last executing test programs: 2m35.416871916s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) 2m10.02050201s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) 1m50.096399502s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) 1m25.650176435s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) 56.225397212s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) 42.008396294s ago: executing program 1: r0 = io_uring_setup(0x6568, &(0x7f0000001880)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0xc, 0x0, 0x1) 41.781825208s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac675bd612d8ab87f051a10ee74893f24ccd9ce3e96e268eef4b136865aeac"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r0, r0, 0x4, r0}, 0x10) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000500)) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) write$hidraw(0xffffffffffffffff, &(0x7f0000000300), 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x5, 0x20001) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000000c0)={0x7f, "be3e815995830e16a128b578e3af9d546fd61d7a5683da229303c76a2df3948c831ebfb4e3a2c0c336fe8ce02d8dc9d583aebcb8beb9e08613ec0143508bd56f"}) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000000)={0x0, "1cf250d2528722061e2daedcbbf930dedf4904d8f9e64f62c3d0e156e87ed3dbfac38f0c1faada797532454dd344c00c8a007369f5d86fe64007aa38577e4db7"}) r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x5, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) write$hidraw(r5, &(0x7f00000018c0)="387a3e3a119c477b513636325d4cd15cd14fda9794", 0x15) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000d80)={0x523, "d719d3800e9c938a541ddda71d0515a9b976e809b8ac68c529cc9be214d4e89f01f8e1b4f07a1a9a88028b474d90b27b7e72cd879f7d5d316dd869c5b8a3cf676bc7b8b52ff5eb1fb9f153600a13e1fc216fe34b1563c542c048b5e34e61d0c0d85c2a96731afc8f3f6a421c475217fe764d1b0c9973ba609b8d9ef8e11442a41b65277d5e6149af2d8a06825bd12f13d501ab213648d7c914f422b0c5cc6aa420676417fe367fcb7ce1d10c6f8afdd6beade9ded72d346f64d23776da585cdbbc9f9dee0474f9d7b608e996b67a7b0f4507aed7f1066cec880ddb71b7aa5d50d9dd35842b650f34fa842d1870f36daa614c9b6663713d759b1d06ed646e84edcb2c7e24b9bbf3ad93dc0015a581d650166fc95439c6d47f8c3cabf2d843b71dd0cb33fa62e6fbc4eb3778f1b3d2969ca5f592f569f03e425b384705da14d9d6ea0575d5d06e8e0646d5d8df9fbff224851c8d9835d04313ce63fc0f691ac536db32c219bd2dc7ab6ba01ed2c36dfbf64e269ed45a0c66ead0df961993d9146771662fbfc60693bc41ea04deb77577b73d39af9fcda9f6c61feb7a20d4649af908a4bc03f9cbe9aeadc7c6adb3c1641ded96d5ec5c7b81b99d56b2abdfa878f4ad47be7af23474bd576bf2360aa862b7a55ceecedb466f029e2898310c1025e37637d375bd47467921c5587d221de3a961db8f6f0f517606e6f2bcc7713613c6d3f3620a2d42fd727f7bfaee664155a73aa685972e18d53bea0390ee7e510f36921ccfd9cbd09794f360efa9c89f2f9a0aa2b648118805b58ab6aa4c8b134be51992fe9caf8682ec2dc044eb435919399c4c7d203c5c48297e439a0a6b65daca3e599c9b34c95a9831ac0b1a157fc37eadc43c7bc525f2f078078233a6ab0cfdef2fda8e4f75a7efec5c26e4a9455493d93fedce3c23380194aaafbc8286dde37ef5efdf94b9c9b0b8734b8534b660bb68ecefd166bf0da9f663aa140e84823c7a182d4806590bc024df73fafef6a7ef42c95357edad94104af563d34b4c4d7d1dcdd94c2f25f59d8ca4aaf3023b23fbe421590abe94115b6d43761e498cc10310c5f38da68e1cf3e7b7fe2c516f0cd273bcd1393862b26145b7f1d547c21d1247d894890c28ef8c43d4994768f960553e41f4c1e038bc20a2cfd2a65326ef08773f27e1ad20bcff39b7ce1a40f9bead32b4f8610dedfb1e0a33aea85ac746e4651a7137db2f0adb057e583f8b41b5f13a07add6620948e7d4dc9ee35dcc9c944ae0be9e61c0e9dd27f0f936053d47b2f28225447f8db70227346101f8831b3e984f15bd3cca297ed66d894f7b75aa63ff0c8e24afd8cc9713b582b59ff9ed3cee2b05adff2d6a794914356d820a7bd06319ed87556d43dba0baf906d3135e195571891a5e8169d6fa4ed41a49c3048ab7cc6da7f625ec148907c57f579d342c9fa02553d5a742bf2233f12ae0aea9ae99e5b250092848b94a9a63ded4ca63ba193237c36eac1f09cd37eefc7ea97ac26e35a670d07c2a8db4db05a5578eddd68c12b7b10926b1dee6fa4cf4c337cf51e406af36332427a3f2f57e405053bf91a094bf26a40a5f7b9a052215eaaf6f818beab29f4fb16bf4de956dd7919b78480e09e178a6fa9e3c47c48567828c66a7360028d02767767394d23d844951226144f11ed5cb027ae5c26b1fa55b12bcb78b166f511984f4a8c27177f5b4563fe8bc9ca8c3ee0a70fe431ecf973462789a002ba6cad3f11de280cc47dc198e086a003ea73cfdfc5c3038c79fa24c27a638584240c53d9682fd80aa0b57a026a68380a6ab0160bfd6a588d58cf935b8589d188f728b12e3513923cd48ffaf62ea23c7c62e"}) ioctl$HIDIOCGRDESC(r3, 0x4030582a, &(0x7f0000000240)={0xc700}) syz_open_dev$hidraw(0x0, 0x8001, 0x200) syz_open_dev$hidraw(0x0, 0x7, 0x8eb8ef4c03a955b8) syz_usb_control_io(r1, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffeffff}, @NFULA_CFG_NLBUFSIZ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x4c, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x3}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400009ecec85829bebf9f63e23e6026fac87cb4c81c45eee2afeb67c67d8f83cc36ed98b11c5054cc6d1a04d706180006732a2e9c9276bef52eb95132158548dc98dd39018c27", @ANYRES16=r7, @ANYBLOB="04062bbd7000fbdbdf25040000000900030073797a3100000000140002007663616e3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x46004}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 38.56401471s ago: executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = dup2(r0, r0) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) 38.320060603s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea454"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 37.96489566s ago: executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 37.771241501s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8affff00000000b70800000000000000000007040000f0ffffffb70200000800000018230000cf8b0c15de440f0118b98f6eb10ad0c101c7b64a7b6804b1d7cc00"/118, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae09, &(0x7f0000000f80)=ANY=[@ANYRES16]) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000e2ffffffffffffff000000000085000000a90000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) creat(&(0x7f0000000000)='./file0\x00', 0x22) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f00000003c0)="dca920c0c6b157c41b09db54f8e09a8dbb7f2454075056fedcf149954078f7c26b99f1482df733924002f8a459b8ef299860e2a943c0192102ee9681c9a2aa13e05ce85adb2085eff6e5e49fb2fc0c1016c97e8808220625f92b72e6bd5a06ccf5763c3fba20bf851a05d9ce78ffff06ca90935feeced4e08f99561fe17dd92f5572f04276ae7505054d1dfa4ed524351a92e73c65fad6c13db9d87c1c42fd77fd073c104dae68214f6e2b5eec6054fb", &(0x7f0000000580)=""/145, 0x0, 0x0, 0x5, r0}, 0x38) 37.510591823s ago: executing program 3: r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) socket(0x10, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000640)={0x0, 0x0, 0x6}) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 37.061767004s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 36.818986827s ago: executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005740)=""/233, 0xe9}], 0x1}}], 0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f00000023c0)=[{{&(0x7f0000000280)={0x2, 0x0, @dev}, 0x10, &(0x7f0000002300)=[{&(0x7f00000002c0)="16", 0x1}], 0x1}}], 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000005c0)={0x5, @sliced}) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) socket$inet_sctp(0x2, 0x5, 0x84) 36.448188572s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x8}}}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000240000000070900010001000000010000000900020073797a3200000000140000001100"], 0x74}}, 0x0) unshare(0x4040600) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x4, 0x2) connect$bt_sco(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 36.242763323s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) 34.877910152s ago: executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 34.733715277s ago: executing program 0: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00'], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f00000004c0)='./bus/file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0) 34.386931151s ago: executing program 3: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) dup3(r2, r1, 0x0) io_setup(0x40000000008, &(0x7f0000000140)=0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) io_submit(r3, 0x7, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2, 0x0, 0x4, 0x0, 0x0, r1, &(0x7f0000000000), 0x5200}]) 34.192822575s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa4000000000000070400", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x803, 0x0) 32.907687655s ago: executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f000001f440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)) write$FUSE_ATTR(r2, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x8, 0x6000, 0x0, r0, 0x0, 0x1, 0x2}}}, 0x78) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x222, 0x0) socket(0x11, 0x0, 0x0) socket(0x10, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000005c40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000005a40)={@flat, @fda={0x66646185, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 31.004478375s ago: executing program 4: socket$tipc(0x1e, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00'}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x2, 0x0}}], 0xf000, 0x10002, 0x0) 30.72485215s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 30.025695587s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 29.040214762s ago: executing program 4: r0 = io_uring_setup(0x2c58, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}, 0x20) 28.955979987s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0xd, 0x694, &(0x7f0000000d00)="$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") mkdir(&(0x7f0000000140)='./file\x00', 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./file/file0/..//file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 27.206151357s ago: executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 27.035012693s ago: executing program 4: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb7e3001f1c807678e502000005000080b70300000000000085"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020101"], 0x1c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x480000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x80000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000400)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0xa) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) chroot(&(0x7f00000002c0)='./file0\x00') sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d00)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.757135775s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa4000000000000070400", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x803, 0x0) 0s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): ][ T8776] syz_tun: tun_net_xmit 42 [ 354.363645][ T8776] syz_tun: tun_net_xmit 42 [ 354.385384][ T8776] syz_tun: tun_net_xmit 42 [ 354.389934][ T8776] syz_tun: tun_net_xmit 42 [ 354.422126][ T8776] syz_tun: tun_net_xmit 42 [ 354.444797][ T8776] syz_tun: tun_net_xmit 42 [ 354.449371][ T8776] syz_tun: tun_net_xmit 42 [ 354.475211][ T8776] syz_tun: tun_net_xmit 42 [ 354.479764][ T8776] syz_tun: tun_net_xmit 42 [ 354.485198][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.495323][ T8776] syz_tun: tun_net_xmit 42 [ 354.521373][ T8776] syz_tun: tun_net_xmit 42 [ 354.531011][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.533810][ T8776] syz_tun: tun_net_xmit 42 [ 354.554917][ T8776] syz_tun: tun_net_xmit 42 [ 354.567465][ T8776] syz_tun: tun_net_xmit 42 [ 354.586538][ T8776] syz_tun: tun_net_xmit 42 [ 354.609195][ T8776] syz_tun: tun_net_xmit 42 [ 354.632555][ T8776] syz_tun: tun_net_xmit 42 [ 354.644749][ T8776] syz_tun: tun_net_xmit 42 [ 354.652777][ T8776] syz_tun: tun_net_xmit 42 [ 354.664170][ T8776] syz_tun: tun_net_xmit 42 [ 354.671689][ T8776] syz_tun: tun_net_xmit 42 [ 354.694373][ T8776] syz_tun: tun_net_xmit 42 [ 354.699011][ T8776] syz_tun: tun_net_xmit 42 [ 354.745831][ T8776] syz_tun: tun_net_xmit 42 [ 354.759762][ T8776] syz_tun: tun_net_xmit 42 [ 354.765516][ T8776] syz_tun: tun_net_xmit 42 [ 354.778603][ T8855] kexec: Could not allocate control_code_buffer [ 354.782179][ T8776] syz_tun: tun_net_xmit 42 [ 354.817861][ T8776] syz_tun: tun_net_xmit 42 [ 354.831147][ T8776] syz_tun: tun_net_xmit 42 [ 354.861598][ T8776] syz_tun: tun_net_xmit 42 [ 354.877529][ T8776] syz_tun: tun_net_xmit 42 [ 354.901199][ T8776] syz_tun: tun_net_xmit 42 [ 354.924240][ T8776] syz_tun: tun_net_xmit 42 [ 354.934863][ T8776] syz_tun: tun_net_xmit 42 [ 354.942787][ T8776] syz_tun: tun_net_xmit 42 [ 354.952538][ T8776] syz_tun: tun_net_xmit 42 [ 354.962445][ T8776] syz_tun: tun_net_xmit 42 [ 354.974905][ T8776] syz_tun: tun_net_xmit 42 [ 354.984219][ T8776] syz_tun: tun_net_xmit 42 [ 355.002521][ T8776] syz_tun: tun_net_xmit 42 [ 355.009670][ T8776] syz_tun: tun_net_xmit 42 [ 355.026039][ T8776] syz_tun: tun_net_xmit 42 [ 355.030591][ T8776] syz_tun: tun_net_xmit 42 [ 355.039995][ T8776] syz_tun: tun_net_xmit 42 [ 355.049331][ T8776] syz_tun: tun_net_xmit 42 [ 355.056582][ T8776] syz_tun: tun_net_xmit 42 [ 355.063507][ T8776] syz_tun: tun_net_xmit 42 [ 355.068497][ T8874] loop3: detected capacity change from 0 to 1764 [ 355.080418][ T29] audit: type=1400 audit(1717964514.668:666): avc: denied { bind } for pid=8876 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 355.100131][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.110406][ T8776] syz_tun: tun_net_xmit 42 [ 355.135623][ T8776] syz_tun: tun_net_xmit 42 [ 355.140174][ T8776] syz_tun: tun_net_xmit 42 [ 355.164547][ T8776] syz_tun: tun_net_xmit 42 [ 355.169462][ T8776] syz_tun: tun_net_xmit 42 [ 355.189323][ T8776] syz_tun: tun_net_xmit 42 [ 355.206692][ T8776] syz_tun: tun_net_xmit 42 [ 355.211177][ T8879] usb usb9: usbfs: process 8879 (syz-executor.4) did not claim interface 0 before use [ 355.236406][ T8776] syz_tun: tun_net_xmit 42 [ 355.246774][ T8879] usb usb9: selecting invalid altsetting 21783 [ 355.256599][ T8776] syz_tun: tun_net_xmit 42 [ 355.261157][ T8776] syz_tun: tun_net_xmit 42 [ 355.290658][ T8874] trusted_key: encrypted_key: insufficient parameters specified [ 355.299345][ T8776] syz_tun: tun_net_xmit 42 [ 355.307233][ T8776] syz_tun: tun_net_xmit 42 [ 355.311927][ T8776] syz_tun: tun_net_xmit 42 [ 355.326013][ T8776] syz_tun: tun_net_xmit 42 [ 355.336445][ T8776] syz_tun: tun_net_xmit 42 [ 355.345168][ T8776] syz_tun: tun_net_xmit 42 [ 355.349952][ T8776] syz_tun: tun_net_xmit 42 [ 355.354773][ T8776] syz_tun: tun_net_xmit 42 [ 355.359505][ T8776] syz_tun: tun_net_xmit 42 [ 355.374338][ T8776] syz_tun: tun_net_xmit 42 [ 355.382396][ T8776] syz_tun: tun_net_xmit 42 [ 355.392153][ T8776] syz_tun: tun_net_xmit 42 [ 355.405769][ T8776] syz_tun: tun_net_xmit 42 [ 355.419111][ T8776] syz_tun: tun_net_xmit 42 [ 355.435876][ T8776] syz_tun: tun_net_xmit 42 [ 355.446305][ T8776] syz_tun: tun_net_xmit 42 [ 355.463160][ T8776] syz_tun: tun_net_xmit 42 [ 355.480506][ T8776] syz_tun: tun_net_xmit 42 [ 355.485944][ T8881] loop0: detected capacity change from 0 to 4096 [ 355.492554][ T8776] syz_tun: tun_net_xmit 42 [ 355.502450][ T8776] syz_tun: tun_net_xmit 42 [ 355.510993][ T8776] syz_tun: tun_net_xmit 42 [ 355.521558][ T8776] syz_tun: tun_net_xmit 42 [ 355.533637][ T8881] NILFS (loop0): invalid segment: Checksum error in segment payload [ 355.550144][ T8776] syz_tun: tun_net_xmit 42 [ 355.554920][ T8776] syz_tun: tun_net_xmit 42 [ 355.559447][ T8881] NILFS (loop0): trying rollback from an earlier position [ 355.567370][ T8776] syz_tun: tun_net_xmit 42 [ 355.574845][ T8776] syz_tun: tun_net_xmit 42 [ 355.592741][ T8776] syz_tun: tun_net_xmit 42 [ 355.604964][ T8881] NILFS (loop0): recovery complete [ 355.610442][ T8776] syz_tun: tun_net_xmit 42 [ 355.616415][ T8776] syz_tun: tun_net_xmit 42 [ 355.621098][ T8882] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.638698][ T8776] syz_tun: tun_net_xmit 42 [ 355.651569][ T8776] syz_tun: tun_net_xmit 42 [ 355.660984][ T8776] syz_tun: tun_net_xmit 42 [ 355.676493][ T8776] syz_tun: tun_net_xmit 42 [ 355.688299][ T8776] syz_tun: tun_net_xmit 42 [ 355.699236][ T8776] syz_tun: tun_net_xmit 42 [ 355.703786][ T8776] syz_tun: tun_net_xmit 42 [ 355.724374][ T8776] syz_tun: tun_net_xmit 42 [ 355.750198][ T8776] syz_tun: tun_net_xmit 42 [ 355.761407][ T8776] syz_tun: tun_net_xmit 42 [ 355.770485][ T8776] syz_tun: tun_net_xmit 42 [ 355.780449][ T8776] syz_tun: tun_net_xmit 42 [ 355.799300][ T8776] syz_tun: tun_net_xmit 42 [ 355.817593][ T8776] syz_tun: tun_net_xmit 42 [ 355.827704][ T8776] syz_tun: tun_net_xmit 42 [ 355.838791][ T8776] syz_tun: tun_net_xmit 42 [ 355.843562][ T8776] syz_tun: tun_net_xmit 42 [ 355.850751][ T8776] syz_tun: tun_net_xmit 42 [ 355.862734][ T8776] syz_tun: tun_net_xmit 42 [ 355.872996][ T8776] syz_tun: tun_net_xmit 42 [ 355.882409][ T8776] syz_tun: tun_net_xmit 42 [ 355.891697][ T8776] syz_tun: tun_net_xmit 42 [ 355.901337][ T8776] syz_tun: tun_net_xmit 42 [ 355.910717][ T8776] syz_tun: tun_net_xmit 42 [ 355.926655][ T8776] syz_tun: tun_net_xmit 42 [ 355.939500][ T8776] syz_tun: tun_net_xmit 42 [ 355.963086][ T8776] syz_tun: tun_net_xmit 42 [ 355.983056][ T8776] syz_tun: tun_net_xmit 42 [ 355.987872][ T8776] syz_tun: tun_net_xmit 42 [ 355.992596][ T8776] syz_tun: tun_net_xmit 42 [ 356.006286][ T8776] syz_tun: tun_net_xmit 42 [ 356.010978][ T8776] syz_tun: tun_net_xmit 42 [ 356.030460][ T8776] syz_tun: tun_net_xmit 42 [ 356.044567][ T8776] syz_tun: tun_net_xmit 42 [ 356.049706][ T8776] syz_tun: tun_net_xmit 42 [ 356.054559][ T8776] syz_tun: tun_net_xmit 42 [ 356.059206][ T8776] syz_tun: tun_net_xmit 42 [ 356.063912][ T8776] syz_tun: tun_net_xmit 42 [ 356.068881][ T8776] syz_tun: tun_net_xmit 42 [ 356.073543][ T8776] syz_tun: tun_net_xmit 42 [ 356.079578][ T8776] syz_tun: tun_net_xmit 42 [ 356.095299][ T8776] syz_tun: tun_net_xmit 42 [ 356.099959][ T8776] syz_tun: tun_net_xmit 42 [ 356.104630][ T8776] syz_tun: tun_net_xmit 42 [ 356.110480][ T8776] syz_tun: tun_net_xmit 42 [ 356.122933][ T8776] syz_tun: tun_net_xmit 42 [ 356.131090][ T6122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.154989][ T8776] syz_tun: tun_net_xmit 42 [ 356.159953][ T8776] syz_tun: tun_net_xmit 42 [ 356.164791][ T8776] syz_tun: tun_net_xmit 42 [ 356.182295][ T8776] syz_tun: tun_net_xmit 42 [ 356.201754][ T8776] syz_tun: tun_net_xmit 42 [ 356.213794][ T8776] syz_tun: tun_net_xmit 42 [ 356.264137][ T8776] syz_tun: tun_net_xmit 42 [ 356.268730][ T8776] syz_tun: tun_net_xmit 42 [ 356.273267][ T8776] syz_tun: tun_net_xmit 42 [ 356.295826][ T8776] syz_tun: tun_net_xmit 42 [ 356.302797][ T8776] syz_tun: tun_net_xmit 42 [ 356.333027][ T8776] syz_tun: tun_net_xmit 42 [ 356.362033][ T8776] syz_tun: tun_net_xmit 42 [ 356.375278][ T8776] syz_tun: tun_net_xmit 42 [ 356.379941][ T8776] syz_tun: tun_net_xmit 42 [ 356.390445][ T8776] syz_tun: tun_net_xmit 42 [ 356.398534][ T8776] syz_tun: tun_net_xmit 42 [ 356.403757][ T8776] syz_tun: tun_net_xmit 42 [ 356.421359][ T8776] syz_tun: tun_net_xmit 42 [ 356.427619][ T8776] syz_tun: tun_net_xmit 42 [ 356.432286][ T8776] syz_tun: tun_net_xmit 42 [ 356.437142][ T8776] syz_tun: tun_net_xmit 42 [ 356.441883][ T8776] syz_tun: tun_net_xmit 42 [ 356.485561][ T8776] syz_tun: tun_net_xmit 42 [ 356.500460][ T8776] syz_tun: tun_net_xmit 42 [ 356.524414][ T8776] syz_tun: tun_net_xmit 42 [ 356.532465][ T8776] syz_tun: tun_net_xmit 42 [ 356.552468][ T8776] syz_tun: tun_net_xmit 42 [ 356.566357][ T8776] syz_tun: tun_net_xmit 42 [ 356.586825][ T8776] syz_tun: tun_net_xmit 42 [ 356.607183][ T8776] syz_tun: tun_net_xmit 42 [ 356.620378][ T8776] syz_tun: tun_net_xmit 42 [ 356.637726][ T6122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.639399][ T8776] syz_tun: tun_net_xmit 42 [ 356.695863][ T8776] syz_tun: tun_net_xmit 42 [ 356.716726][ T8776] syz_tun: tun_net_xmit 42 [ 356.744632][ T8776] syz_tun: tun_net_xmit 42 [ 356.764001][ T8776] syz_tun: tun_net_xmit 42 [ 356.777681][ T8776] syz_tun: tun_net_xmit 42 [ 356.794576][ T8776] syz_tun: tun_net_xmit 42 [ 356.812021][ T8776] syz_tun: tun_net_xmit 42 [ 356.825806][ T8776] syz_tun: tun_net_xmit 42 [ 356.845954][ T8776] syz_tun: tun_net_xmit 42 [ 356.850681][ T8776] syz_tun: tun_net_xmit 42 [ 356.910673][ T6122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.931494][ T8776] syz_tun: tun_net_xmit 42 [ 356.969364][ T8776] syz_tun: tun_net_xmit 42 [ 356.987725][ T8776] syz_tun: tun_net_xmit 42 [ 356.996821][ T8776] syz_tun: tun_net_xmit 42 [ 357.008061][ T8776] syz_tun: tun_net_xmit 42 [ 357.022786][ T8776] syz_tun: tun_net_xmit 42 [ 357.035441][ T8776] syz_tun: tun_net_xmit 42 [ 357.046353][ T8776] syz_tun: tun_net_xmit 42 [ 357.060578][ T8776] syz_tun: tun_net_xmit 42 [ 357.071486][ T8776] syz_tun: tun_net_xmit 42 [ 357.083137][ T8776] syz_tun: tun_net_xmit 42 [ 357.092396][ T8776] syz_tun: tun_net_xmit 42 [ 357.103906][ T8776] syz_tun: tun_net_xmit 42 [ 357.142217][ T8776] syz_tun: tun_net_xmit 42 [ 357.164145][ T8776] syz_tun: tun_net_xmit 42 [ 357.181339][ T8776] syz_tun: tun_net_xmit 42 [ 357.190739][ T6122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.198527][ T8776] syz_tun: tun_net_xmit 42 [ 357.219666][ T8776] syz_tun: tun_net_xmit 42 [ 357.230978][ T8776] syz_tun: tun_net_xmit 42 [ 357.257638][ T8776] syz_tun: tun_net_xmit 42 [ 357.286038][ T8776] syz_tun: tun_net_xmit 42 [ 357.306110][ T8776] syz_tun: tun_net_xmit 42 [ 357.330023][ T8776] syz_tun: tun_net_xmit 42 [ 357.347345][ T8776] syz_tun: tun_net_xmit 42 [ 357.369446][ T8776] syz_tun: tun_net_xmit 42 [ 357.390219][ T8776] syz_tun: tun_net_xmit 42 [ 357.436501][ T8776] syz_tun: tun_net_xmit 42 [ 357.441056][ T8776] syz_tun: tun_net_xmit 42 [ 357.449704][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.462644][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.484341][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.510104][ T8776] syz_tun: tun_net_xmit 42 [ 357.522038][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.532989][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.544644][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.555017][ T8776] syz_tun: tun_net_xmit 42 [ 357.560519][ T8776] syz_tun: tun_net_xmit 42 [ 357.614373][ T8776] syz_tun: tun_net_xmit 42 [ 357.618974][ T8776] syz_tun: tun_net_xmit 42 [ 357.623523][ T8776] syz_tun: tun_net_xmit 42 [ 357.678736][ T8776] syz_tun: tun_net_xmit 42 [ 357.714622][ T8776] syz_tun: tun_net_xmit 42 [ 357.719195][ T8776] syz_tun: tun_net_xmit 42 [ 357.723729][ T8776] syz_tun: tun_net_xmit 42 [ 357.740130][ T8776] syz_tun: tun_net_xmit 42 [ 357.756556][ T8776] syz_tun: tun_net_xmit 42 [ 357.761896][ T8776] syz_tun: tun_net_xmit 42 [ 357.781606][ T8776] syz_tun: tun_net_xmit 42 [ 357.799259][ T8776] syz_tun: tun_net_xmit 42 [ 357.825398][ T8776] syz_tun: tun_net_xmit 42 [ 357.837275][ T8776] syz_tun: tun_net_xmit 42 [ 357.841834][ T8776] syz_tun: tun_net_xmit 42 [ 357.861517][ T8776] syz_tun: tun_net_xmit 42 [ 357.875695][ T8776] syz_tun: tun_net_xmit 42 [ 357.882996][ T8776] syz_tun: tun_net_xmit 42 [ 357.906919][ T8776] syz_tun: tun_net_xmit 42 [ 357.911478][ T8776] syz_tun: tun_net_xmit 42 [ 357.945587][ T8776] syz_tun: tun_net_xmit 42 [ 357.959346][ T6122] bridge_slave_1: left allmulticast mode [ 357.982844][ T8776] syz_tun: tun_net_xmit 42 [ 357.987552][ T6122] bridge_slave_1: left promiscuous mode [ 357.993357][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.008338][ T8776] syz_tun: tun_net_xmit 42 [ 358.012897][ T8776] syz_tun: tun_net_xmit 42 [ 358.039416][ T8776] syz_tun: tun_net_xmit 42 [ 358.045620][ T6122] bridge_slave_0: left allmulticast mode [ 358.051287][ T6122] bridge_slave_0: left promiscuous mode [ 358.073115][ T8776] syz_tun: tun_net_xmit 42 [ 358.094217][ T8776] syz_tun: tun_net_xmit 42 [ 358.102734][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.112039][ T8776] syz_tun: tun_net_xmit 42 [ 358.132935][ T8776] syz_tun: tun_net_xmit 42 [ 358.148279][ T8776] syz_tun: tun_net_xmit 42 [ 358.155869][ T8776] syz_tun: tun_net_xmit 42 [ 358.160421][ T8776] syz_tun: tun_net_xmit 42 [ 358.171306][ T8776] syz_tun: tun_net_xmit 42 [ 358.192727][ T8776] syz_tun: tun_net_xmit 42 [ 358.213225][ T8776] syz_tun: tun_net_xmit 42 [ 358.228645][ T8776] syz_tun: tun_net_xmit 42 [ 358.245376][ T8776] syz_tun: tun_net_xmit 42 [ 358.255710][ T8901] loop4: detected capacity change from 0 to 2048 [ 358.263494][ T8776] syz_tun: tun_net_xmit 42 [ 358.277340][ T8776] syz_tun: tun_net_xmit 42 [ 358.281921][ T8776] syz_tun: tun_net_xmit 42 [ 358.316761][ T8776] syz_tun: tun_net_xmit 42 [ 358.321310][ T8776] syz_tun: tun_net_xmit 42 [ 358.340984][ T8776] syz_tun: tun_net_xmit 42 [ 358.362086][ T8776] syz_tun: tun_net_xmit 42 [ 358.380071][ T8901] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 358.388071][ T8901] UDF-fs: Scanning with blocksize 512 failed [ 358.388380][ T8776] syz_tun: tun_net_xmit 42 [ 358.422734][ T8776] syz_tun: tun_net_xmit 42 [ 358.436781][ T8776] syz_tun: tun_net_xmit 42 [ 358.446912][ T8776] syz_tun: tun_net_xmit 42 [ 358.455268][ T8901] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 358.455644][ T8776] syz_tun: tun_net_xmit 42 [ 358.470689][ T8901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.483470][ T8776] syz_tun: tun_net_xmit 42 [ 358.541973][ T8776] syz_tun: tun_net_xmit 42 [ 358.565872][ T8776] syz_tun: tun_net_xmit 42 [ 358.575314][ T8776] syz_tun: tun_net_xmit 42 [ 358.585816][ T8776] syz_tun: tun_net_xmit 42 [ 358.601369][ T8776] syz_tun: tun_net_xmit 42 [ 358.610142][ T8776] syz_tun: tun_net_xmit 42 [ 358.646889][ T8776] syz_tun: tun_net_xmit 42 [ 358.651478][ T8776] syz_tun: tun_net_xmit 42 [ 358.702982][ T8776] syz_tun: tun_net_xmit 42 [ 358.714033][ T8776] syz_tun: tun_net_xmit 42 [ 358.722406][ T8776] syz_tun: tun_net_xmit 42 [ 358.741825][ T8776] syz_tun: tun_net_xmit 42 [ 358.777222][ T8776] syz_tun: tun_net_xmit 42 [ 358.788596][ T8776] syz_tun: tun_net_xmit 42 [ 358.813433][ T8776] syz_tun: tun_net_xmit 42 [ 358.852942][ T8776] syz_tun: tun_net_xmit 42 [ 358.870703][ T8776] syz_tun: tun_net_xmit 42 [ 358.880080][ T8776] syz_tun: tun_net_xmit 42 [ 358.911248][ T8776] syz_tun: tun_net_xmit 42 [ 358.923615][ T8776] syz_tun: tun_net_xmit 42 [ 358.935482][ T8776] syz_tun: tun_net_xmit 42 [ 358.945907][ T8776] syz_tun: tun_net_xmit 42 [ 358.956382][ T8776] syz_tun: tun_net_xmit 42 [ 358.966925][ T8776] syz_tun: tun_net_xmit 42 [ 358.977318][ T8896] loop0: detected capacity change from 0 to 32768 [ 359.023122][ T8776] syz_tun: tun_net_xmit 42 [ 359.031772][ T8776] syz_tun: tun_net_xmit 42 [ 359.044232][ T8776] syz_tun: tun_net_xmit 42 [ 359.075773][ T8776] syz_tun: tun_net_xmit 42 [ 359.096477][ T8776] syz_tun: tun_net_xmit 42 [ 359.110860][ T8776] syz_tun: tun_net_xmit 42 [ 359.120658][ T8776] syz_tun: tun_net_xmit 42 [ 359.172977][ T8776] syz_tun: tun_net_xmit 42 [ 359.194658][ T8776] syz_tun: tun_net_xmit 42 [ 359.218426][ T8776] syz_tun: tun_net_xmit 42 [ 359.245916][ T8776] syz_tun: tun_net_xmit 42 [ 359.250475][ T8776] syz_tun: tun_net_xmit 42 [ 359.262154][ T8776] syz_tun: tun_net_xmit 42 [ 359.268946][ T8776] syz_tun: tun_net_xmit 42 [ 359.273504][ T8776] syz_tun: tun_net_xmit 42 [ 359.294377][ T8776] syz_tun: tun_net_xmit 42 [ 359.298972][ T8776] syz_tun: tun_net_xmit 42 [ 359.303514][ T8776] syz_tun: tun_net_xmit 42 [ 359.318856][ T8776] syz_tun: tun_net_xmit 42 [ 359.330474][ T8776] syz_tun: tun_net_xmit 42 [ 359.341341][ T8776] syz_tun: tun_net_xmit 42 [ 359.353372][ T8776] syz_tun: tun_net_xmit 42 [ 359.404286][ T8776] syz_tun: tun_net_xmit 42 [ 359.425739][ T8776] syz_tun: tun_net_xmit 42 [ 359.430426][ T8776] syz_tun: tun_net_xmit 42 [ 359.436311][ T8776] syz_tun: tun_net_xmit 42 [ 359.441067][ T8776] syz_tun: tun_net_xmit 42 [ 359.448313][ T8776] syz_tun: tun_net_xmit 42 [ 359.452981][ T8776] syz_tun: tun_net_xmit 42 [ 359.498194][ T8776] syz_tun: tun_net_xmit 42 [ 359.504182][ T8776] syz_tun: tun_net_xmit 42 [ 359.508745][ T8776] syz_tun: tun_net_xmit 42 [ 359.513279][ T8776] syz_tun: tun_net_xmit 42 [ 359.549335][ T8776] syz_tun: tun_net_xmit 42 [ 359.567440][ T8776] syz_tun: tun_net_xmit 42 [ 359.572003][ T8776] syz_tun: tun_net_xmit 42 [ 359.589997][ T8776] syz_tun: tun_net_xmit 42 [ 359.596949][ T8776] syz_tun: tun_net_xmit 42 [ 359.624480][ T8776] syz_tun: tun_net_xmit 42 [ 359.634858][ T5111] Bluetooth: hci1: command tx timeout [ 359.646076][ T8776] syz_tun: tun_net_xmit 42 [ 359.659012][ T8776] syz_tun: tun_net_xmit 42 [ 359.671396][ T8776] syz_tun: tun_net_xmit 42 [ 359.680236][ T8776] syz_tun: tun_net_xmit 42 [ 359.686583][ T8776] syz_tun: tun_net_xmit 42 [ 359.691390][ T8776] syz_tun: tun_net_xmit 42 [ 359.697184][ T8776] syz_tun: tun_net_xmit 42 [ 359.702182][ T8776] syz_tun: tun_net_xmit 42 [ 359.707192][ T8776] syz_tun: tun_net_xmit 42 [ 359.712179][ T8776] syz_tun: tun_net_xmit 42 [ 359.719031][ T8776] syz_tun: tun_net_xmit 42 [ 359.729256][ T8776] syz_tun: tun_net_xmit 42 [ 359.734223][ T8776] syz_tun: tun_net_xmit 42 [ 359.741187][ T8776] syz_tun: tun_net_xmit 42 [ 359.751603][ T8776] syz_tun: tun_net_xmit 42 [ 359.765712][ T8776] syz_tun: tun_net_xmit 42 [ 359.772620][ T8776] syz_tun: tun_net_xmit 42 [ 359.788394][ T8776] syz_tun: tun_net_xmit 42 [ 359.810166][ T8776] syz_tun: tun_net_xmit 42 [ 359.832081][ T8776] syz_tun: tun_net_xmit 42 [ 359.853066][ T8776] syz_tun: tun_net_xmit 42 [ 359.887626][ T8776] syz_tun: tun_net_xmit 42 [ 359.892194][ T8776] syz_tun: tun_net_xmit 42 [ 359.902986][ T8776] syz_tun: tun_net_xmit 42 [ 359.913140][ T8776] syz_tun: tun_net_xmit 42 [ 359.928677][ T8776] syz_tun: tun_net_xmit 42 [ 359.933230][ T8776] syz_tun: tun_net_xmit 42 [ 359.951407][ T8776] syz_tun: tun_net_xmit 42 [ 359.963482][ T29] audit: type=1400 audit(1717964519.548:667): avc: denied { setattr } for pid=8921 comm="syz-executor.3" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 360.000990][ T8776] syz_tun: tun_net_xmit 42 [ 360.023044][ T8776] syz_tun: tun_net_xmit 42 [ 360.044410][ T8776] syz_tun: tun_net_xmit 42 [ 360.049008][ T8776] syz_tun: tun_net_xmit 42 [ 360.053544][ T8776] syz_tun: tun_net_xmit 42 [ 360.081627][ T29] audit: type=1400 audit(1717964519.628:668): avc: denied { remove_name } for pid=8894 comm="syz-executor.0" name="file2" dev="loop0" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.104517][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.142843][ T8776] syz_tun: tun_net_xmit 42 [ 360.155002][ T8776] syz_tun: tun_net_xmit 42 [ 360.172176][ T29] audit: type=1400 audit(1717964519.658:669): avc: denied { unlink } for pid=8894 comm="syz-executor.0" name="file2" dev="loop0" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 360.212339][ T8776] syz_tun: tun_net_xmit 42 [ 360.227443][ T8776] syz_tun: tun_net_xmit 42 [ 360.253043][ T29] audit: type=1400 audit(1717964519.798:670): avc: denied { rename } for pid=8894 comm="syz-executor.0" name="file1" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 360.297717][ T8776] syz_tun: tun_net_xmit 42 [ 360.324237][ T8776] syz_tun: tun_net_xmit 42 [ 360.326758][ T29] audit: type=1400 audit(1717964519.798:671): avc: denied { unlink } for pid=8894 comm="syz-executor.0" name="file2" dev="loop0" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 360.351071][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.387106][ T8776] syz_tun: tun_net_xmit 42 [ 360.391676][ T8776] syz_tun: tun_net_xmit 42 [ 360.457674][ T8776] syz_tun: tun_net_xmit 42 [ 360.462255][ T8776] syz_tun: tun_net_xmit 42 [ 360.488082][ T8776] syz_tun: tun_net_xmit 42 [ 360.534117][ T8776] syz_tun: tun_net_xmit 42 [ 360.555073][ T8776] syz_tun: tun_net_xmit 42 [ 360.568233][ T8776] syz_tun: tun_net_xmit 42 [ 360.620342][ T8776] syz_tun: tun_net_xmit 42 [ 360.683515][ T8776] syz_tun: tun_net_xmit 42 [ 360.726430][ T8776] syz_tun: tun_net_xmit 42 [ 360.743311][ T8776] syz_tun: tun_net_xmit 42 [ 360.760943][ T8776] syz_tun: tun_net_xmit 42 [ 360.780294][ T8776] syz_tun: tun_net_xmit 42 [ 360.793650][ T8776] syz_tun: tun_net_xmit 42 [ 360.804340][ T6122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.829379][ T5091] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 360.842623][ T5091] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 360.878390][ T6122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.888210][ T8776] syz_tun: tun_net_xmit 42 [ 360.888848][ T5091] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 360.917319][ T6122] bond0 (unregistering): Released all slaves [ 360.947715][ T8776] syz_tun: tun_net_xmit 42 [ 360.952973][ T8776] syz_tun: tun_net_xmit 42 [ 361.029600][ T8776] syz_tun: tun_net_xmit 42 [ 361.127192][ T8776] syz_tun: tun_net_xmit 42 [ 361.137990][ T8776] syz_tun: tun_net_xmit 42 [ 361.236156][ T8776] syz_tun: tun_net_xmit 42 [ 361.267044][ T8936] binder: 8935:8936 unknown command 0 [ 361.299521][ T8936] binder: 8935:8936 ioctl c0306201 20000640 returned -22 [ 361.321276][ T8776] syz_tun: tun_net_xmit 42 [ 361.333471][ T8776] syz_tun: tun_net_xmit 42 [ 361.344710][ T8776] syz_tun: tun_net_xmit 42 [ 361.358359][ T8776] syz_tun: tun_net_xmit 42 [ 361.382952][ T8776] syz_tun: tun_net_xmit 42 [ 361.407619][ T8776] syz_tun: tun_net_xmit 42 [ 361.412847][ T8776] syz_tun: tun_net_xmit 42 [ 361.428633][ T8776] syz_tun: tun_net_xmit 42 [ 361.439675][ T8776] syz_tun: tun_net_xmit 42 [ 361.457320][ T8776] syz_tun: tun_net_xmit 42 [ 361.476562][ T8776] syz_tun: tun_net_xmit 42 [ 361.496113][ T8776] syz_tun: tun_net_xmit 42 [ 361.506921][ T8776] syz_tun: tun_net_xmit 42 [ 361.511472][ T8776] syz_tun: tun_net_xmit 42 [ 361.566690][ T8776] syz_tun: tun_net_xmit 42 [ 361.571253][ T8776] syz_tun: tun_net_xmit 42 [ 361.611236][ T8776] syz_tun: tun_net_xmit 42 [ 361.631457][ T8776] syz_tun: tun_net_xmit 42 [ 361.662023][ T8776] syz_tun: tun_net_xmit 42 [ 361.688234][ T8776] syz_tun: tun_net_xmit 42 [ 361.692819][ T8776] syz_tun: tun_net_xmit 42 [ 361.714292][ T5111] Bluetooth: hci1: command tx timeout [ 361.725586][ T8776] syz_tun: tun_net_xmit 42 [ 361.747976][ T8776] syz_tun: tun_net_xmit 42 [ 361.772582][ T8776] syz_tun: tun_net_xmit 42 [ 361.783114][ T8776] syz_tun: tun_net_xmit 42 [ 361.802245][ T8776] syz_tun: tun_net_xmit 42 [ 361.822542][ T8776] syz_tun: tun_net_xmit 42 [ 361.831598][ T8776] syz_tun: tun_net_xmit 42 [ 361.845149][ T8776] syz_tun: tun_net_xmit 42 [ 361.849822][ T8776] syz_tun: tun_net_xmit 42 [ 361.862558][ T8776] syz_tun: tun_net_xmit 42 [ 361.897860][ T8776] syz_tun: tun_net_xmit 42 [ 361.924783][ T8776] syz_tun: tun_net_xmit 42 [ 361.944131][ T8776] syz_tun: tun_net_xmit 42 [ 361.957130][ T8776] syz_tun: tun_net_xmit 42 [ 361.967356][ T8776] syz_tun: tun_net_xmit 42 [ 361.984655][ T8776] syz_tun: tun_net_xmit 42 [ 361.989209][ T8776] syz_tun: tun_net_xmit 42 [ 361.993748][ T8776] syz_tun: tun_net_xmit 42 [ 362.009955][ T8776] syz_tun: tun_net_xmit 42 [ 362.024392][ T6122] hsr_slave_0: left promiscuous mode [ 362.031562][ T8776] syz_tun: tun_net_xmit 42 [ 362.053585][ T8776] syz_tun: tun_net_xmit 42 [ 362.059464][ T8776] syz_tun: tun_net_xmit 42 [ 362.080174][ T8776] syz_tun: tun_net_xmit 42 [ 362.085121][ T6122] hsr_slave_1: left promiscuous mode [ 362.105180][ T8776] syz_tun: tun_net_xmit 42 [ 362.115539][ T8776] syz_tun: tun_net_xmit 42 [ 362.125663][ T8776] syz_tun: tun_net_xmit 42 [ 362.138889][ T8776] syz_tun: tun_net_xmit 42 [ 362.143514][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.154651][ T8776] syz_tun: tun_net_xmit 42 [ 362.164320][ T8776] syz_tun: tun_net_xmit 42 [ 362.168850][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.183694][ T8776] syz_tun: tun_net_xmit 42 [ 362.188591][ T8776] syz_tun: tun_net_xmit 42 [ 362.200601][ T8776] syz_tun: tun_net_xmit 42 [ 362.207054][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.217158][ T8776] syz_tun: tun_net_xmit 42 [ 362.221804][ T8776] syz_tun: tun_net_xmit 42 [ 362.233983][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.243310][ T8776] syz_tun: tun_net_xmit 42 [ 362.254529][ T8776] syz_tun: tun_net_xmit 42 [ 362.261335][ T8776] syz_tun: tun_net_xmit 42 [ 362.275389][ T8776] syz_tun: tun_net_xmit 42 [ 362.295191][ T8776] syz_tun: tun_net_xmit 42 [ 362.305906][ T8776] syz_tun: tun_net_xmit 42 [ 362.316783][ T8776] syz_tun: tun_net_xmit 42 [ 362.334739][ T8776] syz_tun: tun_net_xmit 42 [ 362.340498][ T6122] veth1_macvtap: left promiscuous mode [ 362.346567][ T6122] veth0_macvtap: left promiscuous mode [ 362.349019][ T8776] syz_tun: tun_net_xmit 42 [ 362.352293][ T6122] veth1_vlan: left promiscuous mode [ 362.370049][ T6122] veth0_vlan: left promiscuous mode [ 362.374760][ T8949] loop3: detected capacity change from 0 to 2048 [ 362.382330][ T8776] syz_tun: tun_net_xmit 42 [ 362.401614][ T8951] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.413185][ T8776] syz_tun: tun_net_xmit 42 [ 362.425881][ T8776] syz_tun: tun_net_xmit 42 [ 362.437499][ T8776] syz_tun: tun_net_xmit 42 [ 362.447913][ T8776] syz_tun: tun_net_xmit 42 [ 362.474273][ T29] audit: type=1804 audit(1717964522.048:672): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir397256541/syzkaller.p2d6oB/75/file2/file2" dev="loop3" ino=16 res=1 errno=0 [ 362.500251][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.508740][ T8776] syz_tun: tun_net_xmit 42 [ 362.513461][ T8776] syz_tun: tun_net_xmit 42 [ 362.523727][ T8949] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 362.535328][ T8776] syz_tun: tun_net_xmit 42 [ 362.537471][ T8949] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 362.564266][ T8776] syz_tun: tun_net_xmit 42 [ 362.564650][ T8949] Remounting filesystem read-only [ 362.581430][ T8949] syz-executor.3 (8949) used greatest stack depth: 21280 bytes left [ 362.588998][ T8776] syz_tun: tun_net_xmit 42 [ 362.600992][ T8776] syz_tun: tun_net_xmit 42 [ 362.616958][ T8776] syz_tun: tun_net_xmit 42 [ 362.625298][ T8776] syz_tun: tun_net_xmit 42 [ 362.641638][ T8776] syz_tun: tun_net_xmit 42 [ 362.667817][ T8776] syz_tun: tun_net_xmit 42 [ 362.675830][ T7838] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 362.686569][ T7838] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 362.691435][ T8776] syz_tun: tun_net_xmit 42 [ 362.706596][ T7838] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 362.722247][ T8776] syz_tun: tun_net_xmit 42 [ 362.724562][ T7838] NILFS (loop3): discard dirty block: blocknr=24, size=1024 [ 362.734483][ T8776] syz_tun: tun_net_xmit 42 [ 362.736434][ T7838] NILFS (loop3): discard dirty block: blocknr=25, size=1024 [ 362.746434][ T7838] NILFS (loop3): discard dirty block: blocknr=26, size=1024 [ 362.751221][ T8776] syz_tun: tun_net_xmit 42 [ 362.761218][ T7838] NILFS (loop3): discard dirty page: offset=4096, ino=16 [ 362.771337][ T8776] syz_tun: tun_net_xmit 42 [ 362.772068][ T7838] NILFS (loop3): discard dirty block: blocknr=27, size=1024 [ 362.804634][ T7838] NILFS (loop3): discard dirty block: blocknr=28, size=1024 [ 362.812171][ T8776] syz_tun: tun_net_xmit 42 [ 362.820425][ T8776] syz_tun: tun_net_xmit 42 [ 362.826423][ T7838] NILFS (loop3): discard dirty block: blocknr=29, size=1024 [ 362.830013][ T8776] syz_tun: tun_net_xmit 42 [ 362.840310][ T8776] syz_tun: tun_net_xmit 42 [ 362.845939][ T8776] syz_tun: tun_net_xmit 42 [ 362.850658][ T8776] syz_tun: tun_net_xmit 42 [ 362.855618][ T8776] syz_tun: tun_net_xmit 42 [ 362.859753][ T7838] NILFS (loop3): discard dirty block: blocknr=30, size=1024 [ 362.860373][ T8776] syz_tun: tun_net_xmit 42 [ 362.872166][ T8776] syz_tun: tun_net_xmit 42 [ 362.879749][ T8776] syz_tun: tun_net_xmit 42 [ 362.883814][ T7838] NILFS (loop3): discard dirty page: offset=8192, ino=16 [ 362.897066][ T8776] syz_tun: tun_net_xmit 42 [ 362.901893][ T8776] syz_tun: tun_net_xmit 42 [ 362.907010][ T8776] syz_tun: tun_net_xmit 42 [ 362.911687][ T8776] syz_tun: tun_net_xmit 42 [ 362.916551][ T7838] NILFS (loop3): discard dirty block: blocknr=31, size=1024 [ 362.936819][ T8776] syz_tun: tun_net_xmit 42 [ 362.943075][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 362.963770][ T8776] syz_tun: tun_net_xmit 42 [ 362.982294][ T8776] syz_tun: tun_net_xmit 42 [ 362.987081][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.020435][ T8776] syz_tun: tun_net_xmit 42 [ 363.664085][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.735511][ T8776] syz_tun: tun_net_xmit 42 [ 363.740124][ T8776] syz_tun: tun_net_xmit 42 [ 363.758395][ T8776] syz_tun: tun_net_xmit 42 [ 363.770198][ T8776] syz_tun: tun_net_xmit 42 [ 363.779398][ T8776] syz_tun: tun_net_xmit 42 [ 363.794196][ T5111] Bluetooth: hci1: command tx timeout [ 363.800699][ T7838] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 363.808340][ T8776] syz_tun: tun_net_xmit 42 [ 363.841275][ T7838] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 363.850640][ T8776] syz_tun: tun_net_xmit 42 [ 363.872122][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.881494][ T8776] syz_tun: tun_net_xmit 42 [ 363.897004][ T8776] syz_tun: tun_net_xmit 42 [ 363.901694][ T8776] syz_tun: tun_net_xmit 42 [ 363.906211][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.916144][ T8776] syz_tun: tun_net_xmit 42 [ 363.930879][ T8776] syz_tun: tun_net_xmit 42 [ 363.935513][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.945158][ T8776] syz_tun: tun_net_xmit 42 [ 363.961686][ T8776] syz_tun: tun_net_xmit 42 [ 363.970627][ T7838] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 363.990134][ T8776] syz_tun: tun_net_xmit 42 [ 364.002853][ T8776] syz_tun: tun_net_xmit 42 [ 364.007403][ T7838] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 364.016376][ T8776] syz_tun: tun_net_xmit 42 [ 364.020927][ T8776] syz_tun: tun_net_xmit 42 [ 364.026577][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.049937][ T8776] syz_tun: tun_net_xmit 42 [ 364.054504][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.063570][ T8776] syz_tun: tun_net_xmit 42 [ 364.068369][ T8776] syz_tun: tun_net_xmit 42 [ 364.073022][ T8776] syz_tun: tun_net_xmit 42 [ 364.077551][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.089245][ T8776] syz_tun: tun_net_xmit 42 [ 364.095247][ T8776] syz_tun: tun_net_xmit 42 [ 364.099807][ T8776] syz_tun: tun_net_xmit 42 [ 364.104814][ T7838] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 364.111517][ T7838] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 364.119532][ T8776] syz_tun: tun_net_xmit 42 [ 364.125898][ T8776] syz_tun: tun_net_xmit 42 [ 364.130360][ T7838] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 364.149021][ T8776] syz_tun: tun_net_xmit 42 [ 364.160177][ T8776] syz_tun: tun_net_xmit 42 [ 364.164729][ T7838] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 364.172062][ T7838] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 364.181758][ T8962] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 364.201306][ T8776] syz_tun: tun_net_xmit 42 [ 364.228861][ T8776] syz_tun: tun_net_xmit 42 [ 364.236276][ T8776] syz_tun: tun_net_xmit 42 [ 364.239281][ T8962] loop0: detected capacity change from 0 to 1024 [ 364.251191][ T8962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 364.254228][ T8776] syz_tun: tun_net_xmit 42 [ 364.287795][ T8776] syz_tun: tun_net_xmit 42 [ 364.303064][ T8962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.303388][ T8776] syz_tun: tun_net_xmit 42 [ 364.348529][ T8776] syz_tun: tun_net_xmit 42 [ 364.394280][ T8776] syz_tun: tun_net_xmit 42 [ 364.398866][ T8776] syz_tun: tun_net_xmit 42 [ 364.403408][ T8776] syz_tun: tun_net_xmit 42 [ 364.442018][ T8776] syz_tun: tun_net_xmit 42 [ 364.447114][ T8776] syz_tun: tun_net_xmit 42 [ 364.448704][ T6850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.473974][ T8776] syz_tun: tun_net_xmit 42 [ 364.491112][ T8776] syz_tun: tun_net_xmit 42 [ 364.518848][ T8776] syz_tun: tun_net_xmit 42 [ 364.542571][ T8776] syz_tun: tun_net_xmit 42 [ 364.558089][ T8776] syz_tun: tun_net_xmit 42 [ 364.558268][ T8776] syz_tun: tun_net_xmit 42 [ 364.558445][ T8776] syz_tun: tun_net_xmit 42 [ 364.558615][ T8776] syz_tun: tun_net_xmit 42 [ 364.558789][ T8776] syz_tun: tun_net_xmit 42 [ 364.568904][ T8776] syz_tun: tun_net_xmit 42 [ 364.569402][ T8776] syz_tun: tun_net_xmit 42 [ 364.569571][ T8776] syz_tun: tun_net_xmit 42 [ 364.570504][ T8776] syz_tun: tun_net_xmit 42 [ 364.570690][ T8776] syz_tun: tun_net_xmit 42 [ 364.570858][ T8776] syz_tun: tun_net_xmit 42 [ 364.571026][ T8776] syz_tun: tun_net_xmit 42 [ 364.571191][ T8776] syz_tun: tun_net_xmit 42 [ 364.571361][ T8776] syz_tun: tun_net_xmit 42 [ 364.571528][ T8776] syz_tun: tun_net_xmit 42 [ 364.571698][ T8776] syz_tun: tun_net_xmit 42 [ 364.571866][ T8776] syz_tun: tun_net_xmit 42 [ 364.572032][ T8776] syz_tun: tun_net_xmit 42 [ 364.572201][ T8776] syz_tun: tun_net_xmit 42 [ 364.572369][ T8776] syz_tun: tun_net_xmit 42 [ 364.572533][ T8776] syz_tun: tun_net_xmit 42 [ 364.572699][ T8776] syz_tun: tun_net_xmit 42 [ 364.572869][ T8776] syz_tun: tun_net_xmit 42 [ 364.573035][ T8776] syz_tun: tun_net_xmit 42 [ 364.573205][ T8776] syz_tun: tun_net_xmit 42 [ 364.573374][ T8776] syz_tun: tun_net_xmit 42 [ 364.573546][ T8776] syz_tun: tun_net_xmit 42 [ 364.573716][ T8776] syz_tun: tun_net_xmit 42 [ 364.573948][ T8776] syz_tun: tun_net_xmit 42 [ 364.578123][ T8776] syz_tun: tun_net_xmit 42 [ 364.578303][ T8776] syz_tun: tun_net_xmit 42 [ 364.578481][ T8776] syz_tun: tun_net_xmit 42 [ 364.578646][ T8776] syz_tun: tun_net_xmit 42 [ 364.578871][ T8776] syz_tun: tun_net_xmit 42 [ 364.580110][ T8776] syz_tun: tun_net_xmit 42 [ 364.580280][ T8776] syz_tun: tun_net_xmit 42 [ 364.580452][ T8776] syz_tun: tun_net_xmit 42 [ 364.580626][ T8776] syz_tun: tun_net_xmit 42 [ 364.580790][ T8776] syz_tun: tun_net_xmit 42 [ 364.580957][ T8776] syz_tun: tun_net_xmit 42 [ 364.581123][ T8776] syz_tun: tun_net_xmit 42 [ 364.581286][ T8776] syz_tun: tun_net_xmit 42 [ 364.581456][ T8776] syz_tun: tun_net_xmit 42 [ 364.581623][ T8776] syz_tun: tun_net_xmit 42 [ 364.581791][ T8776] syz_tun: tun_net_xmit 42 [ 364.581984][ T8776] syz_tun: tun_net_xmit 42 [ 364.582159][ T8776] syz_tun: tun_net_xmit 42 [ 364.582324][ T8776] syz_tun: tun_net_xmit 42 [ 364.582497][ T8776] syz_tun: tun_net_xmit 42 [ 364.582660][ T8776] syz_tun: tun_net_xmit 42 [ 364.582827][ T8776] syz_tun: tun_net_xmit 42 [ 364.582994][ T8776] syz_tun: tun_net_xmit 42 [ 364.583162][ T8776] syz_tun: tun_net_xmit 42 [ 364.583341][ T8776] syz_tun: tun_net_xmit 42 [ 364.583696][ T8776] syz_tun: tun_net_xmit 42 [ 364.583917][ T8776] syz_tun: tun_net_xmit 42 [ 364.591474][ T8776] syz_tun: tun_net_xmit 42 [ 364.762502][ T8968] loop3: detected capacity change from 0 to 256 [ 364.903561][ T8968] exfat: Unknown parameter 'fma' [ 364.974354][ T8776] syz_tun: tun_net_xmit 42 [ 365.005001][ T8776] syz_tun: tun_net_xmit 42 [ 365.027167][ T8776] syz_tun: tun_net_xmit 42 [ 365.041918][ T8776] syz_tun: tun_net_xmit 42 [ 365.053417][ T8776] syz_tun: tun_net_xmit 42 [ 365.081356][ T8776] syz_tun: tun_net_xmit 42 [ 365.086908][ T8776] syz_tun: tun_net_xmit 42 [ 365.109857][ T8776] syz_tun: tun_net_xmit 42 [ 365.133062][ T8776] syz_tun: tun_net_xmit 42 [ 365.142814][ T8776] syz_tun: tun_net_xmit 42 [ 365.184860][ T8776] syz_tun: tun_net_xmit 42 [ 365.189468][ T8776] syz_tun: tun_net_xmit 42 [ 365.205335][ T8776] syz_tun: tun_net_xmit 42 [ 365.259399][ T8776] syz_tun: tun_net_xmit 42 [ 365.274121][ T8776] syz_tun: tun_net_xmit 42 [ 365.281994][ T8776] syz_tun: tun_net_xmit 42 [ 365.312435][ T8776] syz_tun: tun_net_xmit 42 [ 365.340597][ T8776] syz_tun: tun_net_xmit 42 [ 365.387622][ T8776] syz_tun: tun_net_xmit 42 [ 365.394557][ T8776] syz_tun: tun_net_xmit 42 [ 365.414023][ T8776] syz_tun: tun_net_xmit 42 [ 365.422585][ T6122] team0 (unregistering): Port device team_slave_1 removed [ 365.432531][ T8776] syz_tun: tun_net_xmit 42 [ 365.438525][ T8776] syz_tun: tun_net_xmit 42 [ 365.449382][ T8776] syz_tun: tun_net_xmit 42 [ 365.468167][ T8776] syz_tun: tun_net_xmit 42 [ 365.472924][ T8776] syz_tun: tun_net_xmit 42 [ 365.480326][ T8776] syz_tun: tun_net_xmit 42 [ 365.489098][ T8776] syz_tun: tun_net_xmit 42 [ 365.495335][ T8776] syz_tun: tun_net_xmit 42 [ 365.500065][ T8776] syz_tun: tun_net_xmit 42 [ 365.504782][ T8776] syz_tun: tun_net_xmit 42 [ 365.509472][ T8776] syz_tun: tun_net_xmit 42 [ 365.514359][ T8776] syz_tun: tun_net_xmit 42 [ 365.519082][ T8776] syz_tun: tun_net_xmit 42 [ 365.523764][ T8776] syz_tun: tun_net_xmit 42 [ 365.528586][ T8776] syz_tun: tun_net_xmit 42 [ 365.533291][ T8776] syz_tun: tun_net_xmit 42 [ 365.540343][ T8776] syz_tun: tun_net_xmit 42 [ 365.549873][ T8776] syz_tun: tun_net_xmit 42 [ 365.568818][ T8776] syz_tun: tun_net_xmit 42 [ 365.574207][ T8776] syz_tun: tun_net_xmit 42 [ 365.580221][ T8776] syz_tun: tun_net_xmit 42 [ 365.600237][ T8776] syz_tun: tun_net_xmit 42 [ 365.607708][ T8776] syz_tun: tun_net_xmit 42 [ 365.612949][ T8776] syz_tun: tun_net_xmit 42 [ 365.617960][ T6122] team0 (unregistering): Port device team_slave_0 removed [ 365.625568][ T8776] syz_tun: tun_net_xmit 42 [ 365.635116][ T8776] syz_tun: tun_net_xmit 42 [ 365.682674][ T8776] syz_tun: tun_net_xmit 42 [ 365.691285][ T8776] syz_tun: tun_net_xmit 42 [ 365.714338][ T8776] syz_tun: tun_net_xmit 42 [ 365.735602][ T8776] syz_tun: tun_net_xmit 42 [ 365.740168][ T8776] syz_tun: tun_net_xmit 42 [ 365.754156][ T8776] syz_tun: tun_net_xmit 42 [ 365.764224][ T8776] syz_tun: tun_net_xmit 42 [ 365.768808][ T8776] syz_tun: tun_net_xmit 42 [ 365.773361][ T8776] syz_tun: tun_net_xmit 42 [ 365.810995][ T8776] syz_tun: tun_net_xmit 42 [ 365.840460][ T8776] syz_tun: tun_net_xmit 42 [ 365.845250][ T8776] syz_tun: tun_net_xmit 42 [ 365.849899][ T8776] syz_tun: tun_net_xmit 42 [ 365.855942][ T8776] syz_tun: tun_net_xmit 42 [ 365.860706][ T8776] syz_tun: tun_net_xmit 42 [ 365.877710][ T8776] syz_tun: tun_net_xmit 42 [ 365.883706][ T8776] syz_tun: tun_net_xmit 42 [ 365.884118][ T5111] Bluetooth: hci1: command tx timeout [ 365.898352][ T8776] syz_tun: tun_net_xmit 42 [ 365.903098][ T8776] syz_tun: tun_net_xmit 42 [ 365.907852][ T8776] syz_tun: tun_net_xmit 42 [ 365.912548][ T8776] syz_tun: tun_net_xmit 42 [ 365.917306][ T8776] syz_tun: tun_net_xmit 42 [ 365.942246][ T8776] syz_tun: tun_net_xmit 42 [ 365.966361][ T8776] syz_tun: tun_net_xmit 42 [ 365.979894][ T8776] syz_tun: tun_net_xmit 42 [ 366.008096][ T8776] syz_tun: tun_net_xmit 42 [ 366.019488][ T8776] syz_tun: tun_net_xmit 42 [ 366.047148][ T8776] syz_tun: tun_net_xmit 42 [ 366.058345][ T8776] syz_tun: tun_net_xmit 42 [ 366.086743][ T8776] syz_tun: tun_net_xmit 42 [ 366.099986][ T8776] syz_tun: tun_net_xmit 42 [ 366.123815][ T8776] syz_tun: tun_net_xmit 42 [ 366.158965][ T8776] syz_tun: tun_net_xmit 42 [ 366.168235][ T8776] syz_tun: tun_net_xmit 42 [ 366.196404][ T8776] syz_tun: tun_net_xmit 42 [ 366.201104][ T8776] syz_tun: tun_net_xmit 42 [ 366.211708][ T8776] syz_tun: tun_net_xmit 42 [ 366.230235][ T8776] syz_tun: tun_net_xmit 42 [ 366.238049][ T8776] syz_tun: tun_net_xmit 42 [ 366.253517][ T8776] syz_tun: tun_net_xmit 42 [ 366.263327][ T8776] syz_tun: tun_net_xmit 42 [ 366.278300][ T8776] syz_tun: tun_net_xmit 42 [ 366.283114][ T8776] syz_tun: tun_net_xmit 42 [ 366.288071][ T8776] syz_tun: tun_net_xmit 42 [ 366.297223][ T8776] syz_tun: tun_net_xmit 42 [ 366.302049][ T8776] syz_tun: tun_net_xmit 42 [ 366.314632][ T8776] syz_tun: tun_net_xmit 42 [ 366.319259][ T8776] syz_tun: tun_net_xmit 42 [ 366.327459][ T8776] syz_tun: tun_net_xmit 42 [ 366.351247][ T8776] syz_tun: tun_net_xmit 42 [ 366.356334][ T8776] syz_tun: tun_net_xmit 42 [ 366.367843][ T8776] syz_tun: tun_net_xmit 42 [ 366.379691][ T8776] syz_tun: tun_net_xmit 42 [ 366.384536][ T8776] syz_tun: tun_net_xmit 42 [ 366.405434][ T8776] syz_tun: tun_net_xmit 42 [ 366.411100][ T8776] syz_tun: tun_net_xmit 42 [ 366.414034][ T29] audit: type=1800 audit(1717964525.998:673): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 errno=0 [ 366.416079][ T8776] syz_tun: tun_net_xmit 42 [ 366.455249][ T8776] syz_tun: tun_net_xmit 42 [ 366.461287][ T8776] syz_tun: tun_net_xmit 42 [ 366.473391][ T8776] syz_tun: tun_net_xmit 42 [ 366.483423][ T8776] syz_tun: tun_net_xmit 42 [ 366.496532][ T8776] syz_tun: tun_net_xmit 42 [ 366.501300][ T8776] syz_tun: tun_net_xmit 42 [ 366.508397][ T8776] syz_tun: tun_net_xmit 42 [ 366.512970][ T8776] syz_tun: tun_net_xmit 42 [ 366.529547][ T8776] syz_tun: tun_net_xmit 42 [ 366.534305][ T8776] syz_tun: tun_net_xmit 42 [ 366.540780][ T8776] syz_tun: tun_net_xmit 42 [ 366.545766][ T8776] syz_tun: tun_net_xmit 42 [ 366.550441][ T8776] syz_tun: tun_net_xmit 42 [ 366.555266][ T8776] syz_tun: tun_net_xmit 42 [ 366.559955][ T8776] syz_tun: tun_net_xmit 42 [ 366.565371][ T8776] syz_tun: tun_net_xmit 42 [ 366.597713][ T8776] syz_tun: tun_net_xmit 42 [ 366.631484][ T8776] syz_tun: tun_net_xmit 42 [ 366.639223][ T8776] syz_tun: tun_net_xmit 42 [ 366.649766][ T8776] syz_tun: tun_net_xmit 42 [ 366.664293][ T8776] syz_tun: tun_net_xmit 42 [ 366.686450][ T8776] syz_tun: tun_net_xmit 42 [ 366.696247][ T8776] syz_tun: tun_net_xmit 42 [ 366.715883][ T8776] syz_tun: tun_net_xmit 42 [ 366.741218][ T8776] syz_tun: tun_net_xmit 42 [ 366.746315][ T8776] syz_tun: tun_net_xmit 42 [ 366.752261][ T8776] syz_tun: tun_net_xmit 42 [ 366.761521][ T8776] syz_tun: tun_net_xmit 42 [ 366.773200][ T8776] syz_tun: tun_net_xmit 42 [ 366.781454][ T8776] syz_tun: tun_net_xmit 42 [ 366.793294][ T8776] syz_tun: tun_net_xmit 42 [ 366.824354][ T8776] syz_tun: tun_net_xmit 42 [ 366.835618][ T8776] syz_tun: tun_net_xmit 42 [ 366.849263][ T8776] syz_tun: tun_net_xmit 42 [ 366.859631][ T8776] syz_tun: tun_net_xmit 42 [ 366.881396][ T8776] syz_tun: tun_net_xmit 42 [ 366.903950][ T8776] syz_tun: tun_net_xmit 42 [ 366.908635][ T8776] syz_tun: tun_net_xmit 42 [ 366.913209][ T8776] syz_tun: tun_net_xmit 42 [ 366.942234][ T8776] syz_tun: tun_net_xmit 42 [ 366.951873][ T8776] syz_tun: tun_net_xmit 42 [ 366.957840][ T8776] syz_tun: tun_net_xmit 42 [ 366.962571][ T8776] syz_tun: tun_net_xmit 42 [ 366.967644][ T8776] syz_tun: tun_net_xmit 42 [ 366.972387][ T8776] syz_tun: tun_net_xmit 42 [ 367.002426][ T8776] syz_tun: tun_net_xmit 42 [ 367.017772][ T8776] syz_tun: tun_net_xmit 42 [ 367.047784][ T8776] syz_tun: tun_net_xmit 42 [ 367.062775][ T8776] syz_tun: tun_net_xmit 42 [ 367.074334][ T8776] syz_tun: tun_net_xmit 42 [ 367.084377][ T8776] syz_tun: tun_net_xmit 42 [ 367.096104][ T8776] syz_tun: tun_net_xmit 42 [ 367.122009][ T8776] syz_tun: tun_net_xmit 42 [ 367.132909][ T8776] syz_tun: tun_net_xmit 42 [ 367.153349][ T8776] syz_tun: tun_net_xmit 42 [ 367.160308][ T8776] syz_tun: tun_net_xmit 42 [ 367.183668][ T8776] syz_tun: tun_net_xmit 42 [ 367.189268][ T8776] syz_tun: tun_net_xmit 42 [ 367.204226][ T8776] syz_tun: tun_net_xmit 42 [ 367.208815][ T8776] syz_tun: tun_net_xmit 42 [ 367.213417][ T8776] syz_tun: tun_net_xmit 42 [ 367.228811][ T8776] syz_tun: tun_net_xmit 42 [ 367.238108][ T8776] syz_tun: tun_net_xmit 42 [ 367.242861][ T8776] syz_tun: tun_net_xmit 42 [ 367.278872][ T8776] syz_tun: tun_net_xmit 42 [ 367.299256][ T8776] syz_tun: tun_net_xmit 42 [ 367.303897][ T8776] syz_tun: tun_net_xmit 42 [ 367.314345][ T8776] syz_tun: tun_net_xmit 42 [ 367.330746][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 367.338968][ T8776] syz_tun: tun_net_xmit 42 [ 367.352469][ T8776] syz_tun: tun_net_xmit 42 [ 367.364282][ T8776] syz_tun: tun_net_xmit 42 [ 367.394353][ T8776] syz_tun: tun_net_xmit 42 [ 367.426251][ T8776] syz_tun: tun_net_xmit 42 [ 367.443094][ T8776] syz_tun: tun_net_xmit 42 [ 367.464137][ T8776] syz_tun: tun_net_xmit 42 [ 367.468744][ T8776] syz_tun: tun_net_xmit 42 [ 367.473306][ T8776] syz_tun: tun_net_xmit 42 [ 367.519920][ T8776] syz_tun: tun_net_xmit 42 [ 367.536302][ T8776] syz_tun: tun_net_xmit 42 [ 367.540890][ T8776] syz_tun: tun_net_xmit 42 [ 367.559977][ T8776] syz_tun: tun_net_xmit 42 [ 367.571417][ T8776] syz_tun: tun_net_xmit 42 [ 367.586715][ T8776] syz_tun: tun_net_xmit 42 [ 367.783084][ T8986] loop1: detected capacity change from 0 to 1024 [ 367.817948][ T8986] hfsplus: unable to find HFS+ superblock [ 367.843239][ T8980] loop3: detected capacity change from 0 to 4096 [ 367.915710][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.924226][ T8989] loop0: detected capacity change from 0 to 2048 [ 367.956341][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.971985][ T8897] bridge_slave_0: entered allmulticast mode [ 367.999562][ T8897] bridge_slave_0: entered promiscuous mode [ 368.022317][ T8980] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 368.045488][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.052806][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.087033][ T8897] bridge_slave_1: entered allmulticast mode [ 368.107409][ T8897] bridge_slave_1: entered promiscuous mode [ 368.121079][ T8994] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.243449][ T29] audit: type=1326 audit(1717964527.828:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa1387cf69 code=0x0 [ 368.273055][ T29] audit: type=1804 audit(1717964527.858:675): pid=8989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2967018537/syzkaller.KfR1wN/160/file2/file2" dev="loop0" ino=16 res=1 errno=0 [ 368.326774][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.335212][ T8989] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 368.358471][ T8989] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16) [ 368.387466][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.390978][ T8989] Remounting filesystem read-only [ 368.429907][ T8999] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSRP.]L3 index 0 [ 368.473422][ T9001] loop3: detected capacity change from 0 to 64 [ 368.493179][ T6850] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 368.511897][ T9001] BFS-fs: bfs_fill_super(): Impossible last inode number 18874527 > 513 on loop3 [ 368.515028][ T6850] NILFS (loop0): discard dirty page: offset=0, ino=16 [ 368.538816][ T6850] NILFS (loop0): discard dirty block: blocknr=23, size=1024 [ 368.547219][ T6850] NILFS (loop0): discard dirty block: blocknr=24, size=1024 [ 368.567545][ T8897] team0: Port device team_slave_0 added [ 368.584731][ T8897] team0: Port device team_slave_1 added [ 368.600007][ T6850] NILFS (loop0): discard dirty block: blocknr=25, size=1024 [ 368.614682][ T6850] NILFS (loop0): discard dirty block: blocknr=26, size=1024 [ 368.622042][ T6850] NILFS (loop0): discard dirty page: offset=4096, ino=16 [ 368.663979][ T6850] NILFS (loop0): discard dirty block: blocknr=27, size=1024 [ 368.671364][ T6850] NILFS (loop0): discard dirty block: blocknr=28, size=1024 [ 368.681875][ T6850] NILFS (loop0): discard dirty block: blocknr=29, size=1024 [ 368.689599][ T6850] NILFS (loop0): discard dirty block: blocknr=30, size=1024 [ 368.697053][ T6850] NILFS (loop0): discard dirty page: offset=8192, ino=16 [ 368.704262][ T6850] NILFS (loop0): discard dirty block: blocknr=31, size=1024 [ 368.711574][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 368.765353][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.795357][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 368.805110][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.845234][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 368.875175][ T6850] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 368.882187][ T6850] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 368.904029][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.918633][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.925676][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.953089][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.739500][ T9007] loop3: detected capacity change from 0 to 8192 [ 369.788345][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 369.869198][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 369.921421][ T9007] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.953807][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 370.072271][ T6850] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 370.081960][ T9006] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 370.091327][ T9006] FAT-fs (loop3): Filesystem has been set read-only [ 370.098644][ T9006] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 370.107814][ T9006] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 370.111764][ T6850] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 370.141058][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 370.151064][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 370.163538][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 370.175572][ T6850] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 370.182377][ T6850] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 370.189846][ T6850] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 370.247309][ T6850] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 370.282249][ T6850] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 370.284536][ T8897] hsr_slave_0: entered promiscuous mode [ 370.319785][ T8897] hsr_slave_1: entered promiscuous mode [ 370.352245][ T8897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.368968][ T8897] Cannot create hsr debugfs directory [ 371.109914][ T9024] loop0: detected capacity change from 0 to 1764 [ 371.168488][ T9024] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 371.215099][ T9024] ISOFS: unable to read i-node block [ 371.220441][ T9024] isofs_fill_super: get root inode failed [ 372.620165][ T9037] loop1: detected capacity change from 0 to 2048 [ 372.688531][ T9038] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.695278][ T8897] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.774460][ T8897] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.809971][ T8897] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.851205][ T8897] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.879258][ T29] audit: type=1804 audit(1717964532.468:676): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir921928012/syzkaller.QLf6sH/225/file2/file2" dev="loop1" ino=16 res=1 errno=0 [ 372.905691][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.957746][ T9037] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 373.080474][ T9037] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 373.108281][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.125189][ T9037] Remounting filesystem read-only [ 373.218431][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.472129][ T9045] loop0: detected capacity change from 0 to 164 [ 373.602659][ T5325] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 373.621147][ T29] audit: type=1326 audit(1717964533.168:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 373.623373][ T5325] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 373.683920][ T29] audit: type=1326 audit(1717964533.168:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 373.716397][ T5325] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 373.770264][ T5325] NILFS (loop1): discard dirty block: blocknr=24, size=1024 [ 373.785998][ T29] audit: type=1326 audit(1717964533.168:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 373.797596][ T5325] NILFS (loop1): discard dirty block: blocknr=25, size=1024 [ 373.882037][ T5325] NILFS (loop1): discard dirty block: blocknr=26, size=1024 [ 373.898559][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.922330][ T5325] NILFS (loop1): discard dirty page: offset=4096, ino=16 [ 373.938598][ T29] audit: type=1326 audit(1717964533.168:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 374.039969][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.058156][ T29] audit: type=1326 audit(1717964533.168:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 374.104281][ T5325] NILFS (loop1): discard dirty block: blocknr=27, size=1024 [ 374.138636][ T29] audit: type=1326 audit(1717964533.168:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 374.140473][ T5325] NILFS (loop1): discard dirty block: blocknr=28, size=1024 [ 374.196682][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.203967][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.232773][ T29] audit: type=1326 audit(1717964533.178:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 374.246198][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.263823][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.266614][ T5325] NILFS (loop1): discard dirty block: blocknr=29, size=1024 [ 374.314916][ T5325] NILFS (loop1): discard dirty block: blocknr=30, size=1024 [ 374.322257][ T5325] NILFS (loop1): discard dirty page: offset=8192, ino=16 [ 374.380397][ T29] audit: type=1326 audit(1717964533.178:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 374.414578][ T5325] NILFS (loop1): discard dirty block: blocknr=31, size=1024 [ 374.421956][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.453944][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.472721][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.481961][ T29] audit: type=1326 audit(1717964533.178:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26fda7cf69 code=0x7ffc0000 [ 374.526413][ T5325] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 374.533399][ T5325] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 374.562911][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.608271][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.684410][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.736236][ T5325] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 374.742969][ T5325] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 374.804239][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.813153][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.877310][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 374.921419][ T5325] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 374.951706][ T5325] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 374.993902][ T5325] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 375.001243][ T5325] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 375.054881][ T5325] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 375.166693][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.179853][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.202869][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.292703][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.301823][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 375.338112][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.804093][ T9067] loop1: detected capacity change from 0 to 1024 [ 375.832227][ T9067] hfsplus: unable to find HFS+ superblock [ 375.872795][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.961019][ T9050] loop4: detected capacity change from 0 to 32768 [ 376.025233][ T9057] chnl_net:caif_netlink_parms(): no params data found [ 376.060554][ T9050] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 376.158194][ T9050] XFS (loop4): Ending clean mount [ 376.274548][ T7076] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 376.300043][ T8897] veth0_vlan: entered promiscuous mode [ 376.319744][ T8897] veth1_vlan: entered promiscuous mode [ 376.376123][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.394153][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.401465][ T9057] bridge_slave_0: entered allmulticast mode [ 376.425812][ T9057] bridge_slave_0: entered promiscuous mode [ 376.452509][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.460805][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.479897][ T9057] bridge_slave_1: entered allmulticast mode [ 376.499373][ T9057] bridge_slave_1: entered promiscuous mode [ 376.601388][ T9057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.621502][ T9057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.649474][ T8897] veth0_macvtap: entered promiscuous mode [ 376.683307][ T9057] team0: Port device team_slave_0 added [ 376.693420][ T9057] team0: Port device team_slave_1 added [ 376.717603][ T8897] veth1_macvtap: entered promiscuous mode [ 376.750358][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.757889][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.783806][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.790175][ T9057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.805861][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.812820][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.838722][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.850702][ T9057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.920004][ T9057] hsr_slave_0: entered promiscuous mode [ 376.931242][ T9057] hsr_slave_1: entered promiscuous mode [ 376.938971][ T9057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.947997][ T9057] Cannot create hsr debugfs directory [ 376.961612][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.000273][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.015184][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.036202][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.056942][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.091042][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.101298][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.122990][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.146475][ T9088] loop4: detected capacity change from 0 to 4096 [ 377.146498][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.149352][ T9091] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 377.182147][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.204588][ T9088] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 377.219860][ T9088] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 377.303440][ T9094] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 377.363286][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.396942][ T53] Bluetooth: hci4: command tx timeout [ 377.415415][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.444012][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.473998][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.483839][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.498473][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.516878][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.536871][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.563006][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.698888][ T8897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.727650][ T8897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.737851][ T8897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.749486][ T8897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.800270][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.831389][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.035666][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 378.035685][ T29] audit: type=1400 audit(1717964537.628:711): avc: denied { setattr } for pid=9103 comm="syz-executor.4" name="ptmx" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 378.312866][ T29] audit: type=1804 audit(1717964537.898:712): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir921928012/syzkaller.QLf6sH/230/.log" dev="sda1" ino=1954 res=1 errno=0 [ 378.329557][ T9112] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 378.375720][ T9057] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.486783][ T9107] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 378.649997][ T9057] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.791245][ T9107] loop1: detected capacity change from 0 to 1024 [ 378.871626][ T9057] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.891860][ T9107] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.950640][ T9119] loop4: detected capacity change from 0 to 4096 [ 378.973345][ T9107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 378.998328][ T9107] System zones: 0-1, 3-36 [ 379.010982][ T9119] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 379.026421][ T9107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.083003][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.092287][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.141831][ T9057] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.166335][ T9119] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 379.287515][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.341265][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.392265][ T5325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.474472][ T53] Bluetooth: hci4: command tx timeout [ 379.509042][ T6114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.544764][ T6114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.740862][ T6213] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 379.853908][ T29] audit: type=1800 audit(1717964539.408:713): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="/" dev="fuse" ino=1 res=0 errno=0 [ 379.900794][ T9057] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.911440][ T9128] loop0: detected capacity change from 0 to 4096 [ 379.923734][ T9057] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.935512][ T9128] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 379.950542][ T9057] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.959371][ T9128] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 379.973690][ T9057] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.005592][ T9133] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.203092][ T6213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.333746][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 380.350476][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.546210][ T6213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.835520][ T6213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.929509][ T29] audit: type=1804 audit(1717964540.518:714): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3645738232/syzkaller.pXfq0L/187/.log" dev="sda1" ino=1938 res=1 errno=0 [ 381.045753][ T6213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.152697][ T9147] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 381.218410][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.271643][ T9148] loop4: detected capacity change from 0 to 1024 [ 381.303771][ T9057] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.353393][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.387192][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.394439][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.446796][ T9148] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 381.489973][ T9148] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 381.490073][ T9148] System zones: 0-1, 3-36 [ 381.492300][ T9148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.561682][ T53] Bluetooth: hci4: command tx timeout [ 381.615587][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.615829][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.980383][ T6213] bridge_slave_1: left allmulticast mode [ 381.980409][ T6213] bridge_slave_1: left promiscuous mode [ 381.980647][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.986505][ T6213] bridge_slave_0: left allmulticast mode [ 381.986522][ T6213] bridge_slave_0: left promiscuous mode [ 381.986666][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.027471][ T5111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.034341][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.054134][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.055920][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.056668][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 382.057036][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.086465][ T7076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.635645][ T9168] loop4: detected capacity change from 0 to 512 [ 382.698036][ T9168] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 382.698064][ T9168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 382.698436][ T9168] EXT4-fs (loop4): orphan cleanup on readonly fs [ 382.700949][ T9168] EXT4-fs warning (device loop4): ext4_block_to_path:105: block 3279949761 > max in inode 13 [ 382.701179][ T9168] EXT4-fs warning (device loop4): ext4_block_to_path:105: block 3279949762 > max in inode 13 [ 382.701958][ T9168] EXT4-fs (loop4): 1 truncate cleaned up [ 382.706334][ T9168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 382.743267][ T9168] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120 [ 382.743415][ T9168] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 382.755962][ T9168] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120 [ 382.859275][ T9168] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 382.945436][ T9168] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120 [ 382.948168][ T9168] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 382.953458][ T9168] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120 [ 382.953483][ T9168] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 382.954584][ T9168] EXT4-fs warning (device loop4): dx_probe:890: inode #2: comm syz-executor.4: dx entry: limit 65535 != root limit 120 [ 382.954607][ T9168] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 383.055203][ T7076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.478545][ T9174] loop1: detected capacity change from 0 to 4096 [ 383.488316][ T9174] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 383.511300][ T9174] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 383.549696][ T9177] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.644194][ T5111] Bluetooth: hci4: command tx timeout [ 383.772449][ T9179] loop4: detected capacity change from 0 to 256 [ 383.874781][ T6213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.893043][ T6213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.905629][ T6213] bond0 (unregistering): Released all slaves [ 384.116332][ T5111] Bluetooth: hci1: command tx timeout [ 384.429267][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.533511][ T6213] hsr_slave_0: left promiscuous mode [ 384.564939][ T6213] hsr_slave_1: left promiscuous mode [ 384.591608][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.617080][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.639492][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.671003][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.688738][ T29] audit: type=1400 audit(1717964544.278:715): avc: denied { read } for pid=9195 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 384.768599][ T6213] veth1_macvtap: left promiscuous mode [ 384.795923][ T6213] veth0_macvtap: left promiscuous mode [ 384.801887][ T6213] veth1_vlan: left promiscuous mode [ 384.807455][ T6213] veth0_vlan: left promiscuous mode [ 385.062621][ T9207] loop0: detected capacity change from 0 to 256 [ 386.284061][ T5111] Bluetooth: hci1: command tx timeout [ 386.932730][ T9221] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 387.625260][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.011838][ T6213] team0 (unregistering): Port device team_slave_1 removed [ 388.123482][ T6213] team0 (unregistering): Port device team_slave_0 removed [ 388.354704][ T5111] Bluetooth: hci1: command tx timeout [ 389.419850][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.434579][ T5111] Bluetooth: hci1: command tx timeout [ 390.654383][ T29] audit: type=1800 audit(1717964550.218:716): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1954 res=0 errno=0 [ 391.003677][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.235303][ T9057] veth0_vlan: entered promiscuous mode [ 391.278904][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 391.373431][ T9264] loop1: detected capacity change from 0 to 1024 [ 391.556319][ T9264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.604082][ T53] Bluetooth: hci5: sending frame failed (-49) [ 391.612378][ T5111] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 391.643523][ T9057] veth1_vlan: entered promiscuous mode [ 392.144850][ T5325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.231792][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.248479][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.265050][ T9163] bridge_slave_0: entered allmulticast mode [ 392.282515][ T9163] bridge_slave_0: entered promiscuous mode [ 392.375076][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.382351][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.414960][ T9163] bridge_slave_1: entered allmulticast mode [ 392.429056][ T9163] bridge_slave_1: entered promiscuous mode [ 392.616020][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.631912][ T9282] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 392.678285][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.703751][ T9284] loop0: detected capacity change from 0 to 512 [ 392.776880][ T9284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.791434][ T9284] ext4 filesystem being mounted at /root/syzkaller-testdir2967018537/syzkaller.KfR1wN/184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.886519][ T9291] loop4: detected capacity change from 0 to 4096 [ 392.896940][ T9291] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 392.911024][ T9057] veth0_macvtap: entered promiscuous mode [ 392.958145][ T9163] team0: Port device team_slave_0 added [ 392.988854][ T9163] team0: Port device team_slave_1 added [ 393.003207][ T9291] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 393.018162][ T9057] veth1_macvtap: entered promiscuous mode [ 393.053526][ T9291] ntfs3: loop4: Failed to load $Extend (-22). [ 393.083511][ T9291] ntfs3: loop4: Failed to initialize $Extend. [ 393.241357][ T29] audit: type=1804 audit(1717964552.768:717): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3645738232/syzkaller.pXfq0L/202/file0/bus" dev="loop4" ino=33 res=1 errno=0 [ 393.268152][ T29] audit: type=1400 audit(1717964552.778:718): avc: denied { ioctl } for pid=9290 comm="syz-executor.4" path="/root/syzkaller-testdir3645738232/syzkaller.pXfq0L/202/file0/bus" dev="loop4" ino=33 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 393.300889][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.336978][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.377142][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.459318][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.473327][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.499276][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.528318][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.630326][ T6850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.699824][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.715594][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.757739][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.788638][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.824013][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.834520][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.846913][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.871868][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.892978][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.932101][ T9163] hsr_slave_0: entered promiscuous mode [ 393.974785][ T9163] hsr_slave_1: entered promiscuous mode [ 393.997312][ T9163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.023564][ T9163] Cannot create hsr debugfs directory [ 394.065732][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.092047][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.109955][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.128043][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.143566][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.163456][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.186494][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.206815][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.251336][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.337374][ T9057] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.424215][ T9057] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.454364][ T9057] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.468108][ T9057] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.824943][ T9322] loop1: detected capacity change from 0 to 256 [ 397.242585][ T9322] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 397.734533][ T9323] loop0: detected capacity change from 0 to 4096 [ 397.758519][ T9323] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 397.834192][ T9325] syz_tun: tun_net_xmit 86 [ 397.834377][ T9323] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 397.859396][ T9323] ntfs3: loop0: Failed to load $Extend (-22). [ 397.866195][ T6094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.886647][ T6094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.901516][ T9323] ntfs3: loop0: Failed to initialize $Extend. [ 398.110946][ T29] audit: type=1804 audit(1717964557.698:719): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2967018537/syzkaller.KfR1wN/189/file0/bus" dev="loop0" ino=33 res=1 errno=0 [ 398.329824][ T6114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.363734][ T6114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.664707][ T9336] loop3: detected capacity change from 0 to 256 [ 398.721909][ T9336] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 398.747744][ T9336] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 398.833300][ T29] audit: type=1800 audit(1717964558.408:720): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="loop3" ino=1048834 res=0 errno=0 [ 398.834287][ C0] syz_tun: tun_net_xmit 86 [ 398.887299][ T9163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.942767][ T9163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 398.961963][ T9163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 399.009526][ T9163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 399.154865][ T29] audit: type=1400 audit(1717964558.698:721): avc: denied { mount } for pid=9345 comm="syz-executor.3" name="/" dev="hugetlbfs" ino=29786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 399.260266][ T29] audit: type=1400 audit(1717964558.708:722): avc: denied { remount } for pid=9345 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 399.354260][ T29] audit: type=1400 audit(1717964558.778:723): avc: denied { unmount } for pid=9057 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 399.874193][ C0] syz_tun: tun_net_xmit 86 [ 400.338994][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.365217][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.530530][ T29] audit: type=1800 audit(1717964560.028:724): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1943 res=0 errno=0 [ 401.135818][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.143085][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.368505][ T9363] loop3: detected capacity change from 0 to 64 [ 401.459077][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.466331][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.546133][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 401.557309][ T9366] bridge_slave_1: left allmulticast mode [ 401.573009][ T9366] bridge_slave_1: left promiscuous mode [ 401.597512][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.654390][ T9366] bridge_slave_0: left allmulticast mode [ 401.660087][ T9366] bridge_slave_0: left promiscuous mode [ 401.691042][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.146352][ T9383] binder_alloc: 9382: binder_alloc_buf size -208 failed, no address space [ 402.156645][ T9383] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 402.268938][ T9378] loop0: detected capacity change from 0 to 4096 [ 405.014070][ T29] audit: type=1800 audit(1717964563.748:725): pid=9405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1943 res=0 errno=0 [ 405.239707][ T9410] loop1: detected capacity change from 0 to 1024 [ 405.291936][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.370055][ T9163] veth0_vlan: entered promiscuous mode [ 405.487111][ T9163] veth1_vlan: entered promiscuous mode [ 405.585041][ T9163] veth0_macvtap: entered promiscuous mode [ 405.598780][ T9163] veth1_macvtap: entered promiscuous mode [ 405.631381][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.642445][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.652796][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.666300][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.111481][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.433959][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.500635][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.520671][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.530552][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.541059][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.553106][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.577918][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.607404][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.629589][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.649277][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.666067][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.693386][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.724653][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.749606][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.776497][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.801836][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.815270][ T9425] loop0: detected capacity change from 0 to 4096 [ 406.839931][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.859741][ T9425] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 406.912199][ T9163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.951928][ T9425] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 406.963923][ T9163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.979799][ T9425] ntfs3: loop0: Failed to load $Extend (-22). [ 407.002806][ T9163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.014620][ T9425] ntfs3: loop0: Failed to initialize $Extend. [ 407.030077][ T9163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.147750][ T9436] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 407.324412][ T29] audit: type=1804 audit(1717964566.908:726): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2967018537/syzkaller.KfR1wN/196/file0/bus" dev="loop0" ino=33 res=1 errno=0 [ 407.350934][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.699844][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.769366][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.782975][ T9442] binder_alloc: 9441: binder_alloc_buf size -208 failed, no address space [ 407.791689][ T9442] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 408.016051][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.044241][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.472294][ T9454] loop3: detected capacity change from 0 to 1024 [ 409.148629][ T9465] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 409.172038][ T9466] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.220625][ T25] IPVS: starting estimator thread 0... [ 409.311092][ T9462] loop0: detected capacity change from 0 to 8192 [ 409.339588][ T29] audit: type=1400 audit(1717964568.928:727): avc: denied { transfer } for pid=9467 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 409.364365][ T9471] IPVS: using max 27 ests per chain, 64800 per kthread [ 409.539287][ T29] audit: type=1400 audit(1717964569.128:728): avc: denied { unmount } for pid=6850 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 409.547734][ T9475] binder_alloc: 9474: binder_alloc_buf size -208 failed, no address space [ 409.568616][ T9475] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 409.672889][ T6094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.018019][ T6094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.436298][ T9488] netlink: 1304 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.639948][ T5144] libceph: connect (1)[c::]:6789 error -101 [ 411.291478][ T5144] libceph: mon0 (1)[c::]:6789 connect error [ 411.306879][ T5144] libceph: connect (1)[c::]:6789 error -101 [ 411.313142][ T5144] libceph: mon0 (1)[c::]:6789 connect error [ 411.319712][ T9485] ceph: No mds server is up or the cluster is laggy [ 411.382846][ T6094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.469710][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.688740][ T6094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.291756][ T6094] bridge_slave_1: left allmulticast mode [ 412.308378][ T6094] bridge_slave_1: left promiscuous mode [ 412.314374][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.421377][ T6094] bridge_slave_0: left allmulticast mode [ 412.442860][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.455242][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.484051][ T6094] bridge_slave_0: left promiscuous mode [ 412.495652][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.506664][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.509439][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.524375][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.533416][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.640788][ T9515] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.793082][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.812638][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.830723][ T6094] bond0 (unregistering): Released all slaves [ 414.316898][ T9526] binder_alloc: 9524: binder_alloc_buf size -208 failed, no address space [ 414.325732][ T9526] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 414.594206][ T53] Bluetooth: hci1: command tx timeout [ 414.790519][ T6094] hsr_slave_0: left promiscuous mode [ 414.843055][ T6094] hsr_slave_1: left promiscuous mode [ 414.901882][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.959282][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.998719][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.026526][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.164375][ T6094] veth1_macvtap: left promiscuous mode [ 415.186055][ T6094] veth0_macvtap: left promiscuous mode [ 415.219312][ T6094] veth1_vlan: left promiscuous mode [ 415.233770][ T6094] veth0_vlan: left promiscuous mode [ 415.242057][ T9540] loop4: detected capacity change from 0 to 64 [ 415.510238][ T9540] hfs: request for non-existent node 16777216 in B*Tree [ 415.629516][ T9540] hfs: request for non-existent node 16777216 in B*Tree [ 416.674368][ T53] Bluetooth: hci1: command tx timeout [ 417.860964][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 417.994688][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 418.812984][ T53] Bluetooth: hci1: command tx timeout [ 419.794288][ T5091] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 420.108869][ T9512] chnl_net:caif_netlink_parms(): no params data found [ 420.124004][ T5091] usb 2-1: Using ep0 maxpacket: 32 [ 420.156515][ T5091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.190528][ T5091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.219482][ T5091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 420.282101][ T29] audit: type=1400 audit(1717964579.868:729): avc: denied { execute } for pid=9576 comm="syz-executor.4" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 420.310301][ T5091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 420.347914][ T5091] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 420.396201][ T5091] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 420.405537][ T5091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.440994][ T5091] usb 2-1: config 0 descriptor?? [ 420.834105][ T53] Bluetooth: hci1: command tx timeout [ 420.880440][ T9512] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.928908][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.950925][ T5091] ntrig 0003:1B96:000A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 420.976482][ T9512] bridge_slave_0: entered allmulticast mode [ 421.016863][ T9512] bridge_slave_0: entered promiscuous mode [ 421.057279][ T9512] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.085302][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.111678][ T9512] bridge_slave_1: entered allmulticast mode [ 421.131603][ T9512] bridge_slave_1: entered promiscuous mode [ 421.279510][ T9593] loop3: detected capacity change from 0 to 64 [ 421.325350][ T9512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.356197][ T9512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.399974][ T9593] hfs: request for non-existent node 16777216 in B*Tree [ 421.454030][ T9593] hfs: request for non-existent node 16777216 in B*Tree [ 421.650513][ T9512] team0: Port device team_slave_0 added [ 421.689808][ T9512] team0: Port device team_slave_1 added [ 421.872778][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.916069][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.982502][ T9512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.011524][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.020525][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.110617][ T9512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.366174][ T9512] hsr_slave_0: entered promiscuous mode [ 422.372828][ T9512] hsr_slave_1: entered promiscuous mode [ 422.382967][ T9512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.394661][ T9512] Cannot create hsr debugfs directory [ 422.630885][ T9599] loop4: detected capacity change from 0 to 4096 [ 422.672553][ T9599] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 422.804700][ T9599] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 422.886767][ T9599] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 422.894593][ T9599] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 422.979360][ T29] audit: type=1400 audit(1717964582.568:730): avc: denied { create } for pid=9602 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 423.041037][ T7076] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 423.062401][ T29] audit: type=1400 audit(1717964582.648:731): avc: denied { write } for pid=9602 comm="syz-executor.0" name="file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 423.120545][ T5182] usb 2-1: USB disconnect, device number 3 [ 423.148654][ T29] audit: type=1400 audit(1717964582.648:732): avc: denied { open } for pid=9602 comm="syz-executor.0" path="/root/syzkaller-testdir2967018537/syzkaller.KfR1wN/211/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 423.244925][ T29] audit: type=1400 audit(1717964582.768:733): avc: denied { unlink } for pid=6850 comm="syz-executor.0" name="file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 423.813700][ T9512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 423.874180][ T9512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 423.922458][ T9512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 423.981267][ T9512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.019191][ T9623] loop4: detected capacity change from 0 to 2048 [ 424.149854][ T9623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.255080][ T784] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 424.267272][ T9512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.318600][ T9512] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.367433][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.374690][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.416975][ T9623] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 424.454522][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.461744][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.493979][ T9623] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4095 with max blocks 33 with error 28 [ 424.494137][ T784] usb 2-1: Using ep0 maxpacket: 32 [ 424.532002][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.553253][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.567920][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 424.581578][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 424.592106][ T9623] EXT4-fs (loop4): This should not happen!! Data will be lost [ 424.592106][ T9623] [ 424.602191][ T9623] EXT4-fs (loop4): Total free blocks count 0 [ 424.609886][ T9623] EXT4-fs (loop4): Free/Dirty block details [ 424.632150][ T784] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 424.644288][ T9623] EXT4-fs (loop4): free_blocks=2415919104 [ 424.657014][ T9512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.676752][ T5091] libceph: connect (1)[c::]:6789 error -101 [ 424.683024][ T5091] libceph: mon0 (1)[c::]:6789 connect error [ 424.688790][ T784] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 424.697601][ T9623] EXT4-fs (loop4): dirty_blocks=48 [ 424.708082][ T9623] EXT4-fs (loop4): Block reservation details [ 424.714763][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.732161][ T784] usb 2-1: config 0 descriptor?? [ 424.749777][ T9636] ceph: No mds server is up or the cluster is laggy [ 424.781414][ T9623] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 424.789672][ T9641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 424.962318][ T7076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.239459][ T784] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 425.276335][ T9512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.285090][ T9651] loop4: detected capacity change from 0 to 2048 [ 425.296623][ T9651] udf: Bad value for 'lastblock' [ 425.443234][ T9512] veth0_vlan: entered promiscuous mode [ 425.529424][ T9512] veth1_vlan: entered promiscuous mode [ 425.686956][ T9670] loop3: detected capacity change from 0 to 256 [ 425.720240][ T29] audit: type=1400 audit(1717964585.298:734): avc: denied { ioctl } for pid=9650 comm="syz-executor.4" path="socket:[31288]" dev="sockfs" ino=31288 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 425.744949][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.839664][ T9512] veth0_macvtap: entered promiscuous mode [ 425.867453][ T9512] veth1_macvtap: entered promiscuous mode [ 425.918391][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.976867][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.015111][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.038917][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.053181][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.065663][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.085660][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.110919][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.114989][ T9675] loop4: detected capacity change from 0 to 128 [ 426.135107][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.141848][ T9675] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 426.158312][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.197221][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.255470][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.285158][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.309069][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.343071][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.369053][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.397251][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.408644][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.425000][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.439963][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.452347][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.475861][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.519229][ T9512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.529894][ T9687] loop0: detected capacity change from 0 to 1024 [ 426.543294][ T9512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.578202][ T9512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.595512][ T9512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.897673][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.921802][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.004489][ T6094] hfsplus: b-tree write err: -5, ino 3 [ 427.028141][ T6850] hfsplus: node 4:3 still has 1 user(s)! [ 427.115574][ T6210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.151631][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 427.163054][ T6210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.164284][ T5091] libceph: connect (1)[c::]:6789 error -101 [ 427.177133][ T5091] libceph: mon0 (1)[c::]:6789 connect error [ 427.184401][ T9691] ceph: No mds server is up or the cluster is laggy [ 427.296104][ T9699] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.371263][ T784] usb 2-1: USB disconnect, device number 4 [ 427.703433][ T9711] loop3: detected capacity change from 0 to 128 [ 427.754341][ T9711] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 427.774564][ T9712] geneve2: entered promiscuous mode [ 427.786291][ T9712] geneve2: entered allmulticast mode [ 427.794631][ T9714] cgroup: fork rejected by pids controller in /syz1 [ 427.837519][ T29] audit: type=1400 audit(1717968682.431:735): avc: denied { map } for pid=9708 comm="syz-executor.3" path="socket:[31620]" dev="sockfs" ino=31620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 427.861175][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.926202][ T29] audit: type=1804 audit(1717968682.491:736): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3835810348/syzkaller.C5H6Br/35/file0/bus" dev="loop3" ino=115 res=1 errno=0 [ 427.952724][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.972955][ T29] audit: type=1800 audit(1717968682.491:737): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=115 res=0 errno=0 [ 427.994752][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.003790][ T29] audit: type=1804 audit(1717968682.551:738): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3835810348/syzkaller.C5H6Br/35/file0/bus" dev="loop3" ino=115 res=1 errno=0 [ 428.029905][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.277442][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 428.447411][ T9727] loop4: detected capacity change from 0 to 128 [ 428.457838][ T9727] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 428.583902][ T6094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.795294][ T6094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.010373][ T6094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.246963][ T6094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.536567][ T29] audit: type=1400 audit(1717972779.121:739): avc: denied { getopt } for pid=9740 comm="syz-executor.4" lport=51672 faddr=fc00:: fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 429.613047][ T5111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 429.622584][ T6094] bridge_slave_1: left allmulticast mode [ 429.622602][ T6094] bridge_slave_1: left promiscuous mode [ 429.622754][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.627182][ T6094] bridge_slave_0: left allmulticast mode [ 429.627200][ T6094] bridge_slave_0: left promiscuous mode [ 429.627346][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.631383][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 429.633327][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.636987][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 429.638526][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 429.638972][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.014359][ T9755] cgroup: fork rejected by pids controller in /syz3 [ 431.077041][ T9758] loop0: detected capacity change from 0 to 128 [ 431.239389][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.297193][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.316934][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.331970][ T6094] bond0 (unregistering): Released all slaves [ 431.339374][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.354140][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.363062][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.370939][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 431.379656][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.794980][ T5111] Bluetooth: hci1: command tx timeout [ 433.365537][ T6094] hsr_slave_0: left promiscuous mode [ 433.380611][ T9774] loop4: detected capacity change from 0 to 512 [ 433.398782][ T6094] hsr_slave_1: left promiscuous mode [ 433.410053][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.417981][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.433448][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.441105][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.478109][ T53] Bluetooth: hci2: command tx timeout [ 433.506650][ T9774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.564049][ T9774] ext4 filesystem being mounted at /root/syzkaller-testdir3645738232/syzkaller.pXfq0L/240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.639834][ T6094] veth1_macvtap: left promiscuous mode [ 433.649248][ T6094] veth0_macvtap: left promiscuous mode [ 433.684518][ T6094] veth1_vlan: left promiscuous mode [ 433.689928][ T6094] veth0_vlan: left promiscuous mode [ 433.727881][ T9774] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 433.786301][ T9774] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 433.813760][ T9774] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 433.847105][ T9774] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 433.875474][ T53] Bluetooth: hci1: command tx timeout [ 434.042546][ T7076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.196323][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.209736][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.218113][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.234494][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.242558][ T5111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 434.266578][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.836518][ T29] audit: type=1400 audit(1717972784.431:740): avc: denied { write } for pid=9785 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 435.566655][ T5111] Bluetooth: hci2: command tx timeout [ 435.683325][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 435.844353][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 435.954607][ T5111] Bluetooth: hci1: command tx timeout [ 436.354239][ T5111] Bluetooth: hci4: command tx timeout [ 436.759528][ T9798] loop4: detected capacity change from 0 to 1024 [ 436.814716][ T9798] hfsplus: request for non-existent node 3 in B*Tree [ 436.834249][ T9798] hfsplus: request for non-existent node 3 in B*Tree [ 437.814165][ T5111] Bluetooth: hci2: command tx timeout [ 438.094490][ T5111] Bluetooth: hci1: command tx timeout [ 438.434613][ T5111] Bluetooth: hci4: command tx timeout [ 438.546888][ T9806] cgroup: fork rejected by pids controller in /syz4 [ 439.876327][ T5111] Bluetooth: hci2: command tx timeout [ 440.520018][ T53] Bluetooth: hci4: command tx timeout [ 440.528027][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.534894][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.603986][ T53] Bluetooth: hci4: command tx timeout [ 464.518543][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.533728][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.542911][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.564620][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.574245][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 464.583702][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.003412][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 466.024043][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 466.034126][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 466.042570][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 466.052750][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 466.060317][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 466.674097][ T53] Bluetooth: hci0: command tx timeout [ 468.115666][ T53] Bluetooth: hci5: command tx timeout [ 468.763981][ T53] Bluetooth: hci0: command tx timeout [ 470.204034][ T53] Bluetooth: hci5: command tx timeout [ 470.834398][ T53] Bluetooth: hci0: command tx timeout [ 472.274099][ T53] Bluetooth: hci5: command tx timeout [ 472.920861][ T53] Bluetooth: hci0: command tx timeout [ 474.354218][ T53] Bluetooth: hci5: command tx timeout [ 494.498107][ T5111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 494.509047][ T5111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 494.518138][ T5111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 494.545219][ T5111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 494.554376][ T5111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 494.562751][ T5111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 495.834674][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 495.847064][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 495.857152][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 495.865651][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 495.884187][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 495.896577][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 496.674674][ T53] Bluetooth: hci6: command tx timeout [ 497.954236][ T53] Bluetooth: hci7: command tx timeout [ 498.694754][ T5111] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 498.708299][ T5111] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 498.724271][ T5111] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 498.733313][ T5111] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 498.743164][ T5111] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 498.750997][ T5111] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 498.758654][ T5112] Bluetooth: hci6: command tx timeout [ 500.035619][ T5111] Bluetooth: hci7: command tx timeout [ 500.834436][ T5111] Bluetooth: hci8: command tx timeout [ 500.843965][ T5111] Bluetooth: hci6: command tx timeout [ 501.973621][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.980021][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.113985][ T5111] Bluetooth: hci7: command tx timeout [ 502.914718][ T53] Bluetooth: hci8: command tx timeout [ 502.920485][ T5111] Bluetooth: hci6: command tx timeout [ 504.194291][ T5111] Bluetooth: hci7: command tx timeout [ 504.994213][ T5111] Bluetooth: hci8: command tx timeout [ 507.077733][ T5111] Bluetooth: hci8: command tx timeout [ 529.833172][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 529.854318][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 529.864571][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 529.873062][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 529.881083][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 529.889273][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 531.156669][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 531.174561][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 531.183192][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 531.193526][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 531.202304][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 531.217287][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 531.954054][ T5111] Bluetooth: hci9: command tx timeout [ 533.243924][ T5111] Bluetooth: hci10: command tx timeout [ 534.043917][ T5111] Bluetooth: hci9: command tx timeout [ 535.328814][ T5111] Bluetooth: hci10: command tx timeout [ 536.124068][ T5111] Bluetooth: hci9: command tx timeout [ 537.394322][ T5111] Bluetooth: hci10: command tx timeout [ 538.194239][ T5111] Bluetooth: hci9: command tx timeout [ 539.479181][ T5111] Bluetooth: hci10: command tx timeout [ 555.246157][ T5112] Bluetooth: hci2: command 0x0406 tx timeout [ 555.252239][ T5112] Bluetooth: hci1: command 0x0406 tx timeout [ 559.760242][ T5111] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 559.771123][ T5111] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 559.780794][ T5111] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 559.796420][ T5111] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 559.819628][ T5111] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 559.830802][ T5111] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 560.364120][ T5111] Bluetooth: hci4: command 0x0406 tx timeout [ 560.866960][ T5111] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 560.879581][ T5111] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 560.888197][ T5111] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 560.897243][ T5111] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 560.905338][ T5111] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 560.912926][ T5111] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 561.884144][ T5111] Bluetooth: hci11: command tx timeout [ 562.994325][ T5111] Bluetooth: hci12: command tx timeout [ 563.424827][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.431162][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.839446][ T9830] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 563.852249][ T9830] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 563.862290][ T9830] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 563.872942][ T9830] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 563.881101][ T9830] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 563.891209][ T9830] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 563.954251][ T5111] Bluetooth: hci11: command tx timeout [ 565.074405][ T5111] Bluetooth: hci12: command tx timeout [ 565.956155][ T5111] Bluetooth: hci13: command tx timeout [ 566.044112][ T5111] Bluetooth: hci11: command tx timeout [ 567.154147][ T5111] Bluetooth: hci12: command tx timeout [ 568.034181][ T5111] Bluetooth: hci13: command tx timeout [ 568.115385][ T5111] Bluetooth: hci11: command tx timeout [ 569.235888][ T5111] Bluetooth: hci12: command tx timeout [ 570.114085][ T5111] Bluetooth: hci13: command tx timeout [ 572.194186][ T5111] Bluetooth: hci13: command tx timeout [ 591.094017][ T9831] Bluetooth: hci0: command 0x0406 tx timeout [ 591.094028][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 592.834314][ T30] INFO: task kworker/u8:16:6094 blocked for more than 143 seconds. [ 592.842248][ T30] Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0 [ 592.863535][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.872389][ T30] task:kworker/u8:16 state:D stack:25200 pid:6094 tgid:6094 ppid:2 flags:0x00004000 2024/06/09 22:42:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 592.897390][ T30] Workqueue: netns cleanup_net [ 592.902746][ T30] Call Trace: [ 592.914027][ T30] [ 592.916992][ T30] __schedule+0xf15/0x5d00 [ 592.921490][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 592.938761][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 592.951280][ T30] ? poison_slab_object+0xf7/0x160 [ 592.956591][ T30] ? __pfx___schedule+0x10/0x10 [ 592.961473][ T30] ? schedule+0x298/0x350 [ 592.974000][ T30] ? __pfx_lock_release+0x10/0x10 [ 592.979069][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 592.983766][ T30] ? __mutex_trylock_common+0x78/0x250 [ 593.006489][ T30] schedule+0xe7/0x350 [ 593.010605][ T30] schedule_preempt_disabled+0x13/0x30 [ 593.023380][ T30] __mutex_lock+0x5b8/0x9c0 [ 593.028054][ T30] ? wg_destruct+0x22/0x3d0 [ 593.032585][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 593.050526][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 593.056629][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 593.061849][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 593.077654][ T30] ? wg_destruct+0x22/0x3d0 [ 593.082296][ T30] wg_destruct+0x22/0x3d0 [ 593.086869][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 593.093671][ T30] netdev_run_todo+0x775/0x1250 [ 593.112955][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 593.118449][ T30] ? mutex_is_locked+0x12/0x50 [ 593.123242][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 593.139557][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 593.149710][ T30] ? batadv_softif_destroy_vlan+0xf2/0x170 [ 593.158847][ T30] default_device_exit_batch+0x860/0xae0 [ 593.169413][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 593.181760][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 593.187454][ T30] ? __pfx___might_resched+0x10/0x10 [ 593.203890][ T30] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 593.209744][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 593.228693][ T30] ops_exit_list+0x128/0x180 [ 593.233328][ T30] cleanup_net+0x5b7/0xbf0 [ 593.243983][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 593.248974][ T30] process_one_work+0x9fb/0x1b60 [ 593.263403][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 593.272921][ T30] ? __pfx_process_one_work+0x10/0x10 [ 593.283929][ T30] ? assign_work+0x1a0/0x250 [ 593.288609][ T30] worker_thread+0x6c8/0xf70 [ 593.293226][ T30] ? __kthread_parkme+0x148/0x220 [ 593.309031][ T30] ? __pfx_worker_thread+0x10/0x10 [ 593.320786][ T30] kthread+0x2c1/0x3a0 [ 593.325101][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.330331][ T30] ? __pfx_kthread+0x10/0x10 [ 593.347576][ T30] ret_from_fork+0x45/0x80 [ 593.352069][ T30] ? __pfx_kthread+0x10/0x10 [ 593.356883][ T30] ret_from_fork_asm+0x1a/0x30 [ 593.361681][ T30] [ 593.377546][ T30] INFO: task syz-executor.4:7076 blocked for more than 143 seconds. [ 593.394338][ T30] Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0 [ 593.413895][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 593.422616][ T30] task:syz-executor.4 state:D stack:24000 pid:7076 tgid:7076 ppid:1 flags:0x00004002 [ 593.441521][ T30] Call Trace: [ 593.449126][ T30] [ 593.452116][ T30] __schedule+0xf15/0x5d00 [ 593.464100][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 593.469376][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 593.502842][ T30] ? __pfx___schedule+0x10/0x10 [ 593.513819][ T30] ? schedule+0x298/0x350 [ 593.518492][ T30] ? __pfx_lock_release+0x10/0x10 [ 593.523548][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 593.544084][ T30] ? __mutex_trylock_common+0x78/0x250 [ 593.549590][ T30] schedule+0xe7/0x350 [ 593.553712][ T30] schedule_preempt_disabled+0x13/0x30 [ 593.604319][ T30] __mutex_lock+0x5b8/0x9c0 [ 593.608889][ T30] ? tun_chr_close+0x3e/0x250 [ 593.613594][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 593.644351][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 593.649874][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 593.673200][ T30] ? tun_chr_close+0x3e/0x250 [ 593.681237][ T30] tun_chr_close+0x3e/0x250 [ 593.693997][ T30] __fput+0x408/0xbb0 [ 593.698039][ T30] task_work_run+0x14e/0x250 [ 593.702686][ T30] ? __pfx_task_work_run+0x10/0x10 [ 593.727072][ T30] do_exit+0xa9b/0x2ba0 [ 593.731282][ T30] ? do_group_exit+0x1c3/0x2a0 [ 593.753915][ T30] ? __pfx_lock_release+0x10/0x10 [ 593.758991][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 593.773899][ T30] ? __pfx_do_exit+0x10/0x10 [ 593.778541][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 593.794042][ T30] do_group_exit+0xd3/0x2a0 [ 593.798613][ T30] __x64_sys_exit_group+0x3e/0x50 [ 593.803694][ T30] do_syscall_64+0xcd/0x250 [ 593.823913][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.829859][ T30] RIP: 0033:0x7faa1387cf69 [ 593.853900][ T30] RSP: 002b:00007ffc6e0d16f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 593.862362][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faa1387cf69 [ 593.870447][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 593.878502][ T30] RBP: 00007faa138da72c R08: 00007ffc6e0cf496 R09: 0000000000000000 [ 593.887736][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 593.895780][ T30] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 593.903800][ T30] [ 593.906900][ T30] INFO: task syz-executor.1:9743 blocked for more than 144 seconds. [ 593.919404][ T30] Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0 [ 593.927108][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 593.935874][ T30] task:syz-executor.1 state:D stack:26160 pid:9743 tgid:9743 ppid:1 flags:0x00004006 [ 593.949222][ T30] Call Trace: [ 593.952574][ T30] [ 593.955656][ T30] __schedule+0xf15/0x5d00 [ 593.960108][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 593.965379][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 593.970636][ T30] ? __pfx___schedule+0x10/0x10 [ 593.975626][ T30] ? schedule+0x298/0x350 [ 593.979985][ T30] ? __pfx_lock_release+0x10/0x10 [ 593.994009][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 593.998739][ T30] ? __mutex_trylock_common+0x78/0x250 [ 594.014063][ T30] schedule+0xe7/0x350 [ 594.018218][ T30] schedule_preempt_disabled+0x13/0x30 [ 594.023707][ T30] __mutex_lock+0x5b8/0x9c0 [ 594.044004][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 594.049173][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 594.066685][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 594.071883][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 594.083914][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.089416][ T30] ? avc_has_perm+0x11b/0x1c0 [