last executing test programs: 52.210022084s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x0) io_uring_setup(0x396b, &(0x7f0000000180)) sendmsg$nl_route(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x28}}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x13c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) 52.150716985s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@gettaction={0xcc, 0x32, 0x1, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x101b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x11, &(0x7f0000002f40), 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0xee01, r6) keyctl$setperm(0x5, r5, 0x21081c22) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, r5) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 51.865293109s ago: executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000001200)={0xa00}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062bafd82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) r3 = dup3(r1, r0, 0x0) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$FUSE(r2, &(0x7f0000003e00)={0x2020}, 0x2020) read$watch_queue(r0, &(0x7f0000002e00)=""/4088, 0xff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) pipe2$9p(&(0x7f0000002180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r8, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 51.86412037s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd", 0x7d}], 0x1, &(0x7f0000000140)=ANY=[], 0x170}}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x15) 51.840371151s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 51.041810283s ago: executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000440)=0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x8, &(0x7f00000002c0), 0x8, 0x60b, &(0x7f0000001b40)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@subsystem='cpuset'}, {@xattr}, {@cpuset_v2_mode}], [{@audit}, {@smackfsdef}]}) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000200), 0x1004) syncfs(r1) sched_setscheduler(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000680)={r2, &(0x7f0000000100)='e'}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x20}, 0x48) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = getpgid(r3) syz_pidfd_open(r4, 0x0) unshare(0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a030000000000000000000009"], 0x0, 0x3e}, 0x20) preadv(r5, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 50.88269835s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) ioperm(0x0, 0x6, 0x603) set_robust_list(&(0x7f00000007c0), 0x18) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="f7012abda8ea341814747cc88f5508000300", @ANYRES32=r4], 0x100}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xb, 0x6, 0x17) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000a0000001b0000000600050088a8000008000500", @ANYRES32=r11], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) write$cgroup_pid(r7, &(0x7f0000000540)=r2, 0x12) r13 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r13, 0xc0d05640, &(0x7f0000000040)={0x1}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32=r12, @ANYBLOB="524202000000000084001680800001807c000c8014000100bbad0000e102000029000000810000001400010070040000ea0900000400000088a80000140001039d92bf00a20000000900000088a800001400010006000000690500000400000088a8000014000100190c0000400200000500000088a8000014000100ff07000044080000fdffffff88a80e000a0001"], 0xb0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be39028f836f"], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) 50.405151621s ago: executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000001040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000080)={0x0, 0x3}) 50.249623672s ago: executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe}, 0x48) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 49.947085355s ago: executing program 4: r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x6c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 48.801106215s ago: executing program 1: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[], 0x21, 0x2f3, &(0x7f0000001880)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="48003300d0000000ffffffffffff08021100000150505050505000000f"], 0x64}}, 0x0) 48.799251591s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000800)={[{@utf8no}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {}]}, 0x7, 0x2cd, &(0x7f0000000200)="$eJzs3T9rJGUYAPBnNpPdVYtNYSWCA1pYHZdrbTbIHYipPFKohQYvB5JdhAQC/sH1KlsbCws/gSD4QWz8BoKtYOcJB6/M7MzO7N2SZI/biJffr8mTd97nned9d0MmRZ79+NXp8b0i7j/46vcYRha9cYzjYRY70YvGN7Fk/F0AAP9nD1OKv9LcOnlZRAw3VxYAsEGX+/2ft+EvV1IWALBBd9//4N29/f3b7xXFMO5Mvz07KP+yL7/Or+/dj09jEkdxM0bxKKJ6UNiO6mmhDO+klGZ5UdqJN6azs4Myc/rRr/X6e39GVPm7MYqdamjxtFHlv7N/e7eY6+TPyjperO8/LvNvxSheXiQv5d9akR8H/Xjz9U79N2IUv30Sn8Uk7lVFtPlf7xbF2+n7v7/8sCyvzM9mZweDal4rbV3xSwMAAAAAAAAAAAAAAAAAAAAAwHPsRt07ZxBV/55yqO6/s/Wo/GY7isbOcn+eeX7WLNTtD5RSmqX4semvc7MoilRPbPPzeCXvNhYEAAAAAAAAAAAAAAAAAACA6+v08y+ODyeTo5NnEjTdAPKI+OduxNOuM+6MvBZ10IuVkwf1PQ8nk14dLs/JuyOx1czJIto5zXF0Vi438bSnkcdae3/hiZrr4Kef17378OI526vv9SyD5jiPD7PVZziIZmRYH9QP/Yh2Tj8uea/+4yNpNF8nrfUS9FdeGl2Y3mx0sc5LVTA7Jyuy8wp764+lBbPHd9GvTnVxzsNoD2q7Drr1LL83LvV+LtesflKekOnWAQAAAAAAAAAAAAAAAAAAG9X+9++Kiw/OTe2lwcbKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAr1X7+/xrBrE4+OjnNL5jcj5PT/3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAP/BgAA///vmVBI") r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="90030ee7ff072d2200000e210806000108000604"], 0x120) 48.642418659s ago: executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000800)={0x4010040d000, 0x66}) r3 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x16120, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r5, 0x0, 0x0, 0x44000102, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) tkill(r0, 0x22) write$UHID_INPUT(r7, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x4) 48.519018291s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 48.301874207s ago: executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2}]}, @enum]}}, &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) 48.121611068s ago: executing program 1: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {@dmask}, {@gid}, {@umask={'umask', 0x3d, 0x8}}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 47.568606136s ago: executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x400000000006) 47.098901352s ago: executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0), 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = dup3(r3, r2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r5, 0x5423, &(0x7f0000000040)=0x1) r6 = dup(r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x8925, 0xffffffffffffffff) openat$cgroup_devices(r6, &(0x7f0000002500)='devices.allow\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x80045400, &(0x7f0000000140)) read$FUSE(r4, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r4, &(0x7f0000002440)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x101, 0x7, 0x400, {0x5, 0x101, 0xfff, 0x8, 0x2, 0x0, 0x8000, 0x0, 0x401, 0x6000, 0x5, r7, r8, 0x0, 0x385}}}, 0x90) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0xfffffff8, 0x6, 0x3c, 0xffffff01}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) recvmmsg(r1, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000002540)) 46.82101885s ago: executing program 3: r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x6c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 46.609387058s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 46.082670328s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000000)=""/22, 0x16}, {0x0}], 0x2, 0x6c, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000010800)={0x0, 0x0, &(0x7f00000107c0)={&(0x7f0000007ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004a00000008000300", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000006112010000000000950000000000000026eedb51d8b54ee35203ff2430bee0a3890a782f3842fff09d10d0f69298e699983c55381aa463f8cfcf63522ca6a7d52b9bfc82e74a69689d"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.590666597s ago: executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100), 0x4) socket$xdp(0x2c, 0x3, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xc0000009}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) syz_open_dev$evdev(&(0x7f0000000100), 0x10000, 0x2101) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}, 0x1000000}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007040012000f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400040012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) shutdown(r2, 0x1) 30.437024271s ago: executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}], [], 0x6b}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) sendfile(r4, r3, 0x0, 0x100800001) 30.267313949s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x0}) 30.110326083s ago: executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, &(0x7f0000000040)=0xa4ffffff) 30.029397388s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}}, 0x0) 17.047032203s ago: executing program 1: r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0xa95}, {}]}}) 16.56909867s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 16.041610609s ago: executing program 0: mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='.\x00') 0s ago: executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0xc0844123, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4142, 0x0) kernel console output (not intermixed with test programs): 00128.869:649): avc: denied { write } for pid=7931 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 283.811183][ T5162] usb 2-1: config 0 descriptor?? [ 283.865958][ T7950] loop4: detected capacity change from 0 to 2048 [ 283.969728][ T7950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.981975][ T5110] Bluetooth: hci4: command 0x0406 tx timeout [ 284.200877][ T7950] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 284.259390][ T7950] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 284.279096][ T5113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.292895][ T7950] EXT4-fs (loop4): This should not happen!! Data will be lost [ 284.292895][ T7950] [ 284.345251][ T7950] EXT4-fs (loop4): Total free blocks count 0 [ 284.365438][ T7950] EXT4-fs (loop4): Free/Dirty block details [ 284.377004][ T7950] EXT4-fs (loop4): free_blocks=2415919104 [ 284.383127][ T7950] EXT4-fs (loop4): dirty_blocks=32 [ 284.404605][ T5162] hid (null): bogus close delimiter [ 284.426896][ T7950] EXT4-fs (loop4): Block reservation details [ 284.444732][ T7950] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 284.628704][ T5162] usb 2-1: language id specifier not provided by device, defaulting to English [ 284.662118][ T5106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.775638][ T7956] loop2: detected capacity change from 0 to 4096 [ 284.844059][ T7956] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 284.926559][ T5162] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 284.945339][ T5162] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 284.965811][ T7956] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 284.974989][ T5162] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 285.013444][ T5162] usb 2-1: USB disconnect, device number 3 [ 285.097411][ T29] audit: type=1400 audit(2000000130.159:650): avc: denied { link } for pid=7955 comm="syz-executor.2" name="file0" dev="loop2" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 285.187587][ T29] audit: type=1400 audit(2000000130.199:651): avc: denied { create } for pid=7931 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 285.233775][ T29] audit: type=1800 audit(2000000130.209:652): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=0 res=0 errno=0 [ 285.265227][ T29] audit: type=1400 audit(2000000130.249:653): avc: denied { setopt } for pid=7931 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 285.400226][ T29] audit: type=1400 audit(2000000130.449:654): avc: denied { connect } for pid=7966 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.284536][ T7988] loop4: detected capacity change from 0 to 512 [ 286.350369][ T7988] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 286.412056][ T7988] EXT4-fs (loop4): 1 truncate cleaned up [ 286.436145][ T7988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.561345][ T8002] loop1: detected capacity change from 0 to 64 [ 287.010793][ T29] audit: type=1400 audit(2000000132.059:655): avc: denied { execute } for pid=7997 comm="syz-executor.3" path=2F6D656D66643A2327256E6F592576202864656C6574656429 dev="tmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 288.304921][ T7899] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 288.406396][ T8010] loop3: detected capacity change from 0 to 4096 [ 288.473464][ T5106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.478917][ T8010] NILFS (loop3): invalid segment: Checksum error in segment payload [ 288.535777][ T8010] NILFS (loop3): trying rollback from an earlier position [ 288.582157][ T8010] NILFS (loop3): recovery complete [ 288.591759][ T8011] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.969837][ T2531] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 289.179558][ T2531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.196666][ T2531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.227580][ T2531] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.261562][ T2531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.302723][ T2531] usb 2-1: config 0 descriptor?? [ 289.310416][ T8036] loop4: detected capacity change from 0 to 512 [ 289.344814][ T8036] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 289.384809][ T8036] UDF-fs: Scanning with blocksize 512 failed [ 289.411631][ T8036] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 289.458553][ T8036] UDF-fs: Scanning with blocksize 1024 failed [ 289.477781][ T8036] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 289.513223][ T8036] UDF-fs: Scanning with blocksize 2048 failed [ 289.550491][ T8036] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 289.609066][ T8036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.629307][ T8039] loop2: detected capacity change from 0 to 512 [ 289.924173][ T2531] hid (null): bogus close delimiter [ 290.377328][ T29] audit: type=1400 audit(2000000135.309:656): avc: denied { write } for pid=8034 comm="syz-executor.4" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 290.775748][ T2531] usb 2-1: language id specifier not provided by device, defaulting to English [ 290.918526][ T29] audit: type=1400 audit(2000000135.989:657): avc: denied { write } for pid=8046 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.987286][ T2531] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 290.997341][ T2531] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 291.020090][ T2531] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 291.085617][ T2531] usb 2-1: USB disconnect, device number 4 [ 291.713616][ T8071] loop2: detected capacity change from 0 to 512 [ 291.732929][ T8071] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 291.745663][ T8071] UDF-fs: Scanning with blocksize 512 failed [ 291.774185][ T8071] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 291.794853][ T8071] UDF-fs: Scanning with blocksize 1024 failed [ 291.811984][ T8071] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 291.829458][ T8071] UDF-fs: Scanning with blocksize 2048 failed [ 291.867068][ T8071] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 291.947745][ T8071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.281247][ T8081] loop0: detected capacity change from 0 to 2048 [ 293.980441][ T8081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.364845][ T8098] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.712355][ T8109] loop2: detected capacity change from 0 to 4096 [ 295.730588][ T8109] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 295.775179][ T8109] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 295.807145][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 295.873823][ T29] audit: type=1800 audit(2000000140.939:658): pid=8109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=0 res=0 errno=0 [ 296.011325][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.032818][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.053129][ T8] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 296.065084][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.076568][ T8] usb 4-1: config 0 descriptor?? [ 296.243347][ T29] audit: type=1400 audit(2000000141.309:659): avc: denied { ioctl } for pid=8128 comm="syz-executor.0" path="socket:[18144]" dev="sockfs" ino=18144 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.356844][ T927] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 296.563693][ T927] usb 3-1: Using ep0 maxpacket: 16 [ 296.570711][ T8] hid (null): bogus close delimiter [ 296.587220][ T927] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 296.625879][ T927] usb 3-1: config 0 has no interface number 0 [ 296.651051][ T927] usb 3-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 296.671108][ T927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.687596][ T927] usb 3-1: Product: syz [ 296.695270][ T927] usb 3-1: Manufacturer: syz [ 296.700069][ T927] usb 3-1: SerialNumber: syz [ 296.740207][ T927] usb 3-1: config 0 descriptor?? [ 296.752932][ T8140] loop4: detected capacity change from 0 to 2048 [ 296.774221][ T927] sierra 3-1:0.153: Sierra USB modem converter detected [ 296.801748][ T8] usb 4-1: language id specifier not provided by device, defaulting to English [ 296.935568][ T8140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.951857][ T2883] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.985622][ T8142] loop1: detected capacity change from 0 to 4096 [ 297.055692][ T8142] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 297.124361][ T927] usb 3-1: USB disconnect, device number 6 [ 297.165439][ T927] sierra 3-1:0.153: device disconnected [ 297.200839][ T2883] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.213960][ T8] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 297.236349][ T8142] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 297.247201][ T8] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 297.262629][ T8] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 297.276501][ T8] usb 4-1: USB disconnect, device number 5 [ 297.354965][ T2883] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.409146][ T29] audit: type=1800 audit(2000000142.479:660): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 297.575702][ T2883] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.626538][ T29] audit: type=1400 audit(2000000142.689:661): avc: denied { setopt } for pid=8145 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.051699][ T2883] bridge_slave_1: left allmulticast mode [ 298.075131][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.094859][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.109806][ T2883] bridge_slave_1: left promiscuous mode [ 298.110416][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.133827][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.146497][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.171647][ T8162] loop1: detected capacity change from 0 to 1024 [ 298.248087][ T2883] bridge_slave_0: left allmulticast mode [ 298.257410][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 298.265668][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.343526][ T2883] bridge_slave_0: left promiscuous mode [ 298.377638][ T2883] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.649722][ T7548] hfsplus: b-tree write err: -5, ino 4 [ 299.409306][ T8176] loop4: detected capacity change from 0 to 8 [ 299.420563][ T8176] unable to read fragment index table [ 299.747095][ T5163] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 299.969129][ T5163] usb 3-1: Using ep0 maxpacket: 16 [ 299.978743][ T5163] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 299.992088][ T5163] usb 3-1: config 0 has no interface number 0 [ 300.001620][ T5163] usb 3-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 300.011131][ T5163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.019333][ T5163] usb 3-1: Product: syz [ 300.024955][ T5163] usb 3-1: Manufacturer: syz [ 300.029761][ T5163] usb 3-1: SerialNumber: syz [ 300.063246][ T5163] usb 3-1: config 0 descriptor?? [ 300.078967][ T5163] sierra 3-1:0.153: Sierra USB modem converter detected [ 300.274915][ T2883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.297165][ T5110] Bluetooth: hci5: command tx timeout [ 300.318290][ T2883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.331894][ T2883] bond0 (unregistering): Released all slaves [ 300.357165][ T5163] usb 3-1: USB disconnect, device number 7 [ 300.363950][ T5163] sierra 3-1:0.153: device disconnected [ 300.564134][ T8198] loop4: detected capacity change from 0 to 512 [ 300.612314][ T8198] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 300.643499][ T8198] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 300.663064][ T8198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.889048][ T5106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.934466][ T8194] loop3: detected capacity change from 0 to 32768 [ 300.975800][ T8194] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.074633][ T8194] XFS (loop3): Ending clean mount [ 301.102704][ T8194] XFS (loop3): Quotacheck needed: Please wait. [ 301.206288][ T8214] loop2: detected capacity change from 0 to 2048 [ 301.223771][ T8194] XFS (loop3): Quotacheck: Done. [ 301.225054][ T8214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.274036][ T8214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.294281][ T8221] bridge_slave_1: entered promiscuous mode [ 301.308314][ T8214] ext4 filesystem being mounted at /root/syzkaller-testdir2457672670/syzkaller.eaWMoJ/219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.362353][ T5120] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.371785][ T8219] bridge_slave_1: left promiscuous mode [ 301.416259][ T2883] hsr_slave_0: left promiscuous mode [ 301.428064][ T2883] hsr_slave_1: left promiscuous mode [ 301.434673][ T2883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.446017][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.456366][ T2883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.464098][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.500694][ T2883] veth1_macvtap: left promiscuous mode [ 301.507309][ T2883] veth0_macvtap: left promiscuous mode [ 301.514644][ T2883] veth1_vlan: left promiscuous mode [ 301.520578][ T2883] veth0_vlan: left promiscuous mode [ 302.382202][ T5110] Bluetooth: hci5: command tx timeout [ 303.573476][ T5113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.765263][ T8252] loop2: detected capacity change from 0 to 8 [ 303.788991][ T8252] unable to read fragment index table [ 303.958797][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 304.060529][ T2883] team0 (unregistering): Port device team_slave_0 removed [ 304.462662][ T5110] Bluetooth: hci5: command tx timeout [ 304.469698][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 304.939011][ T8158] chnl_net:caif_netlink_parms(): no params data found [ 305.163505][ T8269] loop2: detected capacity change from 0 to 2048 [ 305.229985][ T8272] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.285951][ T8275] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.362714][ T8275] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 305.407040][ T8275] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 305.469272][ T8275] Remounting filesystem read-only [ 305.508830][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.526486][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.545120][ T8158] bridge_slave_0: entered allmulticast mode [ 305.564652][ T8158] bridge_slave_0: entered promiscuous mode [ 305.580978][ T5113] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 305.600425][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.608400][ T5113] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 305.625439][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.633218][ T5113] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 305.647002][ T8158] bridge_slave_1: entered allmulticast mode [ 305.653441][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.669637][ T8158] bridge_slave_1: entered promiscuous mode [ 305.685648][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.704810][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.717283][ T5113] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 305.724034][ T5113] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 305.731551][ T5113] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 305.732844][ T8280] syz_tun: entered promiscuous mode [ 305.739161][ T5113] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 305.739185][ T5113] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 305.739217][ T5113] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 305.739238][ T5113] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 305.739260][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.739283][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.739305][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.740981][ T5113] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 305.819323][ T5113] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 305.836765][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.857819][ T8280] syz_tun: left promiscuous mode [ 305.864094][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.895661][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.927052][ T5113] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 305.933760][ T5113] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 305.952186][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.983754][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.010574][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.027994][ T5113] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 306.040509][ T5113] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 306.059225][ T5113] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 306.096716][ T5113] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 306.104035][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.105730][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.170758][ T5113] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 306.174105][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.186679][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.195927][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.215178][ T5113] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 306.223567][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.238093][ T5113] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 306.255661][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.276756][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.304696][ T5113] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 306.332194][ T5113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.362531][ T8158] team0: Port device team_slave_0 added [ 306.394765][ T8158] team0: Port device team_slave_1 added [ 306.523413][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.527014][ T8278] loop4: detected capacity change from 0 to 32768 [ 306.552405][ T4481] Bluetooth: hci5: command tx timeout [ 306.560166][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.586552][ T8158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.600691][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.607774][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.633738][ T8158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.732527][ T29] audit: type=1800 audit(2000000151.799:662): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 306.780765][ T8158] hsr_slave_0: entered promiscuous mode [ 306.781348][ T29] audit: type=1800 audit(2000000151.829:663): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 306.814216][ T8158] hsr_slave_1: entered promiscuous mode [ 306.834816][ T8158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.853778][ T8158] Cannot create hsr debugfs directory [ 306.980454][ T8300] loop3: detected capacity change from 0 to 8 [ 307.029370][ T8300] unable to read fragment index table [ 308.384716][ T8289] loop1: detected capacity change from 0 to 32768 [ 308.399308][ T8309] loop2: detected capacity change from 0 to 512 [ 308.431313][ T8289] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 308.450677][ T8309] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 308.498089][ T8309] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 308.521652][ T8309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.733400][ T8289] XFS (loop1): Ending clean mount [ 309.778038][ T8289] XFS (loop1): Quotacheck needed: Please wait. [ 309.946940][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 310.142598][ T8289] XFS (loop1): Quotacheck: Done. [ 310.304591][ T8] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 311.056956][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.066430][ T8] usb 5-1: Product: syz [ 311.072297][ T8] usb 5-1: Manufacturer: syz [ 311.099485][ T8] usb 5-1: SerialNumber: syz [ 311.112380][ T6506] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.114021][ T5113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.153991][ T8] usb 5-1: config 0 descriptor?? [ 311.207856][ T4481] Bluetooth: hci6: urb ffff88805a126700 submission failed (2) [ 311.507884][ T8158] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.541524][ T8158] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.581377][ T8158] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.668394][ T8158] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.701966][ T8328] ALSA: seq fatal error: cannot create timer (-19) [ 311.718964][ T29] audit: type=1400 audit(2000000156.779:664): avc: denied { write } for pid=8327 comm="syz-executor.2" name="net" dev="proc" ino=18594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 311.758906][ T29] audit: type=1400 audit(2000000156.809:665): avc: denied { add_name } for pid=8327 comm="syz-executor.2" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 311.889861][ T29] audit: type=1400 audit(2000000156.809:666): avc: denied { create } for pid=8327 comm="syz-executor.2" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 311.948483][ T29] audit: type=1400 audit(2000000156.809:667): avc: denied { associate } for pid=8327 comm="syz-executor.2" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 312.130142][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.193310][ T8158] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.213182][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.220445][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.246792][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.253995][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.341648][ T8158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.545797][ T930] usb 5-1: USB disconnect, device number 4 [ 312.561858][ T8346] Bluetooth: hci3: too big key_count value 28672 [ 312.656722][ T8348] input: syz0 as /devices/virtual/input/input10 [ 312.944775][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.998431][ T29] audit: type=1326 audit(2000000158.059:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8356 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d2467cea9 code=0x0 [ 313.085609][ T8342] loop1: detected capacity change from 0 to 32768 [ 313.097380][ T29] audit: type=1400 audit(2000000158.159:669): avc: denied { watch watch_reads } for pid=8356 comm="syz-executor.2" path=2F70726F632F383335362F7461736B2F38333537202864656C6574656429 dev="proc" ino=19735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 313.163812][ T8158] veth0_vlan: entered promiscuous mode [ 313.216296][ T29] audit: type=1800 audit(2000000158.279:670): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 313.261618][ T8158] veth1_vlan: entered promiscuous mode [ 313.301996][ T29] audit: type=1800 audit(2000000158.319:671): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 313.373318][ T8158] veth0_macvtap: entered promiscuous mode [ 313.399020][ T8158] veth1_macvtap: entered promiscuous mode [ 313.463766][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.483851][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.493919][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.507706][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.517691][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.528247][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.539490][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.555642][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.565625][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.576198][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.586228][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.596844][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.611426][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.636378][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.641031][ T8360] loop3: detected capacity change from 0 to 32768 [ 313.660304][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.670641][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.714578][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.725747][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.745631][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.745858][ T8360] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 313.755701][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.792011][ T8368] loop4: detected capacity change from 0 to 2048 [ 313.793127][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.811271][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.822416][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.827529][ T8372] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.832603][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.918956][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.949807][ T8368] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 313.972094][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.979744][ T8360] XFS (loop3): Ending clean mount [ 313.987842][ T8374] ALSA: seq fatal error: cannot create timer (-19) [ 313.993247][ T8158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.008732][ T8158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.021065][ T8368] Remounting filesystem read-only [ 314.027432][ T8360] XFS (loop3): Quotacheck needed: Please wait. [ 314.035348][ T29] audit: type=1400 audit(2000000159.089:672): avc: denied { bind } for pid=8367 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 314.053993][ T8368] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 314.057713][ T8158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.083701][ T8158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.195361][ T8360] XFS (loop3): Quotacheck: Done. [ 314.280259][ T5106] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 314.295020][ T5106] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 314.348056][ T5106] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 314.355370][ T5106] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 314.387732][ T5120] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 314.396858][ T5106] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 314.454326][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.464182][ T5106] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 314.481929][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.525171][ T5106] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 314.556816][ T5106] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 314.565917][ T5106] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 314.576363][ T5106] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 314.638320][ T7548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.663935][ T7548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.729741][ T8385] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.942545][ T8390] usb usb9: check_ctrlrecip: process 8390 (syz-executor.1) requesting ep 01 but needs 81 [ 314.968760][ T8390] usb usb9: usbfs: process 8390 (syz-executor.1) did not claim interface 0 before use [ 315.292591][ T5110] Bluetooth: hci6: sending frame failed (-49) [ 315.303206][ T4481] Bluetooth: hci6: Entering manufacturer mode failed (-49) [ 315.331096][ T8402] loop3: detected capacity change from 0 to 2048 [ 315.339822][ T8402] udf: Unknown parameter 'ÿÿ00000000000000000000ÿ00000000000000000000' [ 315.670797][ T29] audit: type=1804 audit(2000000160.739:673): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2457672670/syzkaller.eaWMoJ/236/file0" dev="sda1" ino=1970 res=1 errno=0 [ 316.689689][ T8407] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.972514][ T8411] ALSA: seq fatal error: cannot create timer (-19) [ 317.289729][ T8423] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.295939][ T8426] usb usb9: check_ctrlrecip: process 8426 (syz-executor.2) requesting ep 01 but needs 81 [ 317.324487][ T8426] usb usb9: usbfs: process 8426 (syz-executor.2) did not claim interface 0 before use [ 317.509992][ T8429] loop1: detected capacity change from 0 to 2048 [ 317.535136][ T8432] loop0: detected capacity change from 0 to 512 [ 317.562059][ T8434] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.609621][ T8432] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 317.696353][ T8434] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 317.720064][ T8434] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 317.726259][ T8432] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 317.785299][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.792465][ T8434] Remounting filesystem read-only [ 317.798404][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.907659][ T6506] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 317.916474][ T6506] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 317.954603][ T6506] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 317.968290][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.013885][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.025155][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.048844][ T6506] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 318.055641][ T6506] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 318.122406][ T8442] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.146785][ T6506] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 318.177140][ T6506] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 318.194984][ T6506] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 318.208999][ T6506] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 318.232030][ T6506] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 318.243980][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.294483][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.314469][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.344849][ T6506] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 318.360116][ T8444] loop4: detected capacity change from 0 to 2048 [ 318.368919][ T6506] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 318.383073][ T8444] udf: Unknown parameter 'ÿÿ00000000000000000000ÿ00000000000000000000' [ 318.393493][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.403745][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.417448][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.431963][ T6506] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 318.439734][ T6506] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 318.455729][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.467089][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.519856][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 318.549332][ T6506] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 318.556549][ T6506] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 318.736860][ T6506] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 318.752746][ T6506] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 318.762217][ T29] audit: type=1804 audit(2000000163.829:674): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4004005080/syzkaller.foqM3t/8/file0" dev="sda1" ino=1969 res=1 errno=0 [ 318.771031][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 319.002098][ T6506] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 319.506747][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 319.595224][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 319.616707][ T6506] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 319.628233][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 319.654145][ T8452] Bluetooth: hci6: Frame reassembly failed (-84) [ 319.666733][ T6506] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 319.682518][ T2883] Bluetooth: hci6: Frame reassembly failed (-84) [ 319.682850][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 319.701339][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 319.710391][ T6506] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 319.719205][ T6506] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 319.993101][ T8467] loop3: detected capacity change from 0 to 512 [ 320.037907][ T8464] Bluetooth: hci3: too big key_count value 28672 [ 320.078806][ T8467] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 320.187663][ T8467] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 320.328199][ T8474] syz-executor.0[8474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.328402][ T8474] syz-executor.0[8474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.357955][ T29] audit: type=1400 audit(2000000165.419:675): avc: denied { mounton } for pid=8473 comm="syz-executor.0" path="/root/syzkaller-testdir4004005080/syzkaller.foqM3t/12/file1/file0" dev="autofs" ino=20150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 320.461782][ T29] audit: type=1400 audit(2000000165.419:676): avc: denied { ioctl } for pid=8473 comm="syz-executor.0" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 320.707211][ T29] audit: type=1804 audit(2000000165.769:677): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3968759959/syzkaller.ySjREO/228/file0" dev="sda1" ino=1967 res=1 errno=0 [ 320.810434][ T8472] loop2: detected capacity change from 0 to 32768 [ 320.839683][ T8472] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8472) [ 320.899500][ T8472] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 320.949857][ T8472] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 320.967403][ T8472] BTRFS info (device loop2): using free-space-tree [ 321.143927][ T29] audit: type=1400 audit(2000000166.189:678): avc: denied { mounton } for pid=8471 comm="syz-executor.2" path="/root/syzkaller-testdir2457672670/syzkaller.eaWMoJ/240/file2/file1" dev="loop2" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 321.265344][ T5113] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 321.436591][ T8505] Bluetooth: hci3: too big key_count value 28672 [ 321.657123][ T4481] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 321.664093][ T5110] Bluetooth: hci6: command 0xfc11 tx timeout [ 321.992665][ T29] audit: type=1326 audit(2000000167.039:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e3c67cea9 code=0x0 [ 323.988748][ T29] audit: type=1804 audit(2000000169.059:680): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1042878158/syzkaller.R1hwJc/223/file0" dev="sda1" ino=1961 res=1 errno=0 [ 324.047170][ T29] audit: type=1400 audit(2000000169.109:681): avc: denied { connect } for pid=8525 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 324.195096][ T8524] loop1: detected capacity change from 0 to 4096 [ 324.228332][ T8524] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 324.449354][ T8535] Bluetooth: hci3: too big key_count value 28672 [ 325.207605][ T8529] loop4: detected capacity change from 0 to 32768 [ 326.918255][ T8529] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8529) [ 327.154474][ T8529] BTRFS error (device loop4): open_ctree failed [ 327.212022][ T8551] loop3: detected capacity change from 0 to 2048 [ 327.226295][ T29] audit: type=1326 audit(2000000172.289:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e3c67cea9 code=0x0 [ 327.265570][ T8552] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.398322][ T8555] syz-executor.2[8555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.398549][ T8555] syz-executor.2[8555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.441150][ T8551] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 327.508566][ T8551] Remounting filesystem read-only [ 327.525549][ T8551] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 327.631046][ T5120] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 327.638077][ T5120] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 327.645509][ T5120] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 327.652921][ T5120] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 327.661449][ T5120] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 327.674917][ T5120] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 327.688679][ T5120] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 327.696076][ T5120] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.706186][ T5120] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.724209][ T5120] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.820576][ T29] audit: type=1400 audit(2000000172.889:683): avc: denied { read write } for pid=8564 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 327.853914][ T8563] loop4: detected capacity change from 0 to 4096 [ 327.862869][ T8563] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 327.870016][ T29] audit: type=1400 audit(2000000172.889:684): avc: denied { open } for pid=8564 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 331.695840][ T8574] loop4: detected capacity change from 0 to 4096 [ 331.735006][ T8574] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 333.005754][ T8594] loop3: detected capacity change from 0 to 2048 [ 333.485001][ T8596] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.585147][ T8594] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 333.604468][ T8594] Remounting filesystem read-only [ 333.612960][ T8594] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 333.693778][ T8602] loop4: detected capacity change from 0 to 4096 [ 333.704288][ T8602] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 333.776547][ T5120] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 333.784330][ T5120] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 333.792165][ T5120] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 333.800509][ T5120] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 333.807957][ T5120] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 333.825644][ T5120] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 333.834370][ T5120] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 333.841910][ T5120] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 333.850864][ T5120] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 333.866071][ T5120] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 333.956441][ T8605] loop3: detected capacity change from 0 to 64 [ 334.606890][ T29] audit: type=1400 audit(2000000179.599:685): avc: denied { read } for pid=8611 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 335.346237][ T29] audit: type=1400 audit(2000000180.409:686): avc: denied { write } for pid=8612 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 336.639369][ T8624] loop1: detected capacity change from 0 to 2048 [ 337.022458][ T8624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.303461][ T8634] xt_hashlimit: overflow, try lower: 3/0 [ 338.203875][ T8633] loop4: detected capacity change from 0 to 4096 [ 338.241956][ T8633] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 338.296809][ T8639] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 338.449916][ T8646] loop3: detected capacity change from 0 to 64 [ 340.033623][ T8659] Driver unsupported XDP return value 0 on prog (id 169) dev N/A, expect packet loss! [ 341.452752][ T8670] loop4: detected capacity change from 0 to 256 [ 341.489015][ T8670] FAT-fs (loop4): Directory bread(block 64) failed [ 341.497258][ T8670] FAT-fs (loop4): Directory bread(block 65) failed [ 341.504455][ T8670] FAT-fs (loop4): Directory bread(block 66) failed [ 341.515913][ T8670] FAT-fs (loop4): Directory bread(block 67) failed [ 341.522825][ T8670] FAT-fs (loop4): Directory bread(block 68) failed [ 341.530077][ T8670] FAT-fs (loop4): Directory bread(block 69) failed [ 341.538612][ T8670] FAT-fs (loop4): Directory bread(block 70) failed [ 341.545255][ T8670] FAT-fs (loop4): Directory bread(block 71) failed [ 341.560579][ T8670] FAT-fs (loop4): Directory bread(block 72) failed [ 341.572165][ T8670] FAT-fs (loop4): Directory bread(block 73) failed [ 341.985604][ T8678] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 342.723616][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.901099][ T8695] loop3: detected capacity change from 0 to 256 [ 345.506775][ T29] audit: type=1400 audit(2000000190.539:687): avc: denied { setopt } for pid=8711 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.188716][ T8716] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 346.700386][ T8724] loop3: detected capacity change from 0 to 8192 [ 346.960672][ T1108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.244655][ T1108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.387381][ T1108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.665071][ T1108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.745084][ T8743] loop3: detected capacity change from 0 to 4096 [ 349.765828][ T8743] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 349.986102][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.998381][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.014174][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.027957][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.035784][ T5117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 350.043699][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.359014][ T1108] bridge_slave_1: left allmulticast mode [ 350.375097][ T1108] bridge_slave_1: left promiscuous mode [ 350.390131][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.411895][ T1108] bridge_slave_0: left allmulticast mode [ 350.421679][ T1108] bridge_slave_0: left promiscuous mode [ 350.436922][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.457931][ T29] audit: type=1400 audit(2000000195.529:688): avc: denied { accept } for pid=8750 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.695821][ T8759] loop1: detected capacity change from 0 to 256 [ 350.804626][ T8763] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 351.447269][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.467492][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.483964][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.497331][ T1108] bond0 (unregistering): Released all slaves [ 351.827708][ T29] audit: type=1400 audit(2000000196.889:689): avc: denied { create } for pid=8782 comm="syz-executor.4" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 351.876217][ T8788] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 352.346985][ T5117] Bluetooth: hci5: command tx timeout [ 352.393272][ T1108] hsr_slave_0: left promiscuous mode [ 352.415123][ T1108] hsr_slave_1: left promiscuous mode [ 352.491594][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.599394][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.736461][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.963640][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.360203][ T1108] veth1_macvtap: left promiscuous mode [ 353.365800][ T1108] veth0_macvtap: left promiscuous mode [ 353.371599][ T1108] veth1_vlan: left promiscuous mode [ 353.377044][ T1108] veth0_vlan: left promiscuous mode [ 353.516327][ T8802] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 353.736270][ T8807] loop1: detected capacity change from 0 to 256 [ 354.377249][ T5117] Bluetooth: hci5: command tx timeout [ 354.447071][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.625049][ T8824] loop4: detected capacity change from 0 to 4096 [ 354.635582][ T8824] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 355.087078][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 355.163749][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 355.886180][ T8747] chnl_net:caif_netlink_parms(): no params data found [ 356.243875][ T8829] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 356.457533][ T5117] Bluetooth: hci5: command tx timeout [ 356.579117][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.596788][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.604030][ T8747] bridge_slave_0: entered allmulticast mode [ 356.613960][ T8837] loop3: detected capacity change from 0 to 2048 [ 356.641336][ T8747] bridge_slave_0: entered promiscuous mode [ 356.673244][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.698850][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.709482][ T8841] loop1: detected capacity change from 0 to 64 [ 356.726893][ T8747] bridge_slave_1: entered allmulticast mode [ 356.735038][ T8747] bridge_slave_1: entered promiscuous mode [ 356.739499][ T8841] hfs: unable to open extent tree [ 356.746578][ T8842] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.770769][ T8841] hfs: can't find a HFS filesystem on dev loop1 [ 356.885374][ T8842] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 356.922587][ T8747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.965394][ T8842] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 356.991267][ T8747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.003867][ T8842] Remounting filesystem read-only [ 357.026821][ T61] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 357.033795][ T61] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 357.069481][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.112279][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.124644][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.152195][ T8747] team0: Port device team_slave_0 added [ 357.160193][ T61] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 357.179791][ T8747] team0: Port device team_slave_1 added [ 357.189425][ T8846] loop1: detected capacity change from 0 to 256 [ 357.196718][ T61] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 357.204035][ T61] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 357.229196][ T61] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 357.236514][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.250487][ T61] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 357.297354][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.319512][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.334971][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.338189][ T4481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.362795][ T4481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.368472][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.400461][ T61] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 357.423976][ T4481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.437484][ T4481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.449847][ T4481] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.457538][ T4481] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.464810][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.510289][ T8747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.526682][ T61] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 357.533826][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.552817][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.568970][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.570296][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.594596][ T61] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 357.623934][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.635272][ T61] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 357.650511][ T61] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 357.662144][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.671331][ T8747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.682196][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.693750][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.702819][ T61] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 357.709623][ T61] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 357.717062][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.725987][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.734987][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.744096][ T61] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 357.750920][ T61] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 357.758780][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.768256][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.778816][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.787939][ T61] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 357.795803][ T61] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 357.803328][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.812632][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.830076][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 357.841801][ T5120] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 357.856140][ T1108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.858753][ T5120] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 357.873631][ T5120] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 357.887821][ T5120] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 357.916873][ T5120] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 357.936759][ T5120] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 358.052401][ T1108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.139570][ T8747] hsr_slave_0: entered promiscuous mode [ 358.150667][ T29] audit: type=1400 audit(2000000203.219:690): avc: denied { write } for pid=8861 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 358.171482][ T8747] hsr_slave_1: entered promiscuous mode [ 358.196933][ T8747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.221510][ T8747] Cannot create hsr debugfs directory [ 358.468145][ T1108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.537537][ T5117] Bluetooth: hci5: command tx timeout [ 358.571820][ T8870] loop3: detected capacity change from 0 to 4096 [ 358.660722][ T8870] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 358.788802][ T4481] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.789128][ T1108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.812058][ T4481] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.828591][ T4481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 358.851525][ T4481] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 358.861194][ T4481] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 358.870350][ T4481] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.516068][ T8879] loop4: detected capacity change from 0 to 2048 [ 359.576864][ T5117] Bluetooth: hci3: command tx timeout [ 359.609556][ T8881] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.103842][ T8886] xt_hashlimit: overflow, try lower: 3/0 [ 360.879899][ T1108] bridge_slave_1: left allmulticast mode [ 360.885584][ T1108] bridge_slave_1: left promiscuous mode [ 360.907169][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.945153][ T5117] Bluetooth: hci6: command tx timeout [ 360.962499][ T1108] bridge_slave_0: left allmulticast mode [ 360.979100][ T1108] bridge_slave_0: left promiscuous mode [ 361.012922][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.423835][ T8892] loop4: detected capacity change from 0 to 2048 [ 361.525445][ T8893] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 361.656912][ T5117] Bluetooth: hci3: command tx timeout [ 361.768204][ T8893] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 361.783100][ T8893] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 361.809535][ T8893] Remounting filesystem read-only [ 361.814763][ T12] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 361.825393][ T12] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 361.832958][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 361.848995][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 361.859833][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 361.881866][ T12] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 361.896972][ T12] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 361.904291][ T12] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 361.913350][ T12] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 361.920729][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 361.929659][ T12] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 361.936763][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 361.945640][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 361.954681][ T12] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 361.961988][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 361.970950][ T12] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 361.980727][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.014997][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.033220][ T12] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 362.057503][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.066979][ T12] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 362.073771][ T12] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 362.081305][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.092634][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.093303][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.101785][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.101842][ T12] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 362.101865][ T12] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 362.101886][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.101909][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.101930][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.101988][ T12] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 362.102009][ T12] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 362.184835][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.200759][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.210136][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.210491][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.219685][ T12] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 362.234569][ T12] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 362.242142][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.251097][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.253148][ T1108] bond0 (unregistering): Released all slaves [ 362.260181][ T12] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.267674][ T5106] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 362.286804][ T5106] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 362.293918][ T5106] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 362.317490][ T5106] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 362.324807][ T5106] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 362.341204][ T5106] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 362.434312][ T8852] chnl_net:caif_netlink_parms(): no params data found [ 362.498950][ T8905] loop4: detected capacity change from 0 to 64 [ 362.531276][ T8905] hfs: unable to open extent tree [ 362.536509][ T8905] hfs: can't find a HFS filesystem on dev loop4 [ 362.939640][ T1108] hsr_slave_0: left promiscuous mode [ 362.946199][ T1108] hsr_slave_1: left promiscuous mode [ 362.969840][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.980888][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.998196][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.005697][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.016771][ T5117] Bluetooth: hci6: command tx timeout [ 363.070602][ T1108] veth1_macvtap: left promiscuous mode [ 363.113707][ T1108] veth0_macvtap: left promiscuous mode [ 363.126343][ T1108] veth1_vlan: left promiscuous mode [ 363.134891][ T1108] veth0_vlan: left promiscuous mode [ 363.542833][ T29] audit: type=1400 audit(2000000208.609:691): avc: denied { bind } for pid=8920 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.588472][ T29] audit: type=1400 audit(2000000208.629:692): avc: denied { listen } for pid=8920 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.666503][ T29] audit: type=1400 audit(2000000208.699:693): avc: denied { accept } for pid=8920 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.706486][ T29] audit: type=1400 audit(2000000208.699:694): avc: denied { write } for pid=8920 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.736922][ T5117] Bluetooth: hci3: command tx timeout [ 364.459703][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 364.528532][ T8921] syz-executor.3 (8921): drop_caches: 2 [ 364.552863][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 364.659298][ T8929] loop3: detected capacity change from 0 to 2048 [ 364.678470][ T8930] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.773285][ T8930] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 364.785392][ T8930] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 364.799429][ T8930] Remounting filesystem read-only [ 364.804544][ T12] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 364.815613][ T12] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 364.823073][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.832162][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.842324][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.852170][ T12] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 364.862357][ T12] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 364.869960][ T12] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 364.877402][ T12] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 364.884701][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.893668][ T12] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 364.900772][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.909838][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.918927][ T12] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 364.926153][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.939099][ T12] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 364.947204][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.956118][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.966245][ T12] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 364.978455][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.987446][ T12] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 364.994237][ T12] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 365.001559][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.010514][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.019526][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.028467][ T12] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 365.035178][ T12] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 365.043249][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.054124][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.064434][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.073552][ T12] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 365.080323][ T12] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 365.087671][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.096827][ T5117] Bluetooth: hci6: command tx timeout [ 365.103254][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.116296][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.125379][ T12] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 365.132348][ T12] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 365.139770][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.148829][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.157799][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 365.170540][ T5120] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 365.180394][ T5120] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 365.187543][ T5120] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 365.194921][ T5120] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 365.202340][ T5120] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 365.210310][ T5120] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 365.426935][ T8873] chnl_net:caif_netlink_parms(): no params data found [ 365.727261][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.727402][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.738991][ T8852] bridge_slave_0: entered allmulticast mode [ 365.744291][ T8852] bridge_slave_0: entered promiscuous mode [ 365.759454][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.759590][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.759759][ T8852] bridge_slave_1: entered allmulticast mode [ 365.761650][ T8852] bridge_slave_1: entered promiscuous mode [ 365.830361][ T5117] Bluetooth: hci3: command tx timeout [ 366.043821][ T8852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.062751][ T29] audit: type=1400 audit(2000000211.109:695): avc: denied { read } for pid=8944 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.190493][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.208177][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.228744][ T8947] loop4: detected capacity change from 0 to 64 [ 366.247590][ T8873] bridge_slave_0: entered allmulticast mode [ 366.258160][ T8873] bridge_slave_0: entered promiscuous mode [ 366.267424][ T8947] hfs: unable to open extent tree [ 366.272491][ T8947] hfs: can't find a HFS filesystem on dev loop4 [ 366.279801][ T8852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.333155][ T8747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.359185][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.366433][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.392751][ T8873] bridge_slave_1: entered allmulticast mode [ 366.406764][ T8873] bridge_slave_1: entered promiscuous mode [ 366.501558][ T8852] team0: Port device team_slave_0 added [ 366.515227][ T8747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.529462][ T8747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.612363][ T8852] team0: Port device team_slave_1 added [ 366.623175][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 366.628937][ T8747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.771218][ T8961] loop4: detected capacity change from 0 to 2048 [ 366.781715][ T8959] loop3: detected capacity change from 0 to 2048 [ 366.804875][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.816031][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.824209][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.842487][ T8962] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.852938][ T8852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.872565][ T8961] loop4: p1 < > p2 p3 < p5 > [ 366.882021][ T8961] loop4: p2 start 16908804 is beyond EOD, truncated [ 366.907910][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.918548][ T8961] loop4: p5 start 16908804 is beyond EOD, truncated [ 366.971275][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.978795][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.016217][ T8962] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 367.027033][ T8852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.037573][ T8962] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 367.049005][ T8962] Remounting filesystem read-only [ 367.054125][ T61] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 367.061363][ T61] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 367.068807][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.079622][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.088650][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.098941][ T61] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 367.112882][ T61] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 367.124716][ T61] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 367.132787][ T8961] sit0: entered allmulticast mode [ 367.153345][ T8873] team0: Port device team_slave_0 added [ 367.166685][ T61] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 367.174001][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.183054][ T5117] Bluetooth: hci6: command tx timeout [ 367.203947][ T8873] team0: Port device team_slave_1 added [ 367.205707][ T61] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 367.219521][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.228556][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.237573][ T61] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 367.244869][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.254161][ T61] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 367.261765][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.271006][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.280811][ T61] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 367.288338][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.297404][ T61] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 367.304188][ T61] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 367.311722][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.321458][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.332975][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.342229][ T61] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 367.349050][ T61] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 367.356363][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.371793][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.382654][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.411414][ T61] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 367.418534][ T61] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 367.425845][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.441979][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.451523][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.460613][ T61] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 367.468382][ T61] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 367.468539][ T8852] hsr_slave_0: entered promiscuous mode [ 367.475668][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.490300][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.499423][ T61] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 367.508725][ T5120] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 367.519026][ T5120] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 367.525731][ T5120] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 367.525828][ T8852] hsr_slave_1: entered promiscuous mode [ 367.533078][ T5120] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 367.533102][ T5120] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 367.533123][ T5120] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 367.562180][ T8852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.569799][ T8852] Cannot create hsr debugfs directory [ 367.578443][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.585396][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.611772][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.626080][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.656957][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.687279][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.796390][ T1108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.913259][ T1108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.046806][ T1108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.091570][ T8873] hsr_slave_0: entered promiscuous mode [ 368.099722][ T8873] hsr_slave_1: entered promiscuous mode [ 368.118073][ T8873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.125633][ T8873] Cannot create hsr debugfs directory [ 368.195029][ T1108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.219422][ T2531] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 368.424832][ T2531] usb 4-1: config 0 has no interfaces? [ 368.424886][ T2531] usb 4-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 368.424924][ T2531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.428651][ T2531] usb 4-1: config 0 descriptor?? [ 368.634056][ T8747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.639064][ T5165] usb 4-1: USB disconnect, device number 6 [ 368.823380][ T8747] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.872080][ T1108] bridge_slave_1: left allmulticast mode [ 368.883180][ T1108] bridge_slave_1: left promiscuous mode [ 368.895385][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.908989][ T1108] bridge_slave_0: left allmulticast mode [ 368.914851][ T1108] bridge_slave_0: left promiscuous mode [ 368.922065][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.325729][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 369.653470][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.691437][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.712912][ T1108] bond0 (unregistering): Released all slaves [ 369.769431][ T8995] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.798675][ T2531] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.805951][ T2531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.862486][ T8999] xt_hashlimit: overflow, try lower: 3/0 [ 370.578993][ T2531] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.586287][ T2531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.793606][ T9002] x_tables: duplicate underflow at hook 1 [ 370.820936][ T9002] loop4: detected capacity change from 0 to 512 [ 370.844480][ T9002] EXT4-fs: Ignoring removed nobh option [ 370.877797][ T9002] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 370.886415][ T9002] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 370.923946][ T9002] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #13: comm syz-executor.4: casefold flag without casefold feature [ 370.952505][ T9002] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 370.989664][ T9002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.014162][ T9002] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.122395][ T9004] loop3: detected capacity change from 0 to 164 [ 371.218098][ T1108] hsr_slave_0: left promiscuous mode [ 371.236418][ T1108] hsr_slave_1: left promiscuous mode [ 371.247540][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.254973][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.264739][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.272721][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.316596][ T1108] veth1_macvtap: left promiscuous mode [ 371.325406][ T1108] veth0_macvtap: left promiscuous mode [ 371.331433][ T1108] veth1_vlan: left promiscuous mode [ 371.337223][ T1108] veth0_vlan: left promiscuous mode [ 371.345493][ T9015] loop3: detected capacity change from 0 to 64 [ 371.368314][ T9015] hfs: unable to open extent tree [ 371.373427][ T9015] hfs: can't find a HFS filesystem on dev loop3 [ 371.946986][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 372.149238][ T8] usb 5-1: config 0 has no interfaces? [ 372.163829][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 372.173549][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.187547][ T8] usb 5-1: config 0 descriptor?? [ 372.196554][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 372.269158][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 372.501404][ T5162] usb 5-1: USB disconnect, device number 5 [ 372.880520][ T9021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.242424][ T8852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.347908][ T8852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.374805][ T8852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.403743][ T8852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.322141][ T9043] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 374.947493][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.067158][ T8873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.324095][ T8852] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.368251][ T8873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.397746][ T8873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 375.472057][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.495359][ T9049] x_tables: duplicate underflow at hook 1 [ 375.519724][ T8873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 375.562754][ T9049] loop4: detected capacity change from 0 to 512 [ 375.576617][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.583843][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.594574][ T9049] EXT4-fs: Ignoring removed nobh option [ 375.622114][ T9049] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 375.626541][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.637155][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.656405][ T9049] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 375.676007][ T9049] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #13: comm syz-executor.4: casefold flag without casefold feature [ 375.738534][ T9049] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 375.800267][ T9049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.829070][ T9049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.992976][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.061183][ T9053] loop3: detected capacity change from 0 to 164 [ 376.110810][ T8873] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.140244][ T8747] veth0_vlan: entered promiscuous mode [ 376.158980][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.166267][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.252665][ T8747] veth1_vlan: entered promiscuous mode [ 376.283054][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.290288][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.992853][ T8747] veth0_macvtap: entered promiscuous mode [ 377.358359][ T8747] veth1_macvtap: entered promiscuous mode [ 377.495202][ T9073] sit0: left allmulticast mode [ 377.521812][ T29] audit: type=1400 audit(2000000222.589:696): avc: denied { mount } for pid=9074 comm="syz-executor.3" name="/" dev="pstore" ino=2721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 377.587698][ T29] audit: type=1400 audit(2000000222.629:697): avc: denied { unmount } for pid=5120 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 377.660402][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.675122][ T9073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.713671][ T8873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.749261][ T8852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.765866][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.779487][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.792160][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.803337][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.813779][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.828177][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.855778][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.873135][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.901357][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.951781][ T9084] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.975389][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.990984][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.001353][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.012147][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.022597][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.033456][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.043379][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.053975][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.069538][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.096256][ T8747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.117096][ T8747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.125962][ T8747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.134714][ T8747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.308633][ T8852] veth0_vlan: entered promiscuous mode [ 378.361254][ T8873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.413738][ T8852] veth1_vlan: entered promiscuous mode [ 378.462616][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.470786][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.631889][ T2883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.677213][ T2883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.818829][ T5160] IPVS: starting estimator thread 0... [ 378.831812][ T8873] veth0_vlan: entered promiscuous mode [ 378.890527][ T8873] veth1_vlan: entered promiscuous mode [ 378.931508][ T8852] veth0_macvtap: entered promiscuous mode [ 378.937840][ T9096] IPVS: using max 16 ests per chain, 38400 per kthread [ 379.060627][ T9106] loop4: detected capacity change from 0 to 164 [ 379.240325][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.246746][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.281493][ T8852] veth1_macvtap: entered promiscuous mode [ 379.755889][ T8873] veth0_macvtap: entered promiscuous mode [ 379.868322][ T8873] veth1_macvtap: entered promiscuous mode [ 379.920396][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.959241][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.978155][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.996745][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.016800][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.032416][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.058775][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.076888][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.094430][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.105482][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.128227][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.168447][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.184580][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.195566][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.206800][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.217806][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.230168][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.240897][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.252663][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.262672][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.273391][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.286116][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.617122][ T5165] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 380.882603][ T5165] usb 5-1: config 0 has no interfaces? [ 380.952657][ T5165] usb 5-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 381.250468][ T8852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.271573][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.286972][ T5165] usb 5-1: config 0 descriptor?? [ 381.316708][ T8852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.335105][ T8852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.366725][ T8852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.422715][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.446599][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.460777][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.471362][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.481514][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.492099][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.502816][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.524044][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.535082][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.545967][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.563657][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.572485][ T5162] usb 5-1: USB disconnect, device number 6 [ 381.580054][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.582275][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.650843][ T29] audit: type=1400 audit(2000000226.709:698): avc: denied { attach_queue } for pid=9122 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 381.686243][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.704914][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.715486][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.741996][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.758576][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.769204][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.779650][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.790173][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.800048][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.810674][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.820591][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.831470][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.843395][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.927583][ T8873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.936324][ T8873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.959218][ T8873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.969841][ T8873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.254744][ T9138] pim6reg: entered allmulticast mode [ 382.256935][ T9140] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 382.260943][ T29] audit: type=1400 audit(2000000227.319:699): avc: denied { ioctl } for pid=9139 comm="syz-executor.3" path="socket:[24626]" dev="sockfs" ino=24626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 382.328093][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.335940][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.339927][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 382.384603][ T9137] pim6reg: left allmulticast mode [ 382.513255][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.530680][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.657557][ T2869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.687540][ T2869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.722252][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.757179][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.111478][ T9168] loop3: detected capacity change from 0 to 1024 [ 383.135459][ T9168] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 383.232933][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 383.259111][ T9168] cgroup: Unknown subsys name 'audit' [ 383.679547][ T9179] pim6reg: entered allmulticast mode [ 383.868745][ T9186] loop4: detected capacity change from 0 to 2048 [ 383.879379][ T9177] pim6reg: left allmulticast mode [ 383.930643][ T9186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.019689][ T9188] loop1: detected capacity change from 0 to 2048 [ 384.044191][ T9186] UDF-fs: error (device loop4): udf_read_inode: (ino 1329) failed !bh [ 384.067046][ T9189] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.112021][ T9186] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 384.238505][ T9190] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 384.559139][ T9189] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 384.589562][ T9189] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 384.624575][ T9189] Remounting filesystem read-only [ 384.662829][ T2869] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 384.676124][ T2869] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 384.696928][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 384.713227][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.728163][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 384.747180][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 384.769657][ T2869] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 384.776370][ T2869] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 384.892143][ T9209] loop2: detected capacity change from 0 to 164 [ 384.898770][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 384.911708][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 384.924448][ T9209] iso9660: Unknown parameter '0x0000000000000004' [ 384.937915][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 384.953236][ T2869] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 384.966574][ T2869] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 384.981204][ T9215] loop0: detected capacity change from 0 to 512 [ 384.984232][ T2869] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 385.044105][ T2869] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 385.071082][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.107277][ T9215] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 385.120808][ T2869] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 385.127819][ T2869] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 385.136105][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.147322][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.156354][ T2869] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.157047][ T9215] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 385.198901][ T8873] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 385.216471][ T8873] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 385.242424][ T9215] EXT4-fs (loop0): 1 truncate cleaned up [ 385.259465][ T8873] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.278569][ T9215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.296204][ T8873] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.315401][ T8873] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 385.356743][ T8873] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 385.452421][ T9215] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 385.676383][ T9228] loop2: detected capacity change from 0 to 2048 [ 385.684103][ T8747] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.771794][ T9228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.930151][ T9233] loop0: detected capacity change from 0 to 1024 [ 385.951856][ T9233] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 385.960567][ T9228] UDF-fs: error (device loop2): udf_read_inode: (ino 1329) failed !bh [ 386.011470][ T9228] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 386.067970][ T9235] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'. [ 386.099477][ T9238] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 386.171466][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 386.179629][ T9233] cgroup: Unknown subsys name 'audit' [ 387.948688][ T9221] syz-executor.3 (9221): drop_caches: 2 [ 388.035747][ T9255] loop1: detected capacity change from 0 to 64 [ 388.090917][ T9255] hfs: bad catalog namelength [ 388.096562][ T9255] hfs: get root inode failed [ 388.109097][ T9259] loop4: detected capacity change from 0 to 256 [ 388.277007][ T29] audit: type=1400 audit(2000000233.339:700): avc: denied { bind } for pid=9262 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.283791][ T9264] loop2: detected capacity change from 0 to 512 [ 388.445029][ T9264] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 388.475870][ T9264] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 388.545336][ T9264] EXT4-fs error (device loop2): ext4_clear_blocks:881: inode #13: comm syz-executor.2: attempt to clear invalid blocks 2 len 1 [ 388.626955][ T9264] EXT4-fs error (device loop2): ext4_free_branches:1027: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0) [ 388.636093][ T9264] EXT4-fs error (device loop2): ext4_free_branches:1027: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1) [ 388.652902][ T9264] EXT4-fs (loop2): 1 truncate cleaned up [ 388.654795][ T9264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.941614][ T9278] loop1: detected capacity change from 0 to 256 [ 389.018154][ T9278] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 389.350153][ T8852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.516751][ T29] audit: type=1400 audit(2000000234.579:701): avc: denied { write } for pid=9279 comm="syz-executor.1" path="socket:[25229]" dev="sockfs" ino=25229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.664165][ T4481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.697220][ T4481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.698558][ T4481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.701082][ T4481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.702286][ T4481] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 389.703330][ T4481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.857186][ T5162] IPVS: starting estimator thread 0... [ 390.017044][ T9291] IPVS: using max 31 ests per chain, 74400 per kthread [ 390.079522][ T9282] loop2: detected capacity change from 0 to 164 [ 390.783782][ T9304] Zero length message leads to an empty skb [ 391.139547][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.739300][ T5117] Bluetooth: hci1: command tx timeout [ 392.226573][ T9301] syz-executor.2 (9301): drop_caches: 2 [ 393.726153][ T29] audit: type=1400 audit(2000000238.789:702): avc: denied { shutdown } for pid=9312 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 393.817684][ T5117] Bluetooth: hci1: command tx timeout [ 395.576593][ T9322] loop2: detected capacity change from 0 to 2048 [ 395.608158][ T9323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.857289][ T29] audit: type=1400 audit(2000000240.919:703): avc: denied { create } for pid=9321 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 395.878789][ T29] audit: type=1400 audit(2000000240.929:704): avc: denied { connect } for pid=9321 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 395.905131][ T5117] Bluetooth: hci1: command tx timeout [ 397.398256][ T9323] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 397.436789][ T9323] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 397.495677][ T9323] Remounting filesystem read-only [ 397.508920][ T9322] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 397.515630][ T9322] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 397.528986][ T9322] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.541691][ T9322] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.555847][ T9322] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.565084][ T9322] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 397.581480][ T9322] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 397.589344][ T9322] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.606833][ T9322] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.618356][ T9322] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.817397][ T9326] loop2: detected capacity change from 0 to 512 [ 397.854199][ T9326] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 397.866199][ T9326] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 397.876555][ T9326] EXT4-fs (loop2): 1 truncate cleaned up [ 397.894168][ T9326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.952953][ T9326] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 397.976793][ T5117] Bluetooth: hci1: command tx timeout [ 398.015220][ T8852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.478410][ T9332] loop2: detected capacity change from 0 to 512 [ 398.500993][ T9332] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 398.533592][ T9332] EXT4-fs (loop2): 1 orphan inode deleted [ 398.546945][ T9332] EXT4-fs (loop2): 1 truncate cleaned up [ 398.554484][ T9332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.692543][ T9332] kvm: emulating exchange as write [ 398.919830][ T8852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.310936][ T9342] loop2: detected capacity change from 0 to 256 [ 400.492926][ T9344] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.019153][ T9346] loop2: detected capacity change from 0 to 40427 [ 401.034553][ T9346] F2FS-fs (loop2): invalid crc value [ 401.052710][ T9346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 401.130077][ T9346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 401.618889][ T9352] syz-executor.2: attempt to access beyond end of device [ 401.618889][ T9352] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 401.653642][ T9352] syz-executor.2: attempt to access beyond end of device [ 401.653642][ T9352] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 401.862480][ T29] audit: type=1800 audit(2000000246.619:705): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 401.884888][ T29] audit: type=1400 audit(2000000246.779:706): avc: denied { ioctl } for pid=9345 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=702 ioctlcmd=0x5382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 402.162313][ T8852] syz-executor.2: attempt to access beyond end of device [ 402.162313][ T8852] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 402.189402][ T8852] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 403.096102][ T9357] [U] [ 403.099562][ T9357] [U] [ 403.102288][ T9357] [U] [ 403.105008][ T9357] [U] [ 403.116993][ T9357] [U] [ 403.119739][ T9357] [U] [ 403.122463][ T9357] [U] [ 403.125193][ T9357] [U] [ 403.128721][ T9357] [U] [ 403.131455][ T9357] [U] [ 403.134179][ T9357] [U] [ 403.155842][ T9356] [U] [ 404.539244][ T9363] syz-executor.2 (9363): drop_caches: 2 [ 405.984080][ T9378] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.131996][ T4481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.145867][ T4481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.156188][ T4481] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.166115][ T4481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.174276][ T4481] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 420.182501][ T4481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 420.747763][ T5117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 420.762992][ T5117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 420.776396][ T5117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 420.785804][ T5117] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 420.811435][ T5117] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 420.819797][ T5117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 421.101193][ T5117] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 421.111966][ T5117] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 421.123265][ T5117] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 421.135127][ T5117] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 421.143277][ T5117] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 421.151184][ T5117] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 422.218364][ T4481] Bluetooth: hci2: command tx timeout [ 422.857234][ T4481] Bluetooth: hci7: command tx timeout [ 423.256833][ T4481] Bluetooth: hci8: command tx timeout [ 424.297087][ T4481] Bluetooth: hci2: command tx timeout [ 424.937170][ T4481] Bluetooth: hci7: command tx timeout [ 425.336988][ T4481] Bluetooth: hci8: command tx timeout [ 426.376885][ T4481] Bluetooth: hci2: command tx timeout [ 427.017295][ T4481] Bluetooth: hci7: command tx timeout [ 427.417025][ T4481] Bluetooth: hci8: command tx timeout [ 428.457111][ T5117] Bluetooth: hci2: command tx timeout [ 429.097815][ T4481] Bluetooth: hci7: command tx timeout [ 429.496923][ T4481] Bluetooth: hci8: command tx timeout [ 437.175125][ T5117] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 437.193890][ T5117] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 437.203101][ T5117] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 437.218250][ T5117] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 437.226858][ T5117] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 437.234927][ T5117] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 439.339221][ T4481] Bluetooth: hci9: command tx timeout [ 440.646245][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.652733][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.417178][ T4481] Bluetooth: hci9: command tx timeout [ 443.496902][ T4481] Bluetooth: hci9: command tx timeout [ 445.577273][ T4481] Bluetooth: hci9: command tx timeout [ 453.765625][ T5117] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 453.777190][ T5117] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 453.786504][ T5117] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 453.797300][ T5117] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 453.805349][ T5117] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 453.812989][ T5117] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 455.896841][ T5117] Bluetooth: hci10: command tx timeout [ 457.976861][ T5117] Bluetooth: hci10: command tx timeout [ 460.056924][ T5117] Bluetooth: hci10: command tx timeout [ 462.136980][ T5117] Bluetooth: hci10: command tx timeout [ 473.416889][ T4481] Bluetooth: hci5: command 0x0406 tx timeout [ 483.657049][ T9407] Bluetooth: hci3: command 0x0406 tx timeout [ 483.665514][ T9407] Bluetooth: hci6: command 0x0406 tx timeout [ 485.196845][ T5117] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 485.204716][ T5117] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 485.213619][ T5117] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 485.224226][ T5117] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 485.232526][ T5117] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 485.240890][ T5117] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 485.613028][ T5117] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 485.631866][ T5117] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 485.640947][ T5117] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 485.660284][ T5117] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 485.668475][ T5117] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 485.693447][ T5117] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 486.171034][ T5117] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 486.181614][ T5117] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 486.191769][ T5117] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 486.202988][ T5117] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 486.211247][ T5117] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 486.218963][ T5117] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 487.256962][ T5117] Bluetooth: hci11: command tx timeout [ 487.737034][ T5117] Bluetooth: hci12: command tx timeout [ 488.297123][ T5117] Bluetooth: hci13: command tx timeout [ 489.349198][ T5117] Bluetooth: hci11: command tx timeout [ 489.828277][ T5117] Bluetooth: hci12: command tx timeout [ 490.376968][ T5117] Bluetooth: hci13: command tx timeout [ 491.416964][ T5117] Bluetooth: hci11: command tx timeout [ 491.896911][ T5117] Bluetooth: hci12: command tx timeout [ 492.457111][ T5117] Bluetooth: hci13: command tx timeout [ 493.496812][ T5117] Bluetooth: hci11: command tx timeout [ 493.977050][ T5117] Bluetooth: hci12: command tx timeout [ 494.537021][ T5117] Bluetooth: hci13: command tx timeout [ 502.069334][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.076351][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.284208][ T4481] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 502.297033][ T4481] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 502.305488][ T4481] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 502.323378][ T4481] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 502.332814][ T4481] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 502.342307][ T4481] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 504.386034][ T5117] Bluetooth: hci14: command tx timeout [ 506.457188][ T5117] Bluetooth: hci14: command tx timeout [ 508.536922][ T5117] Bluetooth: hci14: command tx timeout [ 510.617042][ T5117] Bluetooth: hci14: command tx timeout [ 514.377064][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 518.914587][ T5117] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 518.926995][ T5117] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 518.935345][ T5117] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 518.945262][ T5117] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 518.956460][ T5117] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 518.964060][ T5117] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 521.016951][ T5117] Bluetooth: hci15: command tx timeout [ 523.098152][ T5117] Bluetooth: hci15: command tx timeout [ 525.176764][ T5117] Bluetooth: hci15: command tx timeout [ 527.266895][ T5117] Bluetooth: hci15: command tx timeout [ 543.017172][ T30] INFO: task syz-executor.1:9286 blocked for more than 143 seconds. [ 543.025303][ T30] Not tainted 6.10.0-rc3-syzkaller #0 [ 543.042478][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.051361][ T30] task:syz-executor.1 state:D stack:25536 pid:9286 tgid:9286 ppid:8873 flags:0x00004006 2033/05/18 03:39:48 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 543.066739][ T30] Call Trace: [ 543.070042][ T30] [ 543.096819][ T30] __schedule+0xf15/0x5d00 [ 543.101304][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 543.106531][ T30] ? preempt_schedule_notrace+0x62/0xe0 [ 543.164247][ T30] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 543.183599][ T30] ? __pfx___schedule+0x10/0x10 [ 543.196952][ T30] ? schedule+0x298/0x350 [ 543.201319][ T30] ? __pfx_lock_release+0x10/0x10 [ 543.206368][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 543.245470][ T30] ? __mutex_trylock_common+0x78/0x250 [ 543.256979][ T30] schedule+0xe7/0x350 [ 543.261081][ T30] schedule_preempt_disabled+0x13/0x30 [ 543.266566][ T30] __mutex_lock+0x5b8/0x9c0 [ 543.294632][ T30] ? unregister_netdev+0x12/0x30 [ 543.299673][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 543.304716][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 543.310934][ T30] ? __timer_delete_sync+0x174/0x1b0 [ 543.316253][ T30] ? __timer_delete_sync+0x17f/0x1b0 [ 543.331939][ T30] ? unregister_netdev+0x12/0x30 [ 543.339619][ T30] ? rtnl_lock+0x9/0x20 [ 543.344462][ T30] unregister_netdev+0x12/0x30 [ 543.356671][ T30] slip_close+0x165/0x1c0 [ 543.361031][ T30] ? __pfx_slip_close+0x10/0x10 [ 543.365904][ T30] tty_ldisc_close+0x111/0x1a0 [ 543.378644][ T30] tty_ldisc_kill+0x8e/0x150 [ 543.383271][ T30] tty_ldisc_release+0x116/0x2a0 [ 543.394429][ T30] tty_release_struct+0x23/0xe0 [ 543.401951][ T30] tty_release+0xe33/0x1420 [ 543.406486][ T30] ? evm_file_release+0xd6/0x1d0 [ 543.416668][ T30] ? __pfx_tty_release+0x10/0x10 [ 543.421638][ T30] __fput+0x408/0xbb0 [ 543.436917][ T30] task_work_run+0x14e/0x250 [ 543.444360][ T30] ? __pfx_task_work_run+0x10/0x10 [ 543.456678][ T30] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 543.462772][ T30] syscall_exit_to_user_mode+0x278/0x2a0 [ 543.475790][ T30] do_syscall_64+0xda/0x250 [ 543.480376][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.486293][ T30] RIP: 0033:0x7f5029e7cea9 [ 543.496666][ T30] RSP: 002b:00007fffed9e2508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 543.515464][ T30] RAX: 0000000000000000 RBX: 00007f5029fb5980 RCX: 00007f5029e7cea9 [ 543.535502][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 543.546608][ T30] RBP: 00007f5029fb5980 R08: 000000008aea135e R09: 0000001400000000 [ 543.554632][ T30] R10: 0000001b2e620000 R11: 0000000000000246 R12: 000000000005f54c [ 543.571881][ T30] R13: 00007f5029fb3f8c R14: 0000000000000032 R15: 00007f5029fb5980 [ 543.586857][ T30] [ 543.598911][ T30] INFO: task syz-executor.0:9306 blocked for more than 143 seconds. [ 543.614056][ T30] Not tainted 6.10.0-rc3-syzkaller #0 [ 543.620773][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.646921][ T30] task:syz-executor.0 state:D stack:26224 pid:9306 tgid:9303 ppid:8747 flags:0x00004006 [ 543.666779][ T30] Call Trace: [ 543.670077][ T30] [ 543.673018][ T30] __schedule+0xf15/0x5d00 [ 543.685550][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 543.691123][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 543.696357][ T30] ? __pfx___schedule+0x10/0x10 [ 543.709681][ T30] ? schedule+0x298/0x350 [ 543.714043][ T30] ? __pfx_lock_release+0x10/0x10 [ 543.723912][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 543.734634][ T30] ? __mutex_trylock_common+0x78/0x250 [ 543.746675][ T30] schedule+0xe7/0x350 [ 543.754443][ T30] schedule_preempt_disabled+0x13/0x30 [ 543.787043][ T30] __mutex_lock+0x5b8/0x9c0 [ 543.791580][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 543.796532][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 543.817359][ T30] ? __nla_parse+0x40/0x60 [ 543.821810][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 543.836817][ T30] nl80211_pre_doit+0xb4/0xb10 [ 543.841612][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 543.856876][ T30] genl_family_rcv_msg_doit+0x1be/0x2f0 [ 543.862462][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 543.886715][ T30] ? ns_capable+0xd7/0x110 [ 543.891166][ T30] genl_rcv_msg+0x565/0x800 [ 543.895699][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [