last executing test programs: 37.271023327s ago: executing program 4: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 36.070646154s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000380)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x6) 36.010446382s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0x8}, 0x48) socketpair(0x28, 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x18c, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x33, 0x3, 0x0, 0x3500, 0x2}]}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x18c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)}, {&(0x7f00000000c0)}], 0x2}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 35.929413233s ago: executing program 4: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.855838043s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8844) pipe(0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x18, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x5, 0x0, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}}, 0x0) 35.300709008s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r2, 0x4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000240)={0x4010040c000, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 35.169899454s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 35.047220601s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 34.727257304s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x81, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002110, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0xa8, 0x0, 0xfbffffff, 0x0, 0xa8, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2b8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000002060508000000000000000000070000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000a8240007800c00028008000140000000010c0001800800014000000006080006400000001005000500020000000500010006"], 0x70}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005504000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) 33.873704986s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4b8, @mcast1, 0x3f}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x427, @mcast1, 0xd8}, @in={0x2, 0x4e21, @multicast2}], 0x68) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000240), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/80, 0x50}], 0x3, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40000001) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f0000000380)=[{}], 0x1, 0x1000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", @ANYRES32=0x0, @ANYRES32], 0xb8}}, 0x0) 33.663857397s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f20c0350d000000440f22c0c4e27d0f78780fb70a440f2041f2260f001e0f21480f001364450f01d1b9150b00000f32c4a38144df6f", 0x37}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@multicast, @multicast, @val={@val, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @remote, @dev, {[], @ndisc_ra}}}}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 33.288964435s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c04001a", @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000008"], 0x24d8}], 0x1}, 0x0) 33.288368971s ago: executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 33.012384663s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 32.923320261s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7d, &(0x7f0000000500)={r1}, 0x8) 32.864743405s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 32.511022944s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 31.71895349s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x4, 0x6, 0x80000000, 0x485, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) 31.651202324s ago: executing program 3: socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "26e02003c36aaafdac20585c7a1226d61a653b997d2a746804103aad200230442c3c927ef6d90c5e790539f0608e188164b1f98ccaed9e6418dc83a0ccef551a81a3ba60cb6f95a6201731e190ae8d57"}, 0xd8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000480)=0x1) write$binfmt_script(r2, &(0x7f00000002c0), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x8, 0xffffffff, 0x20, @remote, @remote, 0x7800, 0x7, 0x8001, 0xcf}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0x6e, 0x7, 0x1, 0x0, "71d82960753d6f1355e159faba4196d741a99ed71449d04fc48c7fac1cca6df5b67459474a36aff2a6eb39c325d6a801ec3144fb5918f48ab1208eddfe3e98da3e8798a73f7637e3b47a86906339b70b6b384c79fcf52fdd0d3acbccd53dcb63cd0c6fcfc9ff1a0b4df1"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a4"}]}], {0x14}}, 0xd8}}, 0x0) r4 = accept4$packet(r0, 0x0, &(0x7f00000000c0), 0x0) listen(r4, 0x80000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x800) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffc8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r6, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r6, &(0x7f0000000140)=@abs, 0x6e) 31.533421287s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0xffbffffffffffff8, 0x4000000}) 31.332963352s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.608729233s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f20c0350d000000440f22c0c4e27d0f78780fb70a440f2041f2260f001e0f21480f001364450f01d1b9150b00000f32c4a38144df6f", 0x37}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@multicast, @multicast, @val={@val, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @remote, @dev, {[], @ndisc_ra}}}}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30.387861508s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x1a, 0x0, 0x0, &(0x7f00000028c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000029c0)={0x5, 0x10, 0x0, 0xaa}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000002a40)=[{0x40, 0x0, 0xb, 0x9}, {0x2, 0x5, 0x5}], 0x10, 0x99d}, 0x90) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @rose, @bcast, @netrom, @default, @bcast, @null]}, &(0x7f00000000c0)=0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 30.236522615s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c04001a", @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000008"], 0x24d8}], 0x1}, 0x0) 30.03230116s ago: executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="cc", 0x1, 0x44887, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)='p', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/105, 0x69, 0x0, 0x0, 0x3d}, &(0x7f0000000280)=0x40) 5.815175748s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 1.287930069s ago: executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a0605d4290000001b0000000000000005000100070000000900020073797a300000000004000780"], 0x2c}}, 0x0) 339.21498ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 187.126031ms ago: executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) getgid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getuid() getuid() r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x24}], 0x1}, 0x0) 0s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[], 0xcc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r3, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x120}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 23) used greatest stack depth: 17880 bytes left [ 90.553762][ T5226] loop0: detected capacity change from 0 to 2048 [ 90.567650][ T5199] loop3: detected capacity change from 0 to 32768 [ 90.588608][ T5226] ======================================================= [ 90.588608][ T5226] WARNING: The mand mount option has been deprecated and [ 90.588608][ T5226] and is ignored by this kernel. Remove the mand [ 90.588608][ T5226] option from the mount to silence this warning. [ 90.588608][ T5226] ======================================================= [ 90.689941][ T5113] bcachefs (loop1): shutting down [ 90.695316][ T5113] bcachefs (loop1): going read-only [ 90.701692][ T5113] bcachefs (loop1): finished waiting for writes to stop [ 90.743444][ T5113] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 90.777379][ T5226] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 90.798774][ T5226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.816972][ T5113] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 90.829054][ T5235] loop4: detected capacity change from 0 to 256 [ 90.853743][ T5113] bcachefs (loop1): shutdown complete, journal seq 15 [ 90.894099][ T5235] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 90.917972][ T5113] bcachefs (loop1): marking filesystem clean [ 91.056963][ T5199] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 91.081112][ T5237] loop2: detected capacity change from 0 to 2048 [ 91.099764][ T5199] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 91.278748][ T5113] bcachefs (loop1): shutdown complete [ 91.291891][ T5237] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 8192 [ 91.530049][ T5237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.691274][ T5199] bcachefs (loop3): alloc_read... done [ 91.736776][ T5199] bcachefs (loop3): stripes_read... done [ 91.763403][ T5199] bcachefs (loop3): snapshots_read... done [ 91.824440][ T5199] bcachefs (loop3): going read-write [ 91.849365][ T5247] loop0: detected capacity change from 0 to 2048 [ 91.882170][ T5199] bcachefs (loop3): journal_replay... done [ 91.978655][ T5199] bcachefs (loop3): resume_logged_ops... done [ 92.024799][ T5247] loop0: p1 < > p3 [ 92.047911][ T5199] bcachefs (loop3): delete_dead_inodes... done [ 92.053882][ T5118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.067772][ T5199] bcachefs (loop3): bch2_copygc_start(): error creating copygc thread EINTR [ 92.090253][ T5249] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.110198][ T5247] loop0: p3 size 134217728 extends beyond EOD, truncated [ 92.145049][ T5199] bcachefs (loop3): error starting copygc thread [ 92.182934][ T5199] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 92.194597][ T5199] bcachefs (loop3): shutting down [ 92.217488][ T5199] bcachefs (loop3): going read-only [ 92.266589][ T5199] bcachefs (loop3): finished waiting for writes to stop [ 92.286735][ T5199] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 92.325296][ T5199] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 92.336322][ T5254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.377428][ T5199] bcachefs (loop3): shutdown complete, journal seq 12 [ 92.405916][ T5199] bcachefs (loop3): marking filesystem clean [ 92.427809][ T4535] loop0: p1 < > p3 [ 92.444908][ T4535] loop0: p3 size 134217728 extends beyond EOD, truncated [ 92.519853][ T5199] bcachefs (loop3): shutdown complete [ 92.828496][ T5265] loop4: detected capacity change from 0 to 2048 [ 92.836802][ T5267] loop0: detected capacity change from 0 to 256 [ 92.891750][ T5265] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.948988][ T5267] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 92.991421][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 93.074082][ T5271] udevd[5271]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 93.178747][ T5272] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 93.586315][ T5265] loop4: detected capacity change from 2048 to 0 [ 93.839354][ T5101] syz-executor.4: attempt to access beyond end of device [ 93.839354][ T5101] loop4: rw=0, sector=1345, nr_sectors = 1 limit=0 [ 93.924389][ T5101] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=1345, location=33 [ 93.960499][ T5101] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 93.991134][ T5101] syz-executor.4: attempt to access beyond end of device [ 93.991134][ T5101] loop4: rw=0, sector=1345, nr_sectors = 1 limit=0 [ 94.039828][ T5101] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=1345, location=33 [ 94.084727][ T5101] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 94.194312][ T5263] loop1: detected capacity change from 0 to 32768 [ 94.532319][ T5101] syz-executor.4: attempt to access beyond end of device [ 94.532319][ T5101] loop4: rw=2049, sector=128, nr_sectors = 1 limit=0 [ 94.565660][ T5101] Buffer I/O error on dev loop4, logical block 128, lost sync page write [ 94.992235][ T5286] loop3: detected capacity change from 0 to 2048 [ 95.091558][ T5286] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 95.140585][ T5286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.434662][ T5293] loop3: detected capacity change from 0 to 64 [ 95.511095][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 95.511115][ T29] audit: type=1326 audit(1718038193.609:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff76a87cf69 code=0x0 [ 95.591085][ T29] audit: type=1400 audit(1718038193.669:186): avc: denied { mount } for pid=5292 comm="syz-executor.3" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 95.717771][ T29] audit: type=1400 audit(1718038193.819:187): avc: denied { unmount } for pid=5110 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 95.861261][ T5284] loop0: detected capacity change from 0 to 32768 [ 95.932809][ T5296] loop3: detected capacity change from 0 to 2048 [ 95.995701][ T5296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.091964][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.102367][ T5296] loop3: detected capacity change from 2048 to 0 [ 96.110247][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.120970][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.128979][ T5305] syz-executor.3: attempt to access beyond end of device [ 96.128979][ T5305] loop3: rw=0, sector=1408, nr_sectors = 1 limit=0 [ 96.150058][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.160810][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.171946][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.204659][ T29] audit: type=1400 audit(1718038194.299:188): avc: denied { mounton } for pid=5303 comm="syz-executor.4" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 96.225339][ T5110] syz-executor.3: attempt to access beyond end of device [ 96.225339][ T5110] loop3: rw=0, sector=1408, nr_sectors = 1 limit=0 [ 96.254793][ T5110] syz-executor.3: attempt to access beyond end of device [ 96.254793][ T5110] loop3: rw=0, sector=1408, nr_sectors = 1 limit=0 [ 96.298124][ T5284] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 96.310282][ T5284] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 96.358627][ T5110] syz-executor.3: attempt to access beyond end of device [ 96.358627][ T5110] loop3: rw=2049, sector=128, nr_sectors = 1 limit=0 [ 96.392713][ T5110] Buffer I/O error on dev loop3, logical block 128, lost sync page write [ 96.399405][ T5284] bcachefs (loop0): alloc_read... done [ 96.414848][ T5284] bcachefs (loop0): stripes_read... done [ 96.420894][ T5284] bcachefs (loop0): snapshots_read... done [ 96.439118][ T5284] bcachefs (loop0): journal_replay... done [ 96.445181][ T5284] bcachefs (loop0): resume_logged_ops... done [ 96.451632][ T5284] bcachefs (loop0): going read-write [ 96.504988][ T5284] bcachefs (loop0): done starting filesystem [ 96.643778][ T5102] bcachefs (loop0): shutting down [ 96.649030][ T5102] bcachefs (loop0): going read-only [ 96.654288][ T5102] bcachefs (loop0): finished waiting for writes to stop [ 96.669679][ T5102] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 96.685413][ T5102] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 96.707071][ T4479] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 96.716182][ T4479] Bluetooth: hci3: Injecting HCI hardware error event [ 96.725477][ T5114] Bluetooth: hci3: hardware error 0x00 [ 96.738298][ T5102] bcachefs (loop0): shutdown complete, journal seq 14 [ 96.746190][ T5102] bcachefs (loop0): marking filesystem clean [ 96.884323][ T5102] bcachefs (loop0): shutdown complete [ 97.045468][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.194853][ T5317] loop2: detected capacity change from 0 to 2048 [ 97.256959][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.279604][ T5317] loop2: p1 < > p3 [ 97.318169][ T5303] chnl_net:caif_netlink_parms(): no params data found [ 97.320273][ T5317] loop2: p3 size 134217728 extends beyond EOD, truncated [ 97.433496][ T4535] loop2: p1 < > p3 [ 97.456993][ T4535] loop2: p3 size 134217728 extends beyond EOD, truncated [ 97.481774][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.747918][ T4535] loop2: p1 < > p3 [ 97.758552][ T4535] loop2: p3 size 134217728 extends beyond EOD, truncated [ 97.825842][ T5312] loop1: detected capacity change from 0 to 32768 [ 97.865350][ T5153] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.920178][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.932641][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.948889][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.972708][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.975181][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 97.980756][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 98.002265][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.010042][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.039875][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.064162][ T5325] loop2: detected capacity change from 0 to 2048 [ 98.082202][ T5325] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 98.119818][ T5325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.226772][ T4479] Bluetooth: hci0: command tx timeout [ 98.257775][ T5210] udevd[5210]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 98.294565][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.386202][ T5334] loop0: detected capacity change from 0 to 1764 [ 98.471409][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.482580][ T5312] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 98.535451][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.535907][ T5210] udevd[5210]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 98.553869][ T5303] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.564042][ T5303] bridge_slave_0: entered allmulticast mode [ 98.572181][ T5312] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 98.582246][ T5303] bridge_slave_0: entered promiscuous mode [ 98.680607][ T5312] bcachefs (loop1): alloc_read... done [ 98.697253][ T5312] bcachefs (loop1): stripes_read... done [ 98.719330][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.747399][ T5312] bcachefs (loop1): snapshots_read... done [ 98.774296][ T5303] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.809267][ T5312] bcachefs (loop1): going read-write [ 98.817709][ T5303] bridge_slave_1: entered allmulticast mode [ 98.825654][ T5303] bridge_slave_1: entered promiscuous mode [ 98.885481][ T5114] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 98.887840][ T5312] bcachefs (loop1): journal_replay... done [ 98.988088][ T5341] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 99.007764][ T5341] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 99.018404][ T29] audit: type=1400 audit(1718038197.099:189): avc: denied { create } for pid=5333 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.043998][ T5343] loop2: detected capacity change from 0 to 64 [ 99.062064][ T29] audit: type=1400 audit(1718038197.099:190): avc: denied { write } for pid=5333 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.106250][ T5312] bcachefs (loop1): resume_logged_ops... done [ 99.136097][ T5312] bcachefs (loop1): delete_dead_inodes... done [ 99.240381][ T5312] bcachefs (loop1): done starting filesystem [ 99.289695][ T5303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.385571][ T5303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.454115][ T5312] bcachefs (loop1): dirent to missing inode: [ 99.454115][ T5312] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 99.472461][ T5153] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 99.502194][ T9] bcachefs (loop1): going read-only [ 99.524129][ T9] bcachefs (loop1): finished waiting for writes to stop [ 99.560613][ T5312] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 11 [ 99.585398][ T9] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 99.612015][ T9] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 99.634973][ T29] audit: type=1400 audit(1718038197.729:191): avc: denied { create } for pid=5311 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.659111][ T29] audit: type=1400 audit(1718038197.729:192): avc: denied { associate } for pid=5311 comm="syz-executor.1" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.681905][ T29] audit: type=1400 audit(1718038197.749:193): avc: denied { search } for pid=4749 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.703185][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.723349][ T9] bcachefs (loop1): unshutdown complete, journal seq 11 [ 99.772561][ T9] bcachefs (loop1): done going read-only, filesystem not clean [ 99.804267][ T5303] team0: Port device team_slave_0 added [ 99.825393][ T5303] team0: Port device team_slave_1 added [ 99.833441][ T35] bridge_slave_1: left allmulticast mode [ 99.842077][ T35] bridge_slave_1: left promiscuous mode [ 99.878394][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.912684][ T5113] bcachefs (loop1): shutting down [ 99.948456][ T35] bridge_slave_0: left allmulticast mode [ 99.954140][ T35] bridge_slave_0: left promiscuous mode [ 99.988357][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.008577][ T5113] bcachefs (loop1): shutdown complete [ 100.073769][ T5114] Bluetooth: hci2: command tx timeout [ 100.312170][ T5114] Bluetooth: hci0: command tx timeout [ 100.455611][ T5355] loop2: detected capacity change from 0 to 32768 [ 100.798361][ T5355] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 100.825774][ T5355] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 100.915065][ T5355] bcachefs (loop2): alloc_read... done [ 100.926054][ T5355] bcachefs (loop2): stripes_read... done [ 100.937067][ T5355] bcachefs (loop2): snapshots_read... done [ 100.963804][ T5355] bcachefs (loop2): journal_replay... done [ 100.975324][ T5355] bcachefs (loop2): resume_logged_ops... done [ 100.983512][ T5355] bcachefs (loop2): going read-write [ 101.012485][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.022141][ T5355] bcachefs (loop2): done starting filesystem [ 101.050163][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.094488][ T35] bond0 (unregistering): Released all slaves [ 101.161818][ T5118] bcachefs (loop2): shutting down [ 101.187209][ T5118] bcachefs (loop2): going read-only [ 101.192456][ T5118] bcachefs (loop2): finished waiting for writes to stop [ 101.276079][ T5118] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 101.313020][ T5118] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 101.371117][ T5118] bcachefs (loop2): shutdown complete, journal seq 13 [ 101.379110][ T5118] bcachefs (loop2): marking filesystem clean [ 101.508849][ T5303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.516856][ T5303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.529190][ T5366] loop1: detected capacity change from 0 to 32768 [ 101.564008][ T5303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.589350][ T29] audit: type=1400 audit(1718038199.689:194): avc: denied { read } for pid=5374 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.620058][ T5118] bcachefs (loop2): shutdown complete [ 101.686032][ T29] audit: type=1400 audit(1718038199.719:195): avc: denied { open } for pid=5374 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.730398][ T29] audit: type=1400 audit(1718038199.719:196): avc: denied { getattr } for pid=5374 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.883456][ T5303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.906050][ T5303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.975296][ T5303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.992114][ T29] audit: type=1400 audit(1718038200.079:197): avc: denied { write } for pid=5371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.079054][ T29] audit: type=1400 audit(1718038200.089:198): avc: denied { add_name } for pid=5371 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.158803][ T5114] Bluetooth: hci2: command tx timeout [ 102.194388][ T5366] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 102.251719][ T5366] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 102.323082][ T29] audit: type=1400 audit(1718038200.419:199): avc: denied { remove_name } for pid=5394 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.386848][ T5114] Bluetooth: hci0: command tx timeout [ 102.427598][ T5366] bcachefs (loop1): alloc_read... done [ 102.433163][ T5366] bcachefs (loop1): stripes_read... done [ 102.460701][ T5366] bcachefs (loop1): snapshots_read... done [ 102.480491][ T5366] bcachefs (loop1): journal_replay... done [ 102.486406][ T5366] bcachefs (loop1): resume_logged_ops... done [ 102.495612][ T5366] bcachefs (loop1): going read-write [ 102.521011][ T5366] bcachefs (loop1): done starting filesystem [ 102.615727][ T5113] bcachefs (loop1): shutting down [ 102.645478][ T5113] bcachefs (loop1): going read-only [ 102.655269][ T5113] bcachefs (loop1): finished waiting for writes to stop [ 102.692604][ T5113] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 102.713596][ T5113] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 102.755583][ T5113] bcachefs (loop1): shutdown complete, journal seq 11 [ 102.798249][ T5113] bcachefs (loop1): marking filesystem clean [ 102.851245][ T5303] hsr_slave_0: entered promiscuous mode [ 102.884328][ T5113] bcachefs (loop1): shutdown complete [ 102.890554][ T5303] hsr_slave_1: entered promiscuous mode [ 102.894756][ T5410] loop0: detected capacity change from 0 to 64 [ 102.909289][ T5303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.934444][ T5303] Cannot create hsr debugfs directory [ 102.997812][ T35] hsr_slave_0: left promiscuous mode [ 103.008877][ T35] hsr_slave_1: left promiscuous mode [ 103.021099][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.041306][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.053234][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.061138][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.111726][ T35] veth1_macvtap: left promiscuous mode [ 103.125865][ T35] veth0_macvtap: left promiscuous mode [ 103.133344][ T35] veth1_vlan: left promiscuous mode [ 103.142431][ T35] veth0_vlan: left promiscuous mode [ 103.837446][ T5114] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 103.846758][ T5114] Bluetooth: hci1: Injecting HCI hardware error event [ 103.862108][ T5107] Bluetooth: hci1: hardware error 0x00 [ 103.984101][ T35] team0 (unregistering): Port device team_slave_1 removed [ 104.022777][ T35] team0 (unregistering): Port device team_slave_0 removed [ 104.227167][ T5114] Bluetooth: hci2: command tx timeout [ 104.467362][ T5114] Bluetooth: hci0: command tx timeout [ 104.480330][ T5321] chnl_net:caif_netlink_parms(): no params data found [ 104.698857][ T29] audit: type=1400 audit(1718038202.799:200): avc: denied { read } for pid=5426 comm="syz-executor.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.723549][ T5427] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.782888][ T29] audit: type=1400 audit(1718038202.799:201): avc: denied { open } for pid=5426 comm="syz-executor.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.813920][ T29] audit: type=1400 audit(1718038202.829:202): avc: denied { ioctl } for pid=5426 comm="syz-executor.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.911324][ T5107] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 106.021737][ T29] audit: type=1400 audit(1718038204.109:203): avc: denied { name_bind } for pid=5445 comm="syz-executor.1" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 106.024303][ C0] net_ratelimit: 2 callbacks suppressed [ 106.024319][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 106.119715][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.130553][ T5454] loop0: detected capacity change from 0 to 64 [ 106.138368][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.145624][ T5321] bridge_slave_0: entered allmulticast mode [ 106.188528][ T5321] bridge_slave_0: entered promiscuous mode [ 106.295211][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.307576][ T5107] Bluetooth: hci2: command tx timeout [ 106.336729][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.343998][ T5321] bridge_slave_1: entered allmulticast mode [ 106.353055][ T5321] bridge_slave_1: entered promiscuous mode [ 106.658906][ T5321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.837083][ T5321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.877764][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 106.877783][ T29] audit: type=1400 audit(1718038204.979:211): avc: denied { create } for pid=5440 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.976678][ T29] audit: type=1400 audit(1718038205.009:212): avc: denied { write } for pid=5440 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.078798][ T29] audit: type=1400 audit(1718038205.009:213): avc: denied { append } for pid=5440 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.128263][ T5321] team0: Port device team_slave_0 added [ 107.314383][ T5303] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.329525][ T29] audit: type=1400 audit(1718038205.419:214): avc: denied { unlink } for pid=5485 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.869621][ T5321] team0: Port device team_slave_1 added [ 108.376038][ T29] audit: type=1400 audit(1718038206.469:215): avc: denied { create } for pid=5492 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 108.469734][ T5303] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.523727][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.546827][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.624324][ T5321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.666827][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.673800][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.710296][ T5321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.722766][ T5499] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 108.742217][ T29] audit: type=1400 audit(1718038206.839:216): avc: denied { ioctl } for pid=5496 comm="syz-executor.2" path="socket:[8749]" dev="sockfs" ino=8749 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.795511][ T5303] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.023908][ T5481] loop1: detected capacity change from 0 to 40427 [ 109.035004][ T5303] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.114989][ T5481] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.135452][ T5504] loop0: detected capacity change from 0 to 2048 [ 109.160296][ T5321] hsr_slave_0: entered promiscuous mode [ 109.177867][ T5504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.200917][ T5321] hsr_slave_1: entered promiscuous mode [ 109.218895][ T5504] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 109.231048][ T5321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.242576][ T5321] Cannot create hsr debugfs directory [ 109.347412][ T5481] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.385248][ T29] audit: type=1400 audit(1718038207.479:217): avc: denied { write } for pid=5480 comm="syz-executor.1" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.480102][ T29] audit: type=1400 audit(1718038207.509:218): avc: denied { add_name } for pid=5480 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.569150][ T29] audit: type=1400 audit(1718038207.509:219): avc: denied { create } for pid=5480 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.599917][ T5113] syz-executor.1: attempt to access beyond end of device [ 109.599917][ T5113] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.633156][ T29] audit: type=1400 audit(1718038207.539:220): avc: denied { append open } for pid=5480 comm="syz-executor.1" path="/root/syzkaller-testdir3755836857/syzkaller.06msdl/12/file2/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.670194][ T5113] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.678481][ T5514] loop0: detected capacity change from 0 to 64 [ 109.948615][ T5303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.999416][ T5303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.048661][ T5303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.246605][ T5303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.202718][ T5303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.328131][ T5303] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.439172][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.446400][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.467455][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.475443][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.660553][ T5321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.710266][ T5547] loop1: detected capacity change from 0 to 2048 [ 111.751435][ T5321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.799326][ T5321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.813545][ T5547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.845110][ T5321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.863770][ T5547] UDF-fs: error (device loop1): udf_read_inode: (ino 1347) failed !bh [ 112.495348][ T5321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.624674][ T5321] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.709198][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.716619][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.808634][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.815858][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.896190][ T5303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.722992][ T5321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.064662][ T5303] veth0_vlan: entered promiscuous mode [ 114.120398][ T5321] veth0_vlan: entered promiscuous mode [ 114.225318][ T5321] veth1_vlan: entered promiscuous mode [ 114.275024][ T5303] veth1_vlan: entered promiscuous mode [ 114.342234][ T5560] loop1: detected capacity change from 0 to 40427 [ 114.435847][ T5560] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.507645][ T5303] veth0_macvtap: entered promiscuous mode [ 114.586082][ T5321] veth0_macvtap: entered promiscuous mode [ 114.642932][ T5303] veth1_macvtap: entered promiscuous mode [ 114.680617][ T5321] veth1_macvtap: entered promiscuous mode [ 114.701133][ T5560] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.755167][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.785039][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.818225][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.831793][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.842864][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.860548][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.875531][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.898494][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.924668][ T5113] syz-executor.1: attempt to access beyond end of device [ 114.924668][ T5113] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.941904][ T5303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.957578][ T5113] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 114.982876][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.049387][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.068794][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.083357][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.105274][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.123690][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.137703][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.154685][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.169723][ T5303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.204013][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.231928][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.253279][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.278558][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.300117][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.339284][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.393410][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.423826][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.482342][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.503940][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.538501][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.605944][ T5303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.642494][ T5303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.668793][ T5303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.696652][ T5303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.733217][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.773843][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.827011][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.894196][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.917563][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.928986][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.946909][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.962775][ T5621] loop0: detected capacity change from 0 to 2048 [ 115.971351][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.996508][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.035376][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.099336][ T5621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.109045][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.171094][ T5621] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 116.180329][ T5321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.203395][ T5321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.230559][ T5321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.279980][ T5321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.393405][ T5634] loop1: detected capacity change from 0 to 2048 [ 116.439247][ T5634] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 116.498438][ T5638] loop0: detected capacity change from 0 to 512 [ 116.507263][ T5634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.754837][ T5638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.778381][ T2464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.826663][ T2464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.828154][ T5638] ext4 filesystem being mounted at /root/syzkaller-testdir3052944033/syzkaller.gtKj1t/34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.991815][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.002870][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 117.002887][ T29] audit: type=1400 audit(1718038215.079:222): avc: denied { read } for pid=5636 comm="syz-executor.0" path="/root/syzkaller-testdir3052944033/syzkaller.gtKj1t/34/file1/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.047579][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.090730][ T5102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.213825][ T950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.233647][ T950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.455280][ T2464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.489883][ T2464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.783198][ T29] audit: type=1400 audit(1718038215.879:223): avc: denied { read } for pid=5659 comm="syz-executor.0" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.808788][ T29] audit: type=1400 audit(1718038215.879:224): avc: denied { open } for pid=5659 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.834610][ T29] audit: type=1400 audit(1718038215.909:225): avc: denied { read } for pid=5659 comm="syz-executor.0" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.859293][ T29] audit: type=1400 audit(1718038215.909:226): avc: denied { open } for pid=5659 comm="syz-executor.0" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.943758][ T29] audit: type=1326 audit(1718038216.039:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f526f47cf69 code=0x0 [ 118.236236][ T5644] loop2: detected capacity change from 0 to 32768 [ 118.286172][ T5644] jfs_lookup: iget failed on inum 32 [ 118.300559][ T5644] jfs_lookup: iget failed on inum 32 [ 118.761077][ T5647] loop1: detected capacity change from 0 to 40427 [ 118.869966][ T5647] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.233248][ T5647] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.309107][ T5668] loop3: detected capacity change from 0 to 32768 [ 119.419410][ T5113] syz-executor.1: attempt to access beyond end of device [ 119.419410][ T5113] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.439649][ T5699] loop4: detected capacity change from 0 to 2048 [ 119.464463][ T29] audit: type=1400 audit(1718038217.559:228): avc: denied { mount } for pid=5666 comm="syz-executor.3" name="/" dev="autofs" ino=9986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 119.494808][ T5113] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 119.563454][ T5704] loop0: detected capacity change from 0 to 2048 [ 119.612613][ T5699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.644226][ T5704] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 119.687889][ T5699] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 119.731542][ T5704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.845220][ T5710] loop2: detected capacity change from 0 to 1024 [ 120.011181][ T29] audit: type=1400 audit(1718038218.099:229): avc: denied { read } for pid=5707 comm="syz-executor.2" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.164614][ T29] audit: type=1400 audit(1718038218.109:230): avc: denied { open } for pid=5707 comm="syz-executor.2" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.189251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.190855][ T5717] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.294440][ T29] audit: type=1400 audit(1718038218.199:231): avc: denied { read write } for pid=5707 comm="syz-executor.2" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 120.306787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.850507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.026849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 121.217000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.256645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 121.862733][ T5746] loop0: detected capacity change from 0 to 2048 [ 121.906994][ T5107] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 121.916150][ T5107] Bluetooth: hci2: Injecting HCI hardware error event [ 121.924553][ T5107] Bluetooth: hci2: hardware error 0x00 [ 121.949632][ T5750] netlink: 'syz-executor.1': attribute type 298 has an invalid length. [ 121.971276][ T5746] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.132967][ T5746] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 122.354728][ T5753] loop4: detected capacity change from 0 to 2048 [ 122.441142][ T5753] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 122.500493][ T5753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.932523][ T5764] loop4: detected capacity change from 0 to 128 [ 123.008030][ T5736] loop3: detected capacity change from 0 to 40427 [ 123.018552][ T5764] FAT-fs (loop4): bogus logical sector size 0 [ 123.025077][ T5764] FAT-fs (loop4): Can't find a valid FAT filesystem [ 123.086399][ T5736] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.107794][ T5153] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 123.128116][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 123.128166][ T29] audit: type=1326 audit(1718038221.219:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd85b87cf69 code=0x0 [ 123.257673][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.257831][ T29] audit: type=1400 audit(1718038221.359:240): avc: denied { nlmsg_write } for pid=5763 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.436870][ T5736] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.544028][ T5786] loop1: detected capacity change from 0 to 2048 [ 123.557308][ T5783] loop2: detected capacity change from 0 to 2048 [ 123.571161][ T5786] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.582302][ T5321] syz-executor.3: attempt to access beyond end of device [ 123.582302][ T5321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.621200][ T5783] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.630835][ T5321] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 123.687984][ T5783] UDF-fs: error (device loop2): udf_read_inode: (ino 1347) failed !bh [ 123.984247][ T5790] loop1: detected capacity change from 0 to 2048 [ 123.986889][ T5107] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 124.083922][ T5790] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 124.123061][ T5790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.194125][ T29] audit: type=1400 audit(1718038222.269:241): avc: denied { create } for pid=5797 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.521780][ T5807] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 124.550372][ T5807] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.586141][ T5807] bridge0: port 3(gretap0) entered blocking state [ 124.604687][ T5807] bridge0: port 3(gretap0) entered disabled state [ 124.620288][ T5807] gretap0: entered allmulticast mode [ 124.646287][ T5807] gretap0: entered promiscuous mode [ 124.666273][ T5807] bridge0: port 3(gretap0) entered blocking state [ 124.673414][ T5807] bridge0: port 3(gretap0) entered forwarding state [ 124.797657][ T5811] loop0: detected capacity change from 0 to 128 [ 124.828116][ T5811] FAT-fs (loop0): bogus logical sector size 0 [ 124.850771][ T5811] FAT-fs (loop0): Can't find a valid FAT filesystem [ 124.924257][ T5153] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 124.995867][ T5815] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.006432][ T5815] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.015434][ T5815] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.024281][ T5815] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.127804][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.279880][ T5802] loop1: detected capacity change from 0 to 32768 [ 125.291189][ T950] bridge_slave_1: left allmulticast mode [ 125.306549][ T5817] loop4: detected capacity change from 0 to 2048 [ 125.315778][ T950] bridge_slave_1: left promiscuous mode [ 125.344997][ T950] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.373196][ T5817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.386206][ T29] audit: type=1400 audit(1718038223.479:242): avc: denied { connect } for pid=5824 comm="syz-executor.0" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.431456][ T950] bridge_slave_0: left allmulticast mode [ 125.436773][ T29] audit: type=1400 audit(1718038223.489:243): avc: denied { write } for pid=5824 comm="syz-executor.0" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.464646][ T29] audit: type=1326 audit(1718038223.519:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5818 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadd247cf69 code=0x0 [ 125.466672][ T950] bridge_slave_0: left promiscuous mode [ 125.487929][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.540506][ T29] audit: type=1804 audit(1718038223.619:245): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3202579957/syzkaller.eZOryS/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=1367 res=1 errno=0 [ 125.588445][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.588742][ T950] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.610008][ T5817] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 125.748126][ T29] audit: type=1400 audit(1718038223.639:246): avc: denied { setopt } for pid=5824 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.768043][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.842395][ T5841] loop3: detected capacity change from 0 to 128 [ 125.985129][ T5802] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 126.052573][ T5802] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 126.248180][ T5844] loop4: detected capacity change from 0 to 2048 [ 126.301803][ T5802] bcachefs (loop1): alloc_read... done [ 126.337077][ T5802] bcachefs (loop1): stripes_read... done [ 126.353208][ T5802] bcachefs (loop1): snapshots_read... done [ 126.353480][ T5844] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.383744][ T5847] loop2: detected capacity change from 0 to 512 [ 126.389774][ T5802] bcachefs (loop1): going read-write [ 126.422813][ T5844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.425965][ T5802] bcachefs (loop1): journal_replay... [ 126.505554][ T5847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.570496][ T5802] done [ 126.586702][ T5802] bcachefs (loop1): resume_logged_ops... done [ 126.601879][ T5847] ext4 filesystem being mounted at /root/syzkaller-testdir2587843924/syzkaller.mbgvtI/43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.625021][ T5802] bcachefs (loop1): delete_dead_inodes... done [ 126.636658][ T5802] bcachefs (loop1): done starting filesystem [ 126.718615][ T5802] bcachefs (loop1): dirent to missing inode: [ 126.718615][ T5802] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 126.758358][ T25] bcachefs (loop1): going read-only [ 126.763628][ T5802] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 11 [ 126.793627][ T25] bcachefs (loop1): finished waiting for writes to stop [ 126.835535][ T25] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 126.853191][ T5118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.862694][ T29] audit: type=1400 audit(1718038224.949:247): avc: denied { create } for pid=5801 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 126.876519][ T25] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 126.883106][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.963723][ T5113] bcachefs (loop1): shutting down [ 126.976974][ T25] bcachefs (loop1): unshutdown complete, journal seq 11 [ 127.014949][ T29] audit: type=1400 audit(1718038225.059:248): avc: denied { create } for pid=5866 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.018622][ T25] bcachefs (loop1): done going read-only, filesystem not clean [ 127.034596][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.188244][ T5113] bcachefs (loop1): shutdown complete [ 127.244009][ T5872] loop4: detected capacity change from 0 to 512 [ 127.330434][ T5872] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.386237][ T5872] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 127.465649][ T5872] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 127.495058][ T5872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 127.518371][ T5872] System zones: 0-2, 18-18, 34-34 [ 127.574576][ T5872] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 127.600109][ T950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.647275][ T950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.671613][ T5872] EXT4-fs (loop4): 1 truncate cleaned up [ 127.682674][ T5872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.718993][ T950] bond0 (unregistering): Released all slaves [ 127.786635][ T5862] netlink: 'syz-executor.0': attribute type 298 has an invalid length. [ 128.134979][ T5884] loop0: detected capacity change from 0 to 2048 [ 128.140228][ T5303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.211514][ T5884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.257001][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 128.257020][ T29] audit: type=1804 audit(1718038226.349:253): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3052944033/syzkaller.gtKj1t/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=1367 res=1 errno=0 [ 128.314781][ T5884] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 128.445981][ T5887] 8021q: VLANs not supported on ipvlan0 [ 128.516040][ T29] audit: type=1400 audit(1718038226.609:254): avc: denied { read } for pid=5885 comm="syz-executor.3" dev="sockfs" ino=10921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.610825][ T29] audit: type=1326 audit(1718038226.609:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526f47cf69 code=0x7ffc0000 [ 128.738430][ T5892] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.747351][ T5892] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.756148][ T5892] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.764957][ T5892] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.774159][ T29] audit: type=1326 audit(1718038226.629:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f526f47cf69 code=0x7ffc0000 [ 128.852853][ T950] hsr_slave_0: left promiscuous mode [ 128.856855][ T29] audit: type=1326 audit(1718038226.649:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526f47cf69 code=0x7ffc0000 [ 128.886107][ T950] hsr_slave_1: left promiscuous mode [ 128.901239][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.925500][ T29] audit: type=1326 audit(1718038226.659:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f6067cf69 code=0x0 [ 128.927008][ T950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.972980][ T5896] loop4: detected capacity change from 0 to 2048 [ 129.020926][ T5896] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 129.038226][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.047901][ T29] audit: type=1326 audit(1718038226.679:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f526f47cf69 code=0x7ffc0000 [ 129.075561][ T950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.094625][ T5896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.171502][ T29] audit: type=1326 audit(1718038226.679:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526f47cf69 code=0x7ffc0000 [ 129.172213][ T950] veth1_macvtap: left promiscuous mode [ 129.263898][ T950] veth0_macvtap: left promiscuous mode [ 129.264965][ T29] audit: type=1326 audit(1718038226.679:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f526f47a6e7 code=0x7ffc0000 [ 129.275296][ T950] veth1_vlan: left promiscuous mode [ 129.305942][ T29] audit: type=1326 audit(1718038226.679:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f526f4403d9 code=0x7ffc0000 [ 129.328871][ T950] veth0_vlan: left promiscuous mode [ 130.307607][ T950] team0 (unregistering): Port device team_slave_1 removed [ 130.396120][ T950] team0 (unregistering): Port device team_slave_0 removed [ 131.101193][ T5902] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.543804][ T5919] loop1: detected capacity change from 0 to 1024 [ 131.552598][ T5922] loop4: detected capacity change from 0 to 2048 [ 131.629006][ T5922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.685966][ T5919] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 131.728692][ T5922] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 132.778645][ T5942] loop1: detected capacity change from 0 to 2048 [ 132.874171][ T5942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.997358][ T5952] loop2: detected capacity change from 0 to 2048 [ 133.096337][ T5958] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.105637][ T5958] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.115274][ T5958] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.125240][ T5958] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.148776][ T5952] loop2: p1 < > p3 [ 133.170801][ T5952] loop2: p3 size 134217728 extends beyond EOD, truncated [ 133.351667][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.364878][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.782799][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 133.782818][ T29] audit: type=1400 audit(1718038231.879:301): avc: denied { connect } for pid=5981 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.984389][ T5988] loop2: detected capacity change from 0 to 2048 [ 134.056256][ T5992] loop4: detected capacity change from 0 to 2048 [ 134.072272][ T5988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.113644][ T29] audit: type=1804 audit(1718038232.209:302): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2587843924/syzkaller.mbgvtI/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=1367 res=1 errno=0 [ 134.188775][ T5992] loop4: p1 < > p3 [ 134.205185][ T5992] loop4: p3 size 134217728 extends beyond EOD, truncated [ 134.248838][ T29] audit: type=1400 audit(1718038232.349:303): avc: denied { create } for pid=5996 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.309255][ T29] audit: type=1400 audit(1718038232.349:304): avc: denied { bind } for pid=5996 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.356608][ T29] audit: type=1400 audit(1718038232.349:305): avc: denied { name_bind } for pid=5996 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 134.436562][ T29] audit: type=1400 audit(1718038232.349:306): avc: denied { node_bind } for pid=5996 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 134.507015][ T29] audit: type=1400 audit(1718038232.349:307): avc: denied { listen } for pid=5996 comm="syz-executor.1" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.563744][ T29] audit: type=1400 audit(1718038232.369:308): avc: denied { connect } for pid=5996 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.626860][ T29] audit: type=1400 audit(1718038232.369:309): avc: denied { name_connect } for pid=5996 comm="syz-executor.1" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 134.696586][ T29] audit: type=1400 audit(1718038232.399:310): avc: denied { getopt } for pid=5996 comm="syz-executor.1" laddr=127.0.0.1 lport=58354 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 135.014427][ T6011] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 135.580571][ T6023] loop3: detected capacity change from 0 to 2048 [ 135.675600][ T6023] loop3: p1 < > p3 [ 135.690935][ T6023] loop3: p3 size 134217728 extends beyond EOD, truncated [ 135.730286][ T6026] loop4: detected capacity change from 0 to 2048 [ 135.791622][ T6026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.961162][ T6035] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.408274][ T6046] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.838283][ T6056] loop1: detected capacity change from 0 to 2048 [ 136.889875][ T6056] loop1: p1 < > p3 [ 136.909992][ T6056] loop1: p3 size 134217728 extends beyond EOD, truncated [ 137.308297][ T6071] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.317549][ T6071] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.326289][ T6071] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.336973][ T6071] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.362716][ T6066] netlink: 'syz-executor.3': attribute type 298 has an invalid length. [ 137.606710][ T5107] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 137.616209][ T5107] Bluetooth: hci4: Injecting HCI hardware error event [ 137.625078][ T5107] Bluetooth: hci4: hardware error 0x00 [ 138.421203][ T6084] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.010363][ T6094] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.079786][ T6091] loop3: detected capacity change from 0 to 2048 [ 139.174749][ T6091] loop3: p1 < > p3 [ 139.214522][ T6091] loop3: p3 size 134217728 extends beyond EOD, truncated [ 139.255534][ T6096] loop2: detected capacity change from 0 to 2048 [ 139.314771][ T6096] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.674940][ T5107] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 140.287689][ T6092] loop1: detected capacity change from 0 to 32768 [ 140.328391][ T6092] XFS: ikeep mount option is deprecated. [ 140.474234][ T6092] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 140.561870][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 140.561890][ T29] audit: type=1400 audit(1718038238.659:323): avc: denied { create } for pid=6122 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.643647][ T29] audit: type=1400 audit(1718038238.659:324): avc: denied { write } for pid=6122 comm="syz-executor.2" path="socket:[12441]" dev="sockfs" ino=12441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.719629][ T6092] XFS (loop1): Ending clean mount [ 140.720018][ T6124] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.775835][ T6092] XFS (loop1): Quotacheck needed: Please wait. [ 141.166777][ T6092] XFS (loop1): Quotacheck: Done. [ 141.286922][ T29] audit: type=1400 audit(1718038239.379:325): avc: denied { setattr } for pid=6090 comm="syz-executor.1" name="file1" dev="loop1" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.564990][ T5113] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 141.631085][ T6154] loop3: detected capacity change from 0 to 2048 [ 141.705927][ T6154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.169695][ T29] audit: type=1400 audit(1718038240.269:326): avc: denied { append } for pid=6161 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.477845][ T29] audit: type=1400 audit(1718038240.579:327): avc: denied { shutdown } for pid=6166 comm="syz-executor.0" lport=59273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.654538][ T29] audit: type=1400 audit(1718038240.749:328): avc: denied { write } for pid=6166 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.145365][ T6188] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.444528][ T6193] loop1: detected capacity change from 0 to 2048 [ 143.482452][ T6193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.661904][ T6199] loop2: detected capacity change from 0 to 128 [ 143.713144][ T6199] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.838010][ T6204] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.968087][ T29] audit: type=1400 audit(1718038242.069:329): avc: denied { getopt } for pid=6203 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.299478][ T29] audit: type=1400 audit(1718038242.399:330): avc: denied { create } for pid=6210 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 144.409726][ T29] audit: type=1400 audit(1718038242.499:331): avc: denied { ioctl } for pid=6210 comm="syz-executor.1" path="socket:[12690]" dev="sockfs" ino=12690 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.450333][ T29] audit: type=1400 audit(1718038242.509:332): avc: denied { create } for pid=6210 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.505202][ T6234] loop0: detected capacity change from 0 to 128 [ 145.578557][ T6234] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.775879][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 145.775897][ T29] audit: type=1400 audit(1718038243.869:340): avc: denied { ioctl } for pid=6238 comm="syz-executor.4" path="socket:[12757]" dev="sockfs" ino=12757 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.874546][ T29] audit: type=1400 audit(1718038243.969:341): avc: denied { read write } for pid=6240 comm="syz-executor.0" name="video3" dev="devtmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 145.958312][ T29] audit: type=1400 audit(1718038243.969:342): avc: denied { open } for pid=6240 comm="syz-executor.0" path="/dev/video3" dev="devtmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 146.111434][ T29] audit: type=1400 audit(1718038244.159:343): avc: denied { create } for pid=6244 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.205551][ T29] audit: type=1400 audit(1718038244.299:344): avc: denied { name_bind } for pid=6250 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 146.234802][ T6253] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.399742][ T6229] loop1: detected capacity change from 0 to 32768 [ 146.438945][ T29] audit: type=1400 audit(1718038244.539:345): avc: denied { bind } for pid=6257 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.509878][ T29] audit: type=1400 audit(1718038244.559:346): avc: denied { node_bind } for pid=6257 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 146.581139][ T29] audit: type=1400 audit(1718038244.559:347): avc: denied { name_bind } for pid=6257 comm="syz-executor.3" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 146.827666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.935855][ T6229] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 146.948080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.956848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 146.984869][ T6229] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 147.082137][ T6229] bcachefs (loop1): alloc_read... done [ 147.116618][ T6229] bcachefs (loop1): stripes_read... done [ 147.122425][ T6229] bcachefs (loop1): snapshots_read... done [ 147.145655][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.172298][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.199355][ T6229] bcachefs (loop1): journal_replay... done [ 147.221698][ T6229] bcachefs (loop1): resume_logged_ops... done [ 147.238454][ T6229] bcachefs (loop1): going read-write [ 147.288623][ T6229] bcachefs (loop1): done starting filesystem [ 147.348033][ T29] audit: type=1400 audit(1718038245.439:348): avc: denied { quotamod } for pid=6227 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 147.540468][ T6286] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 147.559066][ T6286] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.569318][ T5113] bcachefs (loop1): shutting down [ 147.585744][ T29] audit: type=1400 audit(1718038245.669:349): avc: denied { read write } for pid=6283 comm="syz-executor.3" name="virtual_nci" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.614516][ T5113] bcachefs (loop1): going read-only [ 147.640500][ T5113] bcachefs (loop1): finished waiting for writes to stop [ 147.681022][ T5113] bcachefs (loop1): flushing journal and stopping allocators, journal seq 9 [ 147.711331][ T5113] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 147.731187][ T5113] bcachefs (loop1): shutdown complete, journal seq 11 [ 147.741797][ T5113] bcachefs (loop1): marking filesystem clean [ 147.749444][ T6294] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 147.765969][ T6286] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 147.777872][ T6286] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.855560][ T5113] bcachefs (loop1): shutdown complete [ 148.192263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 149.227356][ T6331] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 149.264462][ T6329] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 149.278992][ T6329] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.440901][ T6340] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.523804][ T6340] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 149.582845][ T6331] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 149.642755][ T6331] bond1 (unregistering): Released all slaves [ 149.935755][ T6334] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 149.973222][ T6334] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.622811][ T6362] Cannot find add_set index 0 as target [ 150.892105][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 150.892124][ T29] audit: type=1400 audit(1718038248.989:366): avc: denied { setopt } for pid=6363 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.965572][ T29] audit: type=1400 audit(1718038249.019:367): avc: denied { connect } for pid=6363 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.028633][ T29] audit: type=1400 audit(1718038249.019:368): avc: denied { ioctl } for pid=6363 comm="syz-executor.2" path="socket:[13040]" dev="sockfs" ino=13040 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.299895][ T29] audit: type=1400 audit(1718038249.389:369): avc: denied { connect } for pid=6368 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.857383][ T6380] tipc: Started in network mode [ 151.876399][ T6380] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 151.910009][ T6380] tipc: Enabling of bearer rejected, failed to enable media [ 152.099265][ T29] audit: type=1400 audit(1718038250.199:370): avc: denied { accept } for pid=6384 comm="syz-executor.0" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.137053][ T29] audit: type=1400 audit(1718038250.229:371): avc: denied { read } for pid=6384 comm="syz-executor.0" laddr=127.0.0.1 lport=35868 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.158874][ T6387] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 152.197957][ T6387] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.198904][ T29] audit: type=1804 audit(1718038250.229:372): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2587843924/syzkaller.mbgvtI/93/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 152.251908][ T29] audit: type=1400 audit(1718038250.279:373): avc: denied { write } for pid=6384 comm="syz-executor.0" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=35868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.334732][ T6392] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 152.373328][ T6392] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.654478][ T6399] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 152.711095][ T6399] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 152.781482][ T6400] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96 [ 152.871497][ T6400] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 153.066391][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.085688][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.751455][ T29] audit: type=1400 audit(1718038251.839:374): avc: denied { create } for pid=6422 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 153.865911][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.929232][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.307871][ T6399] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.326627][ T6399] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.346770][ T6399] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.365979][ T6399] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.576543][ T6399] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.585472][ T6399] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.594866][ T6399] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.604377][ T6399] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.642877][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.685583][ T6423] dummy0: entered promiscuous mode [ 154.704768][ T6423] dummy0: left promiscuous mode [ 155.957166][ T6436] loop0: detected capacity change from 0 to 32768 [ 156.558868][ T6461] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 156.610376][ T6461] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 156.696905][ T6468] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 156.922263][ T6455] loop3: detected capacity change from 0 to 32768 [ 157.063753][ T6475] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.177312][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.185646][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.412759][ T6455] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 157.443410][ T6455] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 157.451827][ T29] audit: type=1400 audit(1718038255.539:375): avc: denied { ioctl } for pid=6484 comm="syz-executor.4" path="socket:[13269]" dev="sockfs" ino=13269 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.530852][ T6455] bcachefs (loop3): alloc_read... done [ 157.551076][ T6455] bcachefs (loop3): stripes_read... done [ 157.561758][ T6455] bcachefs (loop3): snapshots_read... done [ 157.573469][ T29] audit: type=1400 audit(1718038255.669:376): avc: denied { getopt } for pid=6484 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.613585][ T6455] bcachefs (loop3): journal_replay... done [ 157.627883][ T6455] bcachefs (loop3): resume_logged_ops... done [ 157.634645][ T6455] bcachefs (loop3): going read-write [ 157.655045][ T6455] bcachefs (loop3): done starting filesystem [ 157.690636][ T29] audit: type=1400 audit(1718038255.789:377): avc: denied { read } for pid=6454 comm="syz-executor.3" path="/root/syzkaller-testdir3962163429/syzkaller.rmR1k9/41/file0/bus" dev="loop3" ino=4100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.772235][ T29] audit: type=1800 audit(1718038255.819:378): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4100 res=0 errno=0 [ 157.808684][ T29] audit: type=1804 audit(1718038255.829:379): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3962163429/syzkaller.rmR1k9/41/file0/bus" dev="loop3" ino=4100 res=1 errno=0 [ 157.840344][ T5321] bcachefs (loop3): shutting down [ 157.845406][ T5321] bcachefs (loop3): going read-only [ 157.912654][ T5321] bcachefs (loop3): finished waiting for writes to stop [ 157.927228][ T5321] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 157.966644][ T5321] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 157.991966][ T5321] bcachefs (loop3): shutdown complete, journal seq 11 [ 158.017922][ T5321] bcachefs (loop3): marking filesystem clean [ 158.045441][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.052979][ T29] audit: type=1400 audit(1718038256.099:380): avc: denied { write } for pid=6493 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.105962][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.129227][ T5321] bcachefs (loop3): shutdown complete [ 158.334752][ T6461] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.345131][ T6461] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.354153][ T6461] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.363223][ T6461] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.560197][ T6475] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 158.808804][ T29] audit: type=1400 audit(1718038256.899:381): avc: denied { create } for pid=6497 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.897457][ T29] audit: type=1804 audit(1718038256.959:382): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3052944033/syzkaller.gtKj1t/82/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 158.924102][ T6506] Zero length message leads to an empty skb [ 159.279314][ T6511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6511 comm=syz-executor.2 [ 159.421890][ T6516] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 159.558795][ T29] audit: type=1804 audit(1718038257.659:383): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3202579957/syzkaller.eZOryS/62/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 159.617564][ T6525] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 159.643290][ T6499] loop1: detected capacity change from 0 to 32768 [ 159.716639][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 159.732984][ T6525] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 159.779803][ T6525] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 159.821433][ T6525] bond1 (unregistering): Released all slaves [ 160.017986][ T29] audit: type=1400 audit(1718038258.119:384): avc: denied { ioctl } for pid=6532 comm="syz-executor.0" path="socket:[14465]" dev="sockfs" ino=14465 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 160.244179][ T6542] bridge0: entered allmulticast mode [ 160.284024][ T6542] bridge0: left allmulticast mode [ 160.452336][ T6546] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.498039][ T6546] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 161.119862][ T6572] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 161.330852][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.369104][ T6575] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 161.592893][ T6576] dccp_close: ABORT with 335 bytes unread [ 161.616797][ T6579] veth0_vlan: entered allmulticast mode [ 161.631410][ T6559] loop2: detected capacity change from 0 to 32768 [ 161.641864][ T6579] veth0_vlan: left promiscuous mode [ 161.662341][ T6579] veth0_vlan: entered promiscuous mode [ 161.837680][ T6583] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.143754][ T6591] bridge0: entered allmulticast mode [ 162.186044][ T6591] bridge0: left allmulticast mode [ 162.559396][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 162.559415][ T29] audit: type=1400 audit(1718038260.659:387): avc: denied { create } for pid=6596 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 162.645825][ T29] audit: type=1400 audit(1718038260.679:388): avc: denied { setopt } for pid=6596 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 162.760513][ T29] audit: type=1400 audit(1718038260.859:389): avc: denied { create } for pid=6600 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 162.801947][ T6603] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 163.073538][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 163.140596][ T6605] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 163.248073][ T6585] loop1: detected capacity change from 0 to 32768 [ 163.271425][ T6585] XFS: ikeep mount option is deprecated. [ 163.340954][ T6585] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 163.449629][ T6585] XFS (loop1): Ending clean mount [ 163.518019][ T6585] XFS (loop1): Quotacheck needed: Please wait. [ 163.630358][ T6585] XFS (loop1): Quotacheck: Done. [ 163.858277][ T5113] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 164.179443][ T29] audit: type=1804 audit(1718038262.279:390): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2587843924/syzkaller.mbgvtI/106/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 164.676244][ T6616] loop0: detected capacity change from 0 to 32768 [ 165.319575][ T6632] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.839626][ T6644] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 165.873238][ T6626] loop1: detected capacity change from 0 to 40427 [ 165.939461][ T6626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.032256][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 166.084721][ T6648] bond2: (slave batadv3): Enslaving as a backup interface with an up link [ 166.176669][ T6626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.313726][ T5113] syz-executor.1: attempt to access beyond end of device [ 166.313726][ T5113] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.336967][ T5113] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 166.663661][ T29] audit: type=1804 audit(1718038264.749:391): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2587843924/syzkaller.mbgvtI/111/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 167.317599][ T6653] loop0: detected capacity change from 0 to 32768 [ 167.570693][ T6662] IPv6: NLM_F_REPLACE set, but no existing node found! [ 167.758007][ T6671] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.197414][ T6677] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.425931][ T6682] pim6reg1: entered promiscuous mode [ 168.436585][ T6682] pim6reg1: entered allmulticast mode [ 168.549420][ T29] audit: type=1400 audit(1718038266.649:392): avc: denied { ioctl } for pid=6685 comm="syz-executor.3" path="/dev/virtual_nci" dev="devtmpfs" ino=683 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.623278][ T29] audit: type=1326 audit(1718038266.719:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f6067cf69 code=0x0 [ 168.956212][ T6673] loop1: detected capacity change from 0 to 32768 [ 168.981928][ T6673] XFS: ikeep mount option is deprecated. [ 169.033242][ T6673] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 169.143612][ T6673] XFS (loop1): Ending clean mount [ 169.191139][ T6673] XFS (loop1): Quotacheck needed: Please wait. [ 169.241760][ T6673] XFS (loop1): Quotacheck: Done. [ 169.337617][ T6684] loop0: detected capacity change from 0 to 40427 [ 169.360001][ T5113] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 169.393808][ T6684] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.447660][ T29] audit: type=1400 audit(1718038267.539:394): avc: denied { create } for pid=6712 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 169.568006][ T29] audit: type=1400 audit(1718038267.539:395): avc: denied { write } for pid=6712 comm="syz-executor.2" path="socket:[13968]" dev="sockfs" ino=13968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 169.636601][ T29] audit: type=1400 audit(1718038267.539:396): avc: denied { nlmsg_read } for pid=6712 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 169.786691][ T6684] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.986415][ T5102] syz-executor.0: attempt to access beyond end of device [ 169.986415][ T5102] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.005832][ T5102] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 170.119117][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.138843][ T6729] Illegal XDP return value 4294967294 on prog (id 79) dev N/A, expect packet loss! [ 170.412860][ T6738] sctp: [Deprecated]: syz-executor.3 (pid 6738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.412860][ T6738] Use struct sctp_sack_info instead [ 170.666586][ T6718] loop2: detected capacity change from 0 to 32768 [ 170.783438][ T29] audit: type=1400 audit(1718038268.879:397): avc: denied { setopt } for pid=6747 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.823884][ T29] audit: type=1400 audit(1718038268.879:398): avc: denied { bind } for pid=6747 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.886640][ T29] audit: type=1400 audit(1718038268.979:399): avc: denied { write } for pid=6747 comm="syz-executor.1" path="socket:[14076]" dev="sockfs" ino=14076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.929939][ T6718] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 170.963226][ T6718] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 171.074213][ T6718] bcachefs (loop2): alloc_read... done [ 171.096518][ T6718] bcachefs (loop2): stripes_read... done [ 171.108634][ T6718] bcachefs (loop2): snapshots_read... done [ 171.148134][ T6718] bcachefs (loop2): going read-write [ 171.158172][ T6718] bcachefs (loop2): journal_replay... done [ 171.251379][ T6718] bcachefs (loop2): resume_logged_ops... done [ 171.286565][ T6718] bcachefs (loop2): delete_dead_inodes... done [ 171.315440][ T6718] bcachefs (loop2): done starting filesystem [ 171.411911][ T6718] bcachefs (loop2): dirent to missing inode: [ 171.411911][ T6718] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 171.477880][ T6407] bcachefs (loop2): going read-only [ 171.483166][ T6718] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 11 [ 171.496559][ T6407] bcachefs (loop2): finished waiting for writes to stop [ 171.556160][ T6735] loop4: detected capacity change from 0 to 32768 [ 171.580780][ T6735] XFS: ikeep mount option is deprecated. [ 171.641007][ T6735] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 171.726877][ T6735] XFS (loop4): Ending clean mount [ 171.749652][ T6735] XFS (loop4): Quotacheck needed: Please wait. [ 171.778918][ T6407] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 171.803540][ T6407] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 171.813855][ T5118] bcachefs (loop2): shutting down [ 171.837897][ T6407] bcachefs (loop2): unshutdown complete, journal seq 11 [ 171.867301][ T6407] bcachefs (loop2): done going read-only, filesystem not clean [ 171.881899][ T6735] XFS (loop4): Quotacheck: Done. [ 171.906898][ T5118] bcachefs (loop2): shutdown complete [ 172.035502][ T5303] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 172.123127][ T29] audit: type=1800 audit(1718038270.219:400): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 172.214409][ T29] audit: type=1804 audit(1718038270.279:401): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3962163429/syzkaller.rmR1k9/53/bus" dev="sda1" ino=1948 res=1 errno=0 [ 173.345805][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.374258][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.392693][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.407049][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.427024][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.434617][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.563980][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.618600][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.640916][ T6777] loop1: detected capacity change from 0 to 40427 [ 173.657380][ T6791] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.706180][ T6777] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.717300][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.729510][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.928283][ T6777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.942930][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.976598][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.037468][ T5113] syz-executor.1: attempt to access beyond end of device [ 174.037468][ T5113] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.054958][ T5113] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 174.115544][ T6805] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.146764][ T6805] openvswitch: netlink: Multiple metadata blocks provided [ 174.203059][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.235705][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.925991][ T11] bridge_slave_1: left allmulticast mode [ 174.948941][ T11] bridge_slave_1: left promiscuous mode [ 174.954804][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.999273][ T6829] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.036546][ T6829] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.047481][ T11] bridge_slave_0: left allmulticast mode [ 175.053159][ T11] bridge_slave_0: left promiscuous mode [ 175.066799][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.086834][ T29] audit: type=1400 audit(1718038273.179:402): avc: denied { search } for pid=4517 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.162385][ T6813] loop2: detected capacity change from 0 to 32768 [ 175.174732][ T6813] XFS: ikeep mount option is deprecated. [ 175.215064][ T6813] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 175.416533][ T6813] XFS (loop2): Ending clean mount [ 175.460713][ T6813] XFS (loop2): Quotacheck needed: Please wait. [ 175.502412][ T29] audit: type=1400 audit(1718038273.599:403): avc: denied { create } for pid=6846 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.508035][ T5114] Bluetooth: hci2: command tx timeout [ 175.552531][ T29] audit: type=1400 audit(1718038273.639:404): avc: denied { create } for pid=6845 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 175.574650][ T29] audit: type=1400 audit(1718038273.649:405): avc: denied { ioctl } for pid=6845 comm="syz-executor.0" path="socket:[15000]" dev="sockfs" ino=15000 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 175.649786][ T6813] XFS (loop2): Quotacheck: Done. [ 175.841228][ T5118] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 176.927301][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.997816][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.045882][ T6855] loop4: detected capacity change from 0 to 40427 [ 177.073271][ T11] bond0 (unregistering): Released all slaves [ 177.119706][ T6788] chnl_net:caif_netlink_parms(): no params data found [ 177.132563][ T6855] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.177467][ T6880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=110 sclass=netlink_route_socket pid=6880 comm=syz-executor.1 [ 177.269296][ T29] audit: type=1400 audit(1718038275.359:406): avc: denied { ioctl } for pid=6876 comm="syz-executor.1" path="socket:[15557]" dev="sockfs" ino=15557 ioctlcmd=0x73 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.442180][ T29] audit: type=1400 audit(1718038275.539:407): avc: denied { block_suspend } for pid=6876 comm="syz-executor.1" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.445078][ T6855] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 177.586374][ T5303] syz-executor.4: attempt to access beyond end of device [ 177.586374][ T5303] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.589272][ T5114] Bluetooth: hci2: command tx timeout [ 177.623359][ T5303] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 177.729689][ T6887] Bluetooth: MGMT ver 1.22 [ 177.738011][ T29] audit: type=1400 audit(1718038275.829:408): avc: denied { bind } for pid=6886 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.030262][ T6896] can: request_module (can-proto-0) failed. [ 178.054969][ T11] hsr_slave_0: left promiscuous mode [ 178.073052][ T11] hsr_slave_1: left promiscuous mode [ 178.088093][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.096932][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.166886][ T29] audit: type=1400 audit(1718038276.259:409): avc: denied { setopt } for pid=6895 comm="syz-executor.2" laddr=::ffff:172.20.20.0 lport=20000 faddr=::ffff:172.20.20.10 fport=46400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 178.195762][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.216735][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.311638][ T11] veth1_macvtap: left promiscuous mode [ 178.327237][ T11] veth0_macvtap: left promiscuous mode [ 178.346894][ T11] veth1_vlan: left promiscuous mode [ 178.352318][ T11] veth0_vlan: left promiscuous mode [ 178.779675][ T6894] loop0: detected capacity change from 0 to 32768 [ 178.798487][ T6894] XFS: ikeep mount option is deprecated. [ 178.896337][ T6894] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 179.019498][ T6894] XFS (loop0): Ending clean mount [ 179.065986][ T6894] XFS (loop0): Quotacheck needed: Please wait. [ 179.118789][ T6913] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 179.121552][ T6894] XFS (loop0): Quotacheck: Done. [ 179.130520][ T6913] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 179.198311][ T6913] dccp_xmit_packet: Payload too large (65475) for featneg. [ 179.236549][ T6913] dccp_close: ABORT with 65475 bytes unread [ 179.282851][ T5102] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 179.432155][ T6918] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.667031][ T5114] Bluetooth: hci2: command tx timeout [ 180.060600][ T11] team0 (unregistering): Port device team_slave_1 removed [ 180.141010][ T11] team0 (unregistering): Port device team_slave_0 removed [ 180.293063][ T29] audit: type=1400 audit(1718038278.389:410): avc: denied { read } for pid=6932 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.049914][ T6896] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 181.105881][ T6896] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.167127][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.174324][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.226971][ T6788] bridge_slave_0: entered allmulticast mode [ 181.255898][ T6788] bridge_slave_0: entered promiscuous mode [ 181.285166][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.287787][ T6945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=110 sclass=netlink_route_socket pid=6945 comm=syz-executor.2 [ 181.314667][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.346805][ T6788] bridge_slave_1: entered allmulticast mode [ 181.361491][ T6788] bridge_slave_1: entered promiscuous mode [ 181.384922][ T29] audit: type=1400 audit(1718038279.479:411): avc: denied { setopt } for pid=6949 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.386492][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.568373][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.614094][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.753775][ T5114] Bluetooth: hci2: command tx timeout [ 181.813907][ T6788] team0: Port device team_slave_0 added [ 181.850352][ T6788] team0: Port device team_slave_1 added [ 182.031848][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.053466][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.115576][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.182520][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.216494][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.294121][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.448671][ T6946] loop1: detected capacity change from 0 to 32768 [ 182.457261][ T6946] XFS: ikeep mount option is deprecated. [ 182.500478][ T6788] hsr_slave_0: entered promiscuous mode [ 182.529642][ T6788] hsr_slave_1: entered promiscuous mode [ 182.538082][ T6946] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 182.641036][ T6946] XFS (loop1): Ending clean mount [ 182.659975][ T6946] XFS (loop1): Quotacheck needed: Please wait. [ 182.730150][ T6981] can: request_module (can-proto-0) failed. [ 182.775056][ T6946] XFS (loop1): Quotacheck: Done. [ 182.891099][ T6986] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 182.901670][ T5113] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 182.920806][ T6986] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.518680][ T29] audit: type=1400 audit(1718038281.609:412): avc: denied { bind } for pid=6989 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.707546][ T6788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.753858][ T6788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.794810][ T6788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.859342][ T6788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.881084][ T29] audit: type=1400 audit(1718038281.979:413): avc: denied { read } for pid=7004 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.956881][ T7013] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.975351][ T7013] 0ªX¹¦À: renamed from caif0 [ 184.008089][ T7013] 0ªX¹¦À: entered allmulticast mode [ 184.030046][ T7013] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 184.119958][ T7017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=110 sclass=netlink_route_socket pid=7017 comm=syz-executor.4 [ 184.524555][ T7029] can: request_module (can-proto-0) failed. [ 184.542561][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.601030][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.645584][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.652826][ T6424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.786361][ T7039] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 184.830834][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.838105][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.980493][ T7043] batadv0: entered promiscuous mode [ 184.992915][ T7043] veth0: entered promiscuous mode [ 185.001196][ T7043] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 185.014941][ T7045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7045 comm=syz-executor.2 [ 185.028296][ T7043] hsr1: Slave B (veth0) is not up; please bring it up to get a fully working HSR network [ 185.041789][ T29] audit: type=1400 audit(1718038283.139:414): avc: denied { read } for pid=7044 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 185.142820][ T6788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.641127][ T7067] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 185.691218][ T7067] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 185.922284][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.143397][ T6788] veth0_vlan: entered promiscuous mode [ 186.185883][ T6788] veth1_vlan: entered promiscuous mode [ 186.349188][ T6788] veth0_macvtap: entered promiscuous mode [ 186.382337][ T6788] veth1_macvtap: entered promiscuous mode [ 186.454260][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.495113][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.518899][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.570469][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.607152][ T7070] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 186.619199][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.684560][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.716617][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.746999][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.774644][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.805000][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.824906][ T7101] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 187.627633][ T7104] bond3 (unregistering): Released all slaves [ 187.721960][ T6788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.754638][ T6788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.764683][ T6788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.786062][ T6788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.964468][ T7115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=110 sclass=netlink_route_socket pid=7115 comm=syz-executor.0 [ 188.054926][ T7118] bridge0: port 3(geneve1) entered blocking state [ 188.086610][ T7118] bridge0: port 3(geneve1) entered disabled state [ 188.093649][ T7118] geneve1: entered allmulticast mode [ 188.116571][ T7118] geneve1: entered promiscuous mode [ 188.157643][ T2464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.196123][ T2464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.368807][ T3672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.390506][ T3672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.792449][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.065237][ T7142] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 189.762051][ T7142] bond2 (unregistering): Released all slaves [ 189.884523][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.654901][ T7180] vlan0: entered promiscuous mode [ 190.886006][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.583137][ T7180] vlan0 (unregistering): left promiscuous mode [ 191.644653][ T7184] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 191.669683][ T7190] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 191.753627][ T7194] Bluetooth: MGMT ver 1.22 [ 191.900824][ T7195] bond2 (unregistering): Released all slaves [ 192.229844][ T7218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7218 comm=syz-executor.0 [ 192.269495][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.316897][ T7218] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 192.347682][ T7218] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 192.381753][ T7218] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 192.574939][ T7225] vlan0: entered promiscuous mode [ 192.667654][ T7225] vlan0 (unregistering): left promiscuous mode [ 192.792184][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.932635][ T7211] infiniband syz0: set active [ 192.947390][ T7211] infiniband syz0: added veth0_vlan [ 192.970880][ T7211] syz0: rxe_create_cq: returned err = -12 [ 193.008275][ T7211] infiniband syz0: Couldn't create ib_mad CQ [ 193.047377][ T7211] infiniband syz0: Couldn't open port 1 [ 193.165115][ T7211] RDS/IB: syz0: added [ 193.172907][ T7211] smc: adding ib device syz0 with port count 1 [ 193.180130][ T7211] smc: ib device syz0 port 1 has pnetid [ 193.228421][ T7241] syz-executor.2[7241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.229162][ T7241] syz-executor.2[7241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.666700][ T7242] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 193.974526][ T7242] bond3 (unregistering): Released all slaves [ 194.380303][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.602437][ T7269] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 194.626603][ T7269] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.652420][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.682246][ T29] audit: type=1400 audit(1718038292.779:415): avc: denied { read } for pid=7270 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.706700][ T7269] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.791865][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.798421][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.884848][ T7280] syz-executor.1[7280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.885046][ T7280] syz-executor.1[7280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.652091][ T7304] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 197.685126][ T7304] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.694935][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.704492][ T7304] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.469650][ T4479] Bluetooth: hci0: command 0x0406 tx timeout [ 222.657357][ T4479] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.667301][ T4479] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.675972][ T4479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.685002][ T4479] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.695924][ T4479] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 222.703535][ T4479] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.796830][ T5114] Bluetooth: hci5: command tx timeout [ 226.866789][ T5114] Bluetooth: hci5: command tx timeout [ 226.985271][ T4479] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.999139][ T4479] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 227.007432][ T4479] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 227.016637][ T4479] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 227.024566][ T4479] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 227.032381][ T4479] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.217588][ T4479] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.244080][ T4479] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.257166][ T4479] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.268923][ T5111] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.276947][ T5111] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 228.284618][ T5107] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 228.294523][ T5111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.303402][ T5107] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 228.312130][ T5111] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 228.346801][ T5111] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 228.357274][ T5111] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 228.366911][ T5111] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 228.550302][ T5111] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 228.577027][ T5111] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 228.585588][ T5111] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 228.595557][ T5111] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 228.603747][ T5111] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 228.611404][ T5111] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 228.947045][ T4479] Bluetooth: hci5: command tx timeout [ 229.107155][ T4479] Bluetooth: hci6: command tx timeout [ 230.386893][ T4479] Bluetooth: hci7: command tx timeout [ 230.466812][ T4479] Bluetooth: hci8: command tx timeout [ 230.707082][ T4479] Bluetooth: hci9: command tx timeout [ 231.026868][ T4479] Bluetooth: hci5: command tx timeout [ 231.186528][ T4479] Bluetooth: hci6: command tx timeout [ 232.466849][ T4479] Bluetooth: hci7: command tx timeout [ 232.547023][ T4479] Bluetooth: hci8: command tx timeout [ 232.787098][ T4479] Bluetooth: hci9: command tx timeout [ 233.266704][ T4479] Bluetooth: hci6: command tx timeout [ 234.546985][ T4479] Bluetooth: hci7: command tx timeout [ 234.627191][ T4479] Bluetooth: hci8: command tx timeout [ 234.866972][ T4479] Bluetooth: hci9: command tx timeout [ 235.358003][ T4479] Bluetooth: hci6: command tx timeout [ 236.627120][ T4479] Bluetooth: hci7: command tx timeout [ 236.706997][ T4479] Bluetooth: hci8: command tx timeout [ 236.956689][ T4479] Bluetooth: hci9: command tx timeout [ 256.257200][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.263540][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.973096][ T5111] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 287.983519][ T5111] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 287.992496][ T5111] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 288.015828][ T5111] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 288.034735][ T5111] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 288.042617][ T5111] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 290.146911][ T4479] Bluetooth: hci10: command tx timeout [ 292.057190][ T5111] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 292.076951][ T5114] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 292.085587][ T5114] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 292.096012][ T5114] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 292.108870][ T5114] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 292.119240][ T5114] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 292.226627][ T4479] Bluetooth: hci10: command tx timeout [ 293.253893][ T5114] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 293.265043][ T5114] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 293.276985][ T5114] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 293.322463][ T5114] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 293.332327][ T5114] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 293.341355][ T5114] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 293.549967][ T5114] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 293.561676][ T5114] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 293.570519][ T5114] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 293.579248][ T5114] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 293.593042][ T5114] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 293.601442][ T5114] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 293.610116][ T5114] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 293.620842][ T5107] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 293.645511][ T5107] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 293.655798][ T5107] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 293.667166][ T5107] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 293.676630][ T5107] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 294.146886][ T5107] Bluetooth: hci11: command tx timeout [ 294.313825][ T5107] Bluetooth: hci10: command tx timeout [ 295.429510][ T5107] Bluetooth: hci12: command tx timeout [ 295.666832][ T5107] Bluetooth: hci13: command tx timeout [ 295.747625][ T5107] Bluetooth: hci14: command tx timeout [ 296.238092][ T5107] Bluetooth: hci11: command tx timeout [ 296.396663][ T5107] Bluetooth: hci10: command tx timeout [ 297.506701][ T5111] Bluetooth: hci12: command tx timeout [ 297.746738][ T5111] Bluetooth: hci13: command tx timeout [ 297.827874][ T5111] Bluetooth: hci14: command tx timeout [ 298.307009][ T5111] Bluetooth: hci11: command tx timeout [ 299.268366][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 299.596658][ T5107] Bluetooth: hci12: command tx timeout [ 299.826724][ T5107] Bluetooth: hci13: command tx timeout [ 299.906698][ T5107] Bluetooth: hci14: command tx timeout [ 300.386739][ T5107] Bluetooth: hci11: command tx timeout [ 301.666710][ T5107] Bluetooth: hci12: command tx timeout [ 301.906593][ T5107] Bluetooth: hci13: command tx timeout [ 301.986700][ T5107] Bluetooth: hci14: command tx timeout [ 317.677928][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.684276][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.347194][ T30] INFO: task syz-executor.4:7211 blocked for more than 143 seconds. [ 341.355243][ T30] Not tainted 6.10.0-rc3-syzkaller #0 [ 341.376647][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.385351][ T30] task:syz-executor.4 state:D stack:22096 pid:7211 tgid:7207 ppid:5303 flags:0x00004006 2024/06/10 16:53:59 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 341.412774][ T30] Call Trace: [ 341.466552][ T30] [ 341.469540][ T30] __schedule+0xf15/0x5d00 [ 341.474007][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 341.486394][ T30] ? __pfx___schedule+0x10/0x10 [ 341.491304][ T30] ? schedule+0x298/0x350 [ 341.495662][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.517771][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 341.523422][ T30] ? __mutex_trylock_common+0x78/0x250 [ 341.546406][ T30] schedule+0xe7/0x350 [ 341.550536][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.566435][ T30] __mutex_lock+0x5b8/0x9c0 [ 341.570998][ T30] ? ib_get_eth_speed+0x118/0xb50 [ 341.576072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.596424][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 341.601695][ T30] ? ib_get_eth_speed+0x118/0xb50 [ 341.616411][ T30] ib_get_eth_speed+0x118/0xb50 [ 341.622264][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 341.636421][ T30] ? kobject_add_internal+0x54e/0x990 [ 341.641840][ T30] rxe_query_port+0x72/0x200 [ 341.656384][ T30] ib_query_port+0x43e/0x8a0 [ 341.661016][ T30] ib_setup_port_attrs+0x1dd/0x5d0 [ 341.666161][ T30] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 341.696465][ T30] ? __init_waitqueue_head+0xca/0x150 [ 341.701988][ T30] add_one_compat_dev+0x4c5/0x720 [ 341.716403][ T30] enable_device_and_get+0x338/0x3f0 [ 341.721819][ T30] ? __pfx_enable_device_and_get+0x10/0x10 [ 341.746800][ T30] ? rdma_counter_init+0x1f8/0x3f0 [ 341.751971][ T30] ? __pfx_rxe_ib_alloc_hw_port_stats+0x10/0x10 [ 341.766393][ T30] ib_register_device+0x880/0xbf0 [ 341.771470][ T30] ? __pfx_ib_register_device+0x10/0x10 [ 341.788093][ T30] ? crypto_create_tfm_node+0x148/0x320 [ 341.793696][ T30] ? crypto_alloc_tfm_node+0x126/0x260 [ 341.816392][ T30] rxe_register_device+0x2fc/0x3d0 [ 341.821547][ T30] rxe_net_add+0x86/0xe0 [ 341.825821][ T30] rxe_newlink+0x70/0x190 [ 341.846418][ T30] nldev_newlink+0x38f/0x660 [ 341.851152][ T30] ? __pfx_nldev_newlink+0x10/0x10 [ 341.856315][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 341.874205][ T30] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 341.886386][ T30] ? cap_capable+0x1cf/0x240 [ 341.891010][ T30] ? ns_capable+0xd7/0x110 [ 341.895444][ T30] ? __pfx_nldev_newlink+0x10/0x10 [ 341.916514][ T30] rdma_nl_rcv_msg+0x388/0x6e0 [ 341.921421][ T30] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 341.946415][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 341.951667][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 341.966384][ T30] ? hlock_class+0x4e/0x130 [ 341.970927][ T30] ? __lock_acquire+0xc5d/0x3b30 [ 341.975893][ T30] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 341.996750][ T30] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 342.003747][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 342.026436][ T30] netlink_unicast+0x542/0x820 [ 342.032090][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 342.046415][ T30] netlink_sendmsg+0x8b8/0xd70 [ 342.051224][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.066560][ T30] ? __import_iovec+0x1fd/0x6e0 [ 342.071457][ T30] ____sys_sendmsg+0xab5/0xc90 [ 342.076261][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 342.096385][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.101719][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 342.116381][ T30] ? __lock_acquire+0x14f4/0x3b30 [ 342.121446][ T30] ___sys_sendmsg+0x135/0x1e0 [ 342.126144][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.147756][ T30] ? find_held_lock+0x2d/0x110 [ 342.152567][ T30] ? __fget_light+0x173/0x210 [ 342.166409][ T30] __sys_sendmsg+0x117/0x1f0 [ 342.171033][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.176166][ T30] do_syscall_64+0xcd/0x250 [ 342.197974][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.203924][ T30] RIP: 0033:0x7f526f47cf69 [ 342.226494][ T30] RSP: 002b:00007f52702800c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.234945][ T30] RAX: ffffffffffffffda RBX: 00007f526f5b4050 RCX: 00007f526f47cf69 [ 342.256386][ T30] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 342.264392][ T30] RBP: 00007f526f4da6fe R08: 0000000000000000 R09: 0000000000000000 [ 342.286413][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.294423][ T30] R13: 000000000000006e R14: 00007f526f5b4050 R15: 00007fff30baf998 [ 342.326401][ T30] [ 342.329477][ T30] INFO: task syz-executor.2:7298 blocked for more than 144 seconds. [ 342.346417][ T30] Not tainted 6.10.0-rc3-syzkaller #0 [ 342.352332][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.377855][ T30] task:syz-executor.2 state:D stack:27280 pid:7298 tgid:7297 ppid:5118 flags:0x00000006 [ 342.396416][ T30] Call Trace: [ 342.399718][ T30] [ 342.402659][ T30] __schedule+0xf15/0x5d00 [ 342.416386][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 342.421626][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 342.441703][ T30] ? find_held_lock+0x2d/0x110 [ 342.456399][ T30] ? __pfx___schedule+0x10/0x10 [ 342.461304][ T30] ? schedule+0x298/0x350 [ 342.465658][ T30] ? __pfx_lock_release+0x10/0x10 [ 342.487853][ T30] ? __mutex_lock+0x5b3/0x9