: 5 callbacks suppressed [ 573.525605][ T57] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.544393][ T57] buffer_io_error: 5 callbacks suppressed [ 573.544411][ T57] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.558436][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.567687][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.575837][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.586454][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.594636][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.603918][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.614609][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.625195][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.633470][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.645129][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.654599][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.663909][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.672104][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.681339][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.689217][T11251] ldm_validate_partition_table(): Disk read failed. [ 573.696340][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.705742][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.713812][T11251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.725783][T11251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 573.735674][T11251] Dev nbd0: unable to read RDB block 0 [ 573.743330][T11251] nbd0: unable to read partition table [ 573.749315][T11251] nbd0: partition table beyond EOD, truncated [ 574.033267][T11258] loop2: detected capacity change from 0 to 64 [ 574.411492][ T5122] Bluetooth: hci2: command tx timeout [ 574.683865][T11270] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 575.052050][ T5122] Bluetooth: hci8: command tx timeout [ 576.240935][T11278] loop2: detected capacity change from 0 to 2048 [ 576.281910][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.305552][T11283] loop0: detected capacity change from 0 to 256 [ 576.321028][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.385506][ T61] bond0 (unregistering): Released all slaves [ 576.490397][ T5122] Bluetooth: hci2: command tx timeout [ 576.725155][T11281] tipc: Failed to obtain node identity [ 576.732832][T11281] tipc: Enabling of bearer rejected, failed to enable media [ 576.795964][T11288] nbd2: detected capacity change from 0 to 12 [ 576.811456][T11288] block nbd2: Send control failed (result -89) [ 576.824863][T11288] block nbd2: Request send failed, requeueing [ 576.833892][ T5122] block nbd2: Receive control failed (result -32) [ 576.834012][ T7226] block nbd2: Dead connection, failed to find a fallback [ 576.847578][ T7226] block nbd2: shutting down sockets [ 576.865112][T11288] ldm_validate_partition_table(): Disk read failed. [ 576.877726][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.889047][T11288] Dev nbd2: unable to read RDB block 0 [ 576.903930][T11288] nbd2: unable to read partition table [ 576.910255][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.937676][T11288] nbd2: partition table beyond EOD, truncated [ 576.948381][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.003055][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.026302][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.060973][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.130425][ T5122] Bluetooth: hci8: command tx timeout [ 579.214526][ T5113] Bluetooth: hci8: command tx timeout [ 579.316569][T11305] SELinux: security_context_str_to_sid () failed with errno=-22 [ 579.384930][T11309] loop0: detected capacity change from 0 to 256 [ 579.394674][T11309] FAT-fs (loop0): Unrecognized mount option "0x0000000000000000ÿÿÿÿÿÿÿÿ" or missing value [ 579.488336][T11312] loop2: detected capacity change from 0 to 512 [ 579.498867][T11309] loop0: detected capacity change from 0 to 1024 [ 579.501494][T11186] hsr_slave_0: entered promiscuous mode [ 579.512680][T11186] hsr_slave_1: entered promiscuous mode [ 579.519442][T11186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.522960][T11312] EXT4-fs (loop2): Test dummy encryption mode enabled [ 579.527773][T11186] Cannot create hsr debugfs directory [ 579.561328][T11312] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 579.584752][T11309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.604823][ T61] hsr_slave_0: left promiscuous mode [ 579.611318][T11312] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 579.630829][ T61] hsr_slave_1: left promiscuous mode [ 579.639838][T11312] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.653009][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.662271][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.662328][T11309] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #2: comm syz-executor.0: corrupted in-inode xattr: bad e_name length [ 579.708584][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.726382][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.909793][T10891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.917485][ T61] veth1_macvtap: left promiscuous mode [ 579.924544][ T61] veth0_macvtap: left promiscuous mode [ 579.930390][ T61] veth1_vlan: left promiscuous mode [ 580.038958][T11317] netlink: 4104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 580.157176][ T61] veth0_vlan: left promiscuous mode [ 580.603633][T11318] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 581.056644][ T5113] Bluetooth: hci5: command 0x0406 tx timeout [ 581.376811][ T29] audit: type=1400 audit(1718447344.177:944): avc: denied { setattr } for pid=11326 comm="syz-executor.0" name="[userfaultfd]" dev="anon_inodefs" ino=38434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 582.073053][T11331] loop0: detected capacity change from 0 to 2048 [ 582.237668][ T61] team0 (unregistering): Port device team_slave_1 removed [ 582.345035][ T61] team0 (unregistering): Port device team_slave_0 removed [ 583.814554][T11217] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.822136][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.836168][T11217] bridge_slave_0: entered allmulticast mode [ 583.845725][T11217] bridge_slave_0: entered promiscuous mode [ 583.933567][T11217] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.948370][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.956071][T11217] bridge_slave_1: entered allmulticast mode [ 583.964223][T11217] bridge_slave_1: entered promiscuous mode [ 584.047186][T11217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.104257][T10275] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 584.132030][T11217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.193551][T11346] nbd0: detected capacity change from 0 to 12 [ 584.367322][T11217] team0: Port device team_slave_0 added [ 584.406272][T11217] team0: Port device team_slave_1 added [ 584.665267][T11217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.674507][T11344] block nbd0: shutting down sockets [ 584.720304][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.932142][T11217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.959513][T11217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.145196][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.450396][T11217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.837841][T11364] SELinux: security_context_str_to_sid () failed with errno=-22 [ 585.909076][T11217] hsr_slave_0: entered promiscuous mode [ 585.956990][T11217] hsr_slave_1: entered promiscuous mode [ 585.976563][T11217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.987738][T11217] Cannot create hsr debugfs directory [ 585.996091][ T29] audit: type=1400 audit(1718447348.797:945): avc: denied { create } for pid=11366 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 586.034223][ T29] audit: type=1400 audit(1718447348.827:946): avc: denied { bind } for pid=11366 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 586.181118][T11369] loop2: detected capacity change from 0 to 128 [ 586.199432][T11186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.325207][T11373] loop0: detected capacity change from 0 to 1024 [ 586.343389][T11373] hfsplus: umask requires a value [ 586.348478][T11373] hfsplus: unable to parse mount options [ 586.399542][T11186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.583043][T11186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.741553][T11186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.305481][ T30] INFO: task syz-executor.4:7291 blocked for more than 144 seconds. [ 587.329124][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 2024/06/15 10:29:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 587.363579][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 587.443183][ T30] task:syz-executor.4 state:D stack:23696 pid:7291 tgid:7291 ppid:1 flags:0x00004006 [ 587.530149][ T30] Call Trace: [ 587.533485][ T30] [ 587.536435][ T30] __schedule+0xf15/0x5d00 [ 587.566999][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 587.580705][ T30] ? preempt_schedule_notrace+0x62/0xe0 [ 587.610506][ T30] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 587.616811][ T30] ? __pfx___schedule+0x10/0x10 [ 587.630067][ T30] ? schedule+0x298/0x350 [ 587.634471][ T30] ? __pfx_lock_release+0x10/0x10 [ 587.639541][ T30] schedule+0xe7/0x350 [ 587.653932][ T30] schedule_preempt_disabled+0x13/0x30 [ 587.659468][ T30] __down_write_common+0x950/0x13f0 [ 587.667047][ T30] ? __pfx___down_write_common+0x10/0x10 [ 587.673119][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 587.678198][ T30] ? __pfx___might_resched+0x10/0x10 [ 587.684499][ T30] ? __pfx___might_resched+0x10/0x10 [ 587.689847][ T30] deactivate_super+0xd6/0x100 [ 587.695482][ T30] cleanup_mnt+0x222/0x450 [ 587.709490][ T30] task_work_run+0x14e/0x250 [ 587.715614][ T30] ? __pfx_task_work_run+0x10/0x10 [ 587.730115][ T30] syscall_exit_to_user_mode+0x278/0x2a0 [ 587.735922][ T30] do_syscall_64+0xda/0x250 [ 587.750210][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.756270][ T30] RIP: 0033:0x7efffac7e1d7 [ 587.790083][ T30] RSP: 002b:00007ffc58221ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 587.798742][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efffac7e1d7 [ 587.817837][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc58221f60 [ 587.826148][ T30] RBP: 00007ffc58221f60 R08: 0000000000000000 R09: 0000000000000000 [ 587.845072][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc58223010 [ 587.853476][ T30] R13: 00007efffacd9636 R14: 0000000000067648 R15: 0000000000000006 [ 587.870050][ T30] [ 587.904815][ T30] INFO: task syz-executor.0:9587 blocked for more than 144 seconds. [ 587.924271][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 587.966787][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.003045][ T30] task:syz-executor.0 state:D stack:25872 pid:9587 tgid:9585 ppid:5984 flags:0x00024006 [ 588.040020][ T30] Call Trace: [ 588.043366][ T30] [ 588.046312][ T30] __schedule+0xf15/0x5d00 [ 588.050861][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 588.056105][ T30] ? mark_lock+0xb5/0xc60 [ 588.060576][ T30] ? __pfx___schedule+0x10/0x10 [ 588.065480][ T30] ? schedule+0x298/0x350 [ 588.069993][ T30] ? __pfx_lock_release+0x10/0x10 [ 588.075874][ T30] schedule+0xe7/0x350 [ 588.080088][ T30] jfs_flush_journal+0x7bf/0x940 [ 588.085079][ T30] ? __pfx_jfs_flush_journal+0x10/0x10 [ 588.090711][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 588.096658][ T30] ? __pfx_dquot_writeback_dquots+0x10/0x10 [ 588.103059][ T30] ? super_lock+0x1d9/0x3f0 [ 588.107603][ T30] ? __pfx_jfs_sync_fs+0x10/0x10 [ 588.112673][ T30] ? __pfx_quota_sync_one+0x10/0x10 [ 588.117904][ T30] jfs_sync_fs+0x79/0xb0 [ 588.122240][ T30] dquot_quota_sync+0xe9/0x390 [ 588.127039][ T30] ? __pfx_quota_sync_one+0x10/0x10 [ 588.132343][ T30] quota_sync_one+0x14b/0x1a0 [ 588.137055][ T30] iterate_supers+0xfb/0x240 [ 588.141763][ T30] __x64_sys_quotactl+0x2b5/0x440 [ 588.146922][ T30] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 588.152604][ T30] do_syscall_64+0xcd/0x250 [ 588.157147][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.163155][ T30] RIP: 0033:0x7f9778e7cea9 [ 588.167599][ T30] RSP: 002b:00007f9779bfc0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 588.176983][ T30] RAX: ffffffffffffffda RBX: 00007f9778fb3f80 RCX: 00007f9778e7cea9 [ 588.185076][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 588.194625][ T30] RBP: 00007f9778eebff4 R08: 0000000000000000 R09: 0000000000000000 [ 588.203316][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.211476][ T30] R13: 000000000000000b R14: 00007f9778fb3f80 R15: 00007ffd03b4e7e8 [ 588.219487][ T30] [ 588.222670][ T30] [ 588.222670][ T30] Showing all locks held in the system: [ 588.230743][ T30] 1 lock held by ksoftirqd/1/24: [ 588.235712][ T30] #0: ffff8880b933ec18 (&rq->__lock){-.-.}